Privacy Policy

This Privacy Policy explains what information Billy ("we", "us", "our") collects when you use the Billy app, why we collect it, and how you can control it. Billy is a bill-splitting app — this policy is written to reflect exactly what the app does.

1. Information we collect

Account information. If you sign in, we receive your name, email address, and profile photo from our authentication provider, Clerk. If you use Billy as a guest, no email or sign-in credentials are collected — your data is tied to a locally generated identifier on your device.

Bills and receipts. Photos of receipts you scan or select, the text and line items extracted from them, restaurant/merchant names, amounts, currency, and the bill splits you create.

Friends and groups. The friends and groups you add, invite codes you generate or redeem, and group membership.

Settlements and payment options. Records of who owes whom and which bills have been settled, plus any payment details you choose to add to your profile (e.g. a bank account or e-wallet identifier) so friends know how to pay you back. We store these details as-is to display them to your friends — we don't process payments or have access to your actual bank or wallet account.

Subscription information. If you purchase Billy Pro, our subscription provider (RevenueCat) and the Google Play Store share your purchase and entitlement status with us so we can unlock premium features. We never see your payment card details — those are handled entirely by Google Play.

Device and usage data. Push notification tokens (so we can notify you about bill activity), and basic product analytics (screens viewed, features used, device/app version) collected via PostHog to help us understand how the app is used and fix problems.

Camera and photo access. Billy requests camera and photo library permission solely to let you capture or select a receipt image to scan. We don't access your camera or photos for any other purpose.

2. How we use your information

• To operate core features: scanning receipts, splitting bills, tracking settlements, and syncing your data across devices
• To extract line items from receipt photos, using automated OCR and AI text-parsing services
• To let your friends and group members see shared bills, splits, and settlement status
• To send push notifications about bill and settlement activity
• To process and manage your Billy Pro subscription
• To understand product usage and improve the app
• To maintain the security and integrity of the service

3. Who we share information with

We share information only as needed to run the app:

• Clerk — authentication and account sign-in
• Google Cloud Vision, Groq, and Google Gemini — process receipt images and text to extract items, prices, and totals
• RevenueCat and Google Play Billing — process and validate Billy Pro subscriptions
• PostHog — product analytics
• Friends and group members you choose to share a bill or group with — see your name, avatar, and the bill/settlement data relevant to what you've shared

We don't sell your personal information, and we don't share it with advertisers.

4. Data retention and account deletion

We keep your information while your account is active. You can delete your account at any time from Profile → Delete Account in the app. When you do:

• Your name, email, avatar, and sign-in credentials are permanently removed, and your Clerk sign-in is revoked
• Your payment option details, push notification tokens, and pending friend connections are deleted
• You're removed from any groups you were a member of

Bills, splits, and settlements you were part of with other people may be retained in anonymized form (no longer linked to your name or email) so the shared expense history stays accurate for the other participants — the same way a payment shows up on a friend's ledger even after one party leaves. If you'd like these fully removed as well, contact us using the details below and we'll review what's possible.

5. Your choices

• Access, correct, or export your data by contacting us
• Delete your account at any time in-app, as described above
• Revoke camera/photo permissions at any time in your device settings (this disables receipt scanning)
• Manage or cancel your Billy Pro subscription through the Google Play Store

6. Data security

We use reasonable technical and organizational measures to protect your information, including encrypted connections between the app and our servers. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

7. Children's privacy

Billy is not directed at children under 13, and we don't knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we'll delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

9. Contact us

Questions about this policy, or a data access/deletion request? Reach out at [email protected].