Privacy policy

• Account: name, email, and optionally phone number and profile photo.
• Expenses: descriptions, amounts, currencies, categories, dates, split details, and receipt images you upload.
• Game sessions: game names, player buy-ins, rebuys, final amounts, and settlement records.
• Connections: who you share expenses with.
• Device: push notification tokens, only if you enable notifications.
• Usage: login timestamps and privacy-friendly, cookieless product analytics — page views and anonymous feature events (e.g. “expense created”) via Vercel Analytics. No cross-site tracking and no personal data in the events.

• Operating the service: balances, splits, notifications.
• Receipt processing: images sent to Anthropic's Claude Vision API for text extraction. Anthropic does not store or use these images beyond processing your request.
• Understanding and improving the service via aggregated, anonymized, cookieless usage analytics (Vercel Analytics).
• We never sell, rent, or share personal information with advertisers or data brokers.

• Hosted on Supabase (AWS us-west-2 region).
• Row-level security policies ensure users can only access their own data and data shared with them.
• All communication encrypted via TLS/HTTPS.
• Passwords hashed using bcrypt via Supabase Auth.
• Receipt images stored in private Supabase Storage buckets with authenticated access only.

• Active account data is retained as long as your account exists.
• Deleted expenses are soft-deleted and permanently purged after 30 days.
• Account deletion permanently removes all data within 30 days.
• Push notification tokens removed when you log out or unregister.

• Access: view all your data in the app at any time.
• Export: download a complete JSON copy of your data (Profile → Data).
• Deletion: permanently delete your account and all associated data.
• Correction: update your profile information at any time.
• These rights apply regardless of your location (GDPR, CCPA, PIPEDA compliance).

We use essential authentication session cookies managed by Supabase Auth. Our analytics (Vercel Analytics) is cookieless and does not track you across sites. We use no advertising cookies and no cross-site tracking cookies.

• Supabase — database, authentication, and file storage (hosted on AWS, us-west-2).
• Vercel — application hosting plus privacy-friendly, cookieless analytics (Vercel Analytics and Speed Insights). No personal data is included in analytics events.
• Anthropic (Claude) — receipt-scanning AI. Receipt images are sent to Anthropic to extract text and, per Anthropic's data policy, are not used to train models or retained beyond processing your request.
• Upstash — Redis used for API rate limiting (request counts keyed to your account or IP address; no expense content).
• Google — only if you choose “Sign in with Google” (OAuth). We receive your name and email from Google to create your account; we never post to your Google account.
• No advertising networks, no Google Analytics, no Facebook Pixel.

FairSlice is not directed at children under 13. We do not knowingly collect data from children.

We'll update the "Last updated" date when changes are made. Continued use constitutes acceptance.

Questions about this policy? Reach us via the Contact page.