Privacy Policy
The short version: Allocate collects only what it needs to split expenses — your email, a display name, and the groups and expenses you create. No ads, no data sales, no tracking SDKs in the app. Delete your account in the app at any time and your data goes with it.
1. Who we are
Allocate ("we", "us") is an expense-splitting app operated by an independent developer. For anything in this policy, contact us at support@allocate.example.
2. What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address | Account sign-in, password reset, email confirmation | Supabase (our backend provider) |
| Display name | Shown to members of your groups | Supabase |
| Groups, expenses, payments | The core product: who paid what, and who owes whom | Supabase |
| Photos you attach (receipts, group icons, profile photo) | Only if you choose to add them | Supabase storage |
| Sign in with Apple identity token | Verifying your Apple sign-in; Apple may share a private relay email instead of your real one | Supabase auth |
3. What we do not collect
- No advertising identifiers, ad networks, or data brokers.
- No contact list, location, or phone number. When you "text an invite," the app opens your own Messages composer — we never see the recipient.
- No analytics or tracking SDKs inside the iOS app.
- No payment processing: Allocate records who owes whom, but money never moves through us.
4. Analytics on this website
This website (not the app) uses GoatCounter, a privacy-friendly analytics service, to count page views. It does not use cookies, does not collect personal data, and does not track you across sites. We see aggregate counts like "the privacy page was viewed 12 times today" and nothing about you as a person.
5. Where your data is stored
App data is stored with Supabase (Postgres database, authentication, and file storage). All traffic between the app, this site, and Supabase is encrypted with TLS. Access to data is restricted with row-level security so members of a group can only read that group's data — see our Security page for details.
A copy of your groups is also cached on your own device so the app works offline. That cache never leaves your device and is removed when you delete the app.
6. Who can see your data
Members of a group can see that group's members, expenses, payments, and each member's activity within the group — that is the product. People outside your groups can see nothing. We do not sell or share personal data with third parties for marketing.
7. How long we keep it
Your data is kept while your account exists. Deleting your account (Profile → Delete account, or the Data & Privacy form) permanently removes your profile, your memberships, and groups that would otherwise be orphaned. Backups held by our infrastructure provider expire on a rolling schedule.
8. Your rights
You can request a copy of your data, correct it, or have it deleted at any time — use the Data & Privacy forms or email us. If you are in the EU/EEA, UK, or California, these rights are backed by GDPR/CCPA and we honor them for everyone regardless of location.
9. Children
Allocate is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
10. Changes
If this policy changes materially, we will update the date at the top and note the change in the app's release notes.