Privacy Policy

The short version

Evenly records what people owe each other after a shared trip or a shared dinner. It is not a payment service. It records what people owe each other; it never moves money.

To do that it stores your name, your email address and the expenses you enter. Three other things leave your phone, and they are the ones worth knowing about: a receipt photo goes to Anthropic to be read, a reminder goes through Google to reach someone else’s phone, and your email address and password go to Google to sign you in. Each has its own section below.

There is no analytics, no advertising and no tracking, and we do not sell anything to anybody.

What you give us, and what we do with it

When you create an account we store your name and your email address. You can add a phone number and change your default currency; both are optional and both are yours to edit or clear in Profile.

When you use Evenly we store what you enter: event names and dates, expense amounts and descriptions, how each expense was split, and the payments and settlements you record. Only members of an event can see its money.

When you add someone who has no Evenly account, we store their name so their share can be worked out. Nothing else about them is stored.

Your contacts stay on your phone. When you add someone, only the name you picked is sent to Evenly — never their phone number or email address. Evenly searches your address book on the device itself, which is why it asks for access at all; the results of that search are never transmitted.

All of it travels over HTTPS and is stored in a PostgreSQL database run for us by Supabase.

Receipt photos, and Anthropic

When you scan a receipt, Evenly reads the total off the photo for you. That reading does not happen on the phone. To read it, Evenly sends the photo to Anthropic’s Claude API.

A receipt can carry more than a total — the restaurant, the date, sometimes the last four digits of a card, sometimes another person’s name. So it is worth being exact about what happens to the picture.

Nothing that says whose photo it is goes with it. The request carries the image and an instruction to read the total; it does not carry your name, your email address, your account or the event.

Evenly keeps no copy of the photo. It passes through our server’s memory and is never written to a disk or a database. What we do store is a single line recording that a scan happened, so we can hold you to twenty scans a day; that line is your account id and a timestamp, and it is deleted with your account.

Anthropic’s terms say it does not train its models on what we send. Anthropic deletes what we send within 30 days, unless its safety systems flag a request or the law requires it to keep it for longer. Those are Anthropic’s published terms rather than our promise, and we last read them on 26 September 2026.

You never have to use it. The scan screen offers “Enter manually instead” before the shutter, and typing the amount in sends no photo anywhere. Once you have taken the photo it is already on its way, so backing out after that does not stop it.

Signing in, and reminders

Signing in is handled by Firebase Authentication, which is Google. Your email address and your password go to Google, which checks them and tells Evenly you are you. Evenly’s own servers never see your password.

If you turn notifications on, your phone gives Evenly a push token and we store it against your account. When someone reminds you about money, or confirms a payment made to you, the message travels through Google’s Firebase Cloud Messaging to reach your phone — and on an iPhone, Google hands it to Apple’s push service for the last step. Both see what the notification says.

A reminder carries the other person’s name and the event’s name. A confirmed payment also carries the amount. Alongside the words, the message carries internal reference numbers so that tapping it opens the right event.

We may keep it until you delete your account; deleting your account clears the stored token. If you want notifications to stop arriving, turn them off for Evenly in your phone’s own Settings — that is the switch your phone enforces.

What we don’t do

Evenly has no analytics, no advertising and no tracking, and does not collect a crash report or a usage statistic of any kind. There is no advertising identifier, no attribution and no third-party SDK watching what you tap.

We do not sell your data, and we do not share it with anyone beyond the three services named above — Supabase, which stores it; Anthropic, which reads receipt photos; and Google, which signs you in and delivers notifications. Exchange rates come from a service called Frankfurter, and that request carries a currency code and nothing about you at all.

Deleting your account

Profile → Delete account, and it happens straight away.

Deleting your account clears your name, email address, phone number and profile photo. Your login is removed, so you are signed out everywhere.

What stays is the arithmetic other people’s balances are made of, with your name replaced by “Deleted user”. If you paid for a dinner and three friends still owe you a share, deleting your account cannot erase that dinner without silently changing what those three owe each other — so the expense stays, with nobody’s name on it.

One thing to know before you do it: text you typed into a shared event stays visible to the people in that event. Expense descriptions, event names, and the names you gave people you added are part of what everyone else is reading, so they are not removed — and a description like “Kathy’s birthday dinner” can still name you.

Deleting your account does not settle money you owe or are owed. That is between you and the people you shared the event with.

Age

Evenly is for people aged 16 and over. We don’t knowingly collect data from anyone younger, and if we learn we have, we will delete it.

Changes, and getting in touch

If what leaves your phone changes, this page changes with it, and the date at the top moves. It is the same page in every copy of the app, so there is no version of Evenly running against a policy you have not seen.

You can also read it without the app, at https://evenly-privacy.pages.dev/ — after deleting your account, for example. That copy is served by Cloudflare, which sees what any website sees: your IP address and the kind of browser you use. The page loads nothing else.

Evenly is still being tested and has no contact address yet. One will be added here before it is released.