Privacy Policy

OweFlow is operated by OweFlow ("we", "us", "our"). OweFlow is the data controller for the personal data described in this notice, meaning we decide why and how it is processed. You can contact us about privacy at privacy@getoweflow.com.

• Account data: email address, name and profile photo when you sign up or connect a social account.
• Expense data: group names, member names, expense descriptions, amounts, categories, dates and receipt images you upload.
• Subscription data: plan, status and billing events received from our payment provider. We never see or store full card numbers.
• Support data: messages you send us.
• Technical data: browser type, device information, IP address and error logs used to keep the app reliable and secure.

• Providing the service — creating your account, calculating balances, simplifying debts, syncing your subscription. Legal basis: performance of our contract with you.
• Billing and service emails — receipts, renewal notices and important account updates. Legal basis: contract and legal obligation.
• Security and abuse prevention — logging, rate limiting and fraud checks. Legal basis: our legitimate interest in a safe service.
• Product improvement and support — diagnosing bugs and improving features. Legal basis: legitimate interests.
• Marketing emails, if we ever send them. Legal basis: your consent, withdrawable at any time.
• Tax, accounting and legal records. Legal basis: legal obligation.

• Your group members — expenses, balances and receipts inside a group are visible to that group's members.
• Paddle, our Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and handles payment processing, subscription management, tax compliance, invoicing and related customer service. Payment details are collected and processed by Paddle under Paddle's privacy notice, not by us.
• Service providers (subprocessors) — hosting and database, email delivery and AI processing for receipt scanning. They only access what they need to run the service.
• Professional advisers (legal, accounting) and authorities where required by law.
• We never sell or rent your personal data.

Receipt images you upload may be processed by AI services to extract amounts, dates and merchants. Original images are stored in your private group storage and are not used to train third-party models.

• Account, group and expense data: kept while your account is active, and deleted or anonymised within 30 days of account deletion.
• Receipt images: deleted with the expense or group they belong to, and within 30 days of account deletion.
• Billing and tax records: retained for up to 7 years where tax and accounting law requires it.
• Technical and security logs: retained for up to 12 months.

When data is no longer needed for these purposes, we delete or anonymise it.

Our providers may process data outside your country, including in the United States. Where data leaves the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to receive a portable copy, and to withdraw consent at any time. You can also complain to your local data protection authority. We respond to requests within one month.

• Edit your profile, leave groups and delete expenses directly in the app.
• Cancel your subscription in Settings; access continues until the end of your paid period.
• For deletion or a copy of your data, email privacy@getoweflow.com.

We use encryption in transit, row-level security in the database, access controls and private schema helpers to keep your information isolated. No system is perfectly secure, so please use a strong password and keep your login details private.

We use essential cookies and local storage to keep you signed in and to remember your preferences. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

OweFlow is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this policy as the service evolves. We'll notify you of material changes by email or through the app.

Questions about privacy? Reach OweFlow at privacy@getoweflow.com.