Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how OweYou ("we", "us", the "app") collects, uses, and protects your information when you use the OweYou mobile application for splitting shared expenses with friends and groups. By using OweYou, you agree to this policy.

1. Information we collect

Account information. You can sign in either with Google or with an email address and password, via our authentication provider (Supabase). If you sign in with Google, we receive your name, email address, and profile photo from your Google account — we do not see or store your Google password. If you sign in with email and password, we store your email address and a securely hashed password; we never see or store your password in plain text.
Content you create. The groups you create or join, group members, expenses, amounts, descriptions, payments, and settlements you enter into the app.
Device push token. If you enable notifications, we store an anonymous push token so we can send you alerts about group activity. You can turn this off any time in Settings.
Basic technical data. Limited information needed to operate the service (e.g. timestamps, sync state). We do not use third-party advertising or tracking SDKs.

2. How we use your information

To create and manage your account and let you sign in.
To provide the core features: groups, expenses, balances, and settlements.
To sync your data across your devices.
To send push notifications about activity in your groups (if enabled).
To keep the service secure and fix problems.

3. How your data is stored

OweYou is local-first: your data is stored on your device and synced to our backend (Supabase, which hosts our database and authentication). Data in transit is encrypted using HTTPS.

4. Sharing your information

We do not sell your personal data. We share information only:

With other members of your groups. People in a group can see your name and the expenses, amounts, and settlements within that shared group — this is the core purpose of the app.
With service providers that help us run the app: Google (sign-in), Supabase (database, authentication), and Expo (push notification delivery). They process data only to provide their service to us.
If required by law or to protect rights and safety.

5. Data retention and deletion

We keep your data while your account is active. You can delete your account and all associated data — including your groups, expenses, payments, and settlements — at any time. Signing out of the app also clears your data from that device.

To request deletion: see our Account & Data Deletion page for the full steps and timeframe, or email us at oweyou-support@googlegroups.com from your account email address.

6. Security

We use industry-standard measures to protect your information, including encrypted connections and access controls on our backend. No method of transmission or storage is 100% secure, but we work to protect your data.

7. Children

OweYou is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

8. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above when we do. Continued use of the app means you accept the updated policy.

9. Contact us

Questions about this policy? Email oweyou-support@googlegroups.com.