# Privacy Policy for DiviSum

Last updated: 07 July 2026

---

## Introduction

This Privacy Policy explains how DiviSum ("we", "us", "the app") collects, uses, and protects your information when you use the DiviSum mobile application. By using DiviSum, you agree to the practices described here.

Questions: [your support email].

## Information we collect

Account information. When you sign in with Google, we receive your name, email address, and profile identifier from Google to create and manage your account. We do not receive or store your Google password.

Data you create in the app. Groups you create or join; expenses you add (amounts, descriptions, dates, currency, split details); settlements you record; your balances with other members.

Information from other members. When someone shares a group with you, expenses and balances involving you become visible to other members of that group — a core function of a shared expense app.

## How we use your information

Solely to provide the app's functionality: authenticate you, calculate and display balances, sync your data in real time across devices, and show your activity across groups. We do not sell your personal information or use it for advertising.

## How your data is stored

Stored using Supabase on secured servers, transmitted over encrypted connections (HTTPS/TLS), with access restricted so you and your group members only see data you're permitted to see. We use Google Sign-In for authentication; Google's handling of your data is governed by Google's own policy: <https://policies.google.com/privacy>

## Sharing your information

Only: with other members of your groups (as required for the app to function), with our service providers (Supabase, Google) to operate the app, or if required by law. We do not share your data with advertisers or data brokers.

## Data retention

Retained while your account is active. Deleted expenses/settlements are marked deleted and removed from active views. To request permanent deletion of your account and data, contact [your support email].

## Your rights

You may have rights to access, correct, or delete your personal information depending on where you live — contact [your support email] to exercise them. EU/UK users have rights under GDPR including access, rectification, erasure, restriction, objection, and data portability.

## Children's privacy

DiviSum is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. Contact us if you believe a child has provided information, and we will delete it.

## Security

We take reasonable measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure.

## Changes to this policy

We may update this policy; the "Last updated" date above reflects the latest revision. Continued use after changes means you accept the update.

## Account & Data Deletion

To request deletion of your DiviSum account and all associated data, email [email protected] with the subject "Delete my account."

Upon request we will permanently delete: your profile (name, email), the groups you created, your expenses and settlements, and your balances. Data shared with groups you joined (expenses involving other members) may be retained where needed for those members' records, in anonymized form.

We process deletion requests within 30 days.

## Contact

[email protected]
Mihir M. Bavisi