Privacy Policy

Data controller: Halfsies. Privacy contact: help@halfsies.fun.

1. What we collect

We aim to collect only what’s needed to run Halfsies:

• Account details — your name and email address, and a hashed password. Passwords are stored using argon2 hashing; we never see or store your actual password.
• Your expense data — the groups, members, expenses, amounts, currencies, splits, notes, and settle-up records you create.
• Receipt images — photos you upload for receipt scanning, plus the line-item text extracted from them.
• Supporter / billing info — if you make a “Support Halfsies” contribution, our payment processor handles your card details (we never receive them); we store a record that you’re a supporter and limited transaction references.
• Basic technical data — standard server logs and a session cookie needed to keep you signed in (see Cookies below).

2. How we use it

• to provide the Service — store your expenses, calculate balances, and show them to you and the people in your groups;
• to read receipts you upload (extract line items so you don’t have to type them);
• to send transactional email — group invitations and password-reset messages;
• to process optional supporter contributions and show your ❤️ supporter status;
• to keep the Service secure, debug problems, and prevent abuse.

We do not sell your personal data, and we don’t use it for third-party advertising.

3. Service providers we share data with

We use a small number of trusted providers to operate Halfsies. They process data only to provide their service to us:

• Railway — cloud hosting and the database where your account and expense data live.
• Paddle — payment processing and merchant of record for supporter contributions. Paddle receives the data needed to take payment (e.g. your email and card details, which go directly to Paddle).
• Resend — sends transactional emails (invitations, password resets). Receives the recipient email address and message contents.
• Google (Gemini API) — reads receipt images you upload to extract line items. When you scan a receipt, that image is sent to Google’s Gemini API for text extraction.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of our users.

4. Receipt images & retention

Receipt images are automatically deleted 90 days after upload. The expense and the line-item details you saved are kept (so your records stay intact), but the original photo is purged. Your account and expense data are retained for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep limited records to comply with legal or tax obligations (for example, payment records held by our payment processor).

5. Cookies & sessions

Halfsies uses a single essential cookie to keep you securely signed in, and a small preference cookie to remember your light/dark theme. We do not use advertising or cross-site tracking cookies, and there are no third-party analytics trackers embedded in the app.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your name, email, and password in Settings at any time. For access or deletion requests, email help@halfsies.fun and we’ll respond within a reasonable timeframe. You may also have the right to complain to your local data-protection authority.

7. Data security

We use industry-standard measures to protect your data — encrypted connections (HTTPS), hashed passwords, and access controls so people only see the groups they belong to. No system is perfectly secure, but we work to keep your information safe and to address issues promptly.

8. International transfers

Our providers may process and store data in countries other than yours (for example, the United States). Where required, we rely on appropriate safeguards for such transfers.

9. Children

Halfsies isn’t directed to children under 13, and we don’t knowingly collect their personal data. If you believe a child has given us personal data, contact us and we’ll delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the “Effective” date above and, for material changes, notify you in the app or by email.

11. Contact

Questions or requests? Email help@halfsies.fun.