Draft — have counsel review before publishing. This draft describes how the Even Up app and service handle personal information today. The privacy contact, postal address and links are filled in from the server configuration when the page is served.
Effective date: [to be set on publication]
Even Up is an app for splitting bills and shared expenses. It is made and operated by Philanthropy Dynamics ("we", "us"), a company based in Canada.
This policy explains what personal information Even Up collects, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to the Even Up apps for iPhone, Apple Watch, Android and Wear OS, to our website pages, and to the Even Up service that stores and syncs your data.
| Information | Why we need it |
|---|---|
| Account details: your name, email address, and the identifier your sign-in provider gives us (Apple, Google, Microsoft, GitHub, Facebook, Discord, or an email one-time code). We never see your password for those providers. | To create your account, sign you in, link sign-in methods, and show your name to the people you share expenses with. |
| Profile and settings: optional photo URL, default currency, time zone, language, notification and reminder settings, people you have muted. | To show amounts in your currency, send reminders at a sensible local time, write emails and notifications in your language, and respect your choices. |
| What you create: groups and group membership, expenses (description, amount, currency, date, category, notes, who paid and who owes), payments, comments, recurring bills and subscriptions, receipts (merchant, items and who they are assigned to), split rules and icon choices. | This is the service: we store it, sync it across your devices, and share it with the other people in the same group or expense. |
| Receipt scans: the camera image or photo you choose when you scan a receipt. | To read the items and prices into an expense split. The text is read on your phone. The image is not stored, not uploaded and not sent to us or anyone else, and it is discarded once it has been read. Only the items and amounts you confirm are saved. |
| Tracked goals: the savings and repayment goals you create (name, target, currency, account label and icon) and the progress you log (amount, date, note, and any payment of yours you link). | To sync them across your own devices and include them in your CSV export. Goals are private to you: they are never shared with friends, groups or family members, and logging progress never changes what anyone owes. |
| People you add: the name, and the email address or phone number if you choose to type one in, of a friend you add who is not on Even Up yet. | So you can split expenses with them before they join, invite them, and (if you ask us to) email them a settle-up reminder. When they join, their placeholder is merged into their own account. |
| Debt payoff entries: the name, type (loan or credit card), currency, statement balance and its date, annual interest rate, interest method and monthly payment of each debt you track. | To estimate payoff dates, compare repayment strategies and sync your debts across your own devices. They stay private to you: they are never shown to groups, friends or family members, and are never used for ads. |
| Income you record: income you have received (source, take-home amount, currency, date and an optional note) and expected pay schedules. | To compare your income with your share of tracked expenses. Income entries and pay schedules sync to our servers so they are backed up and available on all your devices. They are private to you: never shown to groups, friends, or parents and guardians, and never used for ads. |
| Information | Why we need it |
|---|---|
| Device information: a random device identifier created by the app, the platform (iOS or Android), a push notification token, and a public key generated on your device. | To deliver push notifications through Firebase Cloud Messaging and to verify changes that nearby phones pass along for you (nearby sync). The matching private key never leaves your device. |
| IP address and request details such as time, path and user agent. | Used briefly to protect the service: rate limiting (for example, of sign-in attempts) and preventing abuse. Rate-limit counters expire within an hour; our host's operational logs are kept for a short period, typically a few days. |
| Purchase status: whether you bought "Remove ads" and the store's transaction identifier and receipt details. | To unlock the ad-free version on all your devices and prevent one purchase from being used by several accounts. |
| Reminder records: when a reminder was sent, from whom to whom, through which channel, and for what amount; email addresses that unsubscribed from reminder emails. | To space out reminders, stop after three automatic reminders, and honour unsubscribes. |
We use personal information to:
Legal bases (EEA, UK and Switzerland). We process your information to perform our contract with you (running the service you asked for), on the basis of our legitimate interests (security, abuse prevention, and sending reminders that the people you share expenses with ask us to send), with your consent (personalized ads, optional notifications), and to meet legal obligations.
The free version of Even Up shows banner ads from Google AdMob. Ads are never shown on settings screens, in modal flows or on watches, and they disappear completely if you buy "Remove ads".
AdMob may collect device identifiers (such as the advertising ID on Android, or the IDFA on iOS if you allow tracking), your IP address, and information about ad interactions, to serve and measure ads, cap how often you see them, and prevent fraud. Where the law requires it (for example in the EEA, the UK and Switzerland), Even Up asks for your consent through Google's User Messaging Platform (UMP) before personalized ads are shown. If you decline, AdMob shows non-personalized ads only. You can change your choice at any time from the app's privacy settings. Google's use of this information is described at https://policies.google.com/technologies/partner-sites.
We are based in Canada, and our service providers process data in Canada, the United States and other countries where they operate (Cloudflare runs a global network). When personal information leaves your country, we rely on safeguards such as contractual commitments, including the European Commission's Standard Contractual Clauses where they apply.
Wherever you live, you can:
To make any other request, email support@philanthropydynamics.ca. We will verify your request (usually by asking you to confirm from the email address on your account) and respond within the time the law requires, typically 30 days.
Canada (PIPEDA and provincial laws). You have the right to access and correct your personal information and to withdraw consent, subject to legal and contractual limits. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or your provincial privacy commissioner.
EEA, UK and Switzerland (GDPR). You also have the rights to data portability, to restrict or object to processing (including processing based on legitimate interests), and to lodge a complaint with your local data protection authority.
California and other US states (CCPA/CPRA and similar laws). You have the right to know what personal information we collect, use and disclose; to delete and correct it; and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. Personalized ads served through AdMob may count as "sharing" for cross-context behavioural advertising; you can opt out by declining personalized ads in the app's privacy settings, and buying "Remove ads" turns ads off entirely. We will not discriminate against you for exercising these rights.
We protect your information with encryption in transit (HTTPS), access checks on every request so you only see data you share, short-lived access tokens and hashed refresh tokens, and signed, verified changes for nearby sync. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.
A parent or legal guardian can create a child account inside a Family group so a child can track their own savings. Child accounts are designed to meet the requirements of the US Children's Online Privacy Protection Act (COPPA), Canada's PIPEDA and the GDPR rules for children's data (sometimes called GDPR-K).
Apart from child accounts created by a parent or guardian (see Child accounts), Even Up is not directed to children under 13, or under 16 in the EEA and the UK, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact support@philanthropydynamics.ca and we will delete it.
We may update this policy as Even Up changes. We will post the new version here with a new effective date and, for significant changes, tell you in the app or by email before they take effect.
Philanthropy Dynamics — Privacy
[postal address]
support@philanthropydynamics.ca