Privacy Policy

Last updated: July 11, 2026

1. Information We Collect

We collect the following information: (a) Account data: your name, email address, and password when you register with email, or your name and email provided by Google when you sign in with Google OAuth. (b) Bill and participant data: names, bill amounts, billing dates, notes, and payment links you enter into the app. (c) Payment data: your subscription plan status, managed by Stripe. We do not collect or store payment card details. (d) Usage data: anonymized analytics about how you use the app, collected via Google Analytics.

2. How We Use Your Information

We use your data solely to provide the ExpenDiv service: tracking bills, sending payment reminders, managing your account, and improving the app through aggregated analytics. We do not sell your data to third parties.

3. Email Reminders

If you add email addresses for participants, we may send payment reminder emails to those addresses on your behalf via Resend. You control when and whether these emails are sent. By adding a participant's email address, you confirm you have a legitimate basis to contact them.

4. Data Storage and Retention

Your data is stored securely using Supabase (PostgreSQL). Data is encrypted in transit and at rest. We retain your data for as long as your account is active. If you cancel your account or request deletion, we will delete your data within 30 days, except where retention is required by law.

5. Third-Party Services

We use the following third-party services that may process your data: Supabase (database and authentication), Stripe (payment processing), Resend (transactional email), Google OAuth (sign-in), and Google Analytics (anonymous usage analytics). Each service has its own privacy policy governing the data they process. Google Analytics uses aggregated, anonymized data and does not receive personally identifiable information from us.

6. Cookies and Local Storage

The web app uses local storage to maintain your session. Google Analytics may set cookies for anonymous analytics. We do not use advertising cookies or tracking cookies for behavioral targeting.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale of your personal information (we do not sell personal information); and (d) non-discrimination for exercising your privacy rights. To exercise these rights, contact us at support@expendiv.com.

8. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, to the extent required by applicable law. We will include a description of the breach, the data affected, and the steps we are taking to address it.

9. Data Deletion

You may request deletion of your account and all associated data at any time by contacting us at support@expendiv.com. We will process deletion requests within 30 days.

10. Contact

Questions about this policy? Email us at support@expendiv.com.