Privacy Policy

Last updated 1 September 2026 · Applies to the Even Pay Android app (com.simpletoolslabs.evenpay)

Even Pay works without an account. Until you choose to sign in, everything you record stays on your phone and is never sent anywhere.

This policy explains what changes when you do sign in, what we store, who processes it, and how to get rid of it. It describes the app as it actually behaves — not as a template.

1. Using the app without an account

You can install Even Pay and use every feature without signing in. In that state:

The only network activity in this state is advertising (section 5).

2. What we store when you sign in

Signing in uses Google Sign-In and creates an account so your data can sync across devices and be shared with people you split with. From that point the following is stored on our servers:

DataWhy
Your email address, display name and profile picture URL, from your Google accountTo identify your account and show your name to people you share expenses with
Your expenses: description, amount, currency, category, date, who paid and how it was splitThis is the app's purpose
Groups you create and who is in themSame
Settlements you recordSame
A notification token for each device you sign in onTo tell you when somebody adds an expense that includes you. Deleted when you sign out (section 6)
Whether you have purchased the ad-free upgradeSo the purchase follows your account rather than one phone

We do not collect your location, contacts list, photos, phone number, device identifiers beyond the notification token, or any payment details. Purchases are handled entirely by Google Play; we never see your card.

3. Information about other people

This section matters more than most, because Even Pay is about other people’s money as well as your own.

When you add somebody to split with, you type their name, and optionally their email address. If you are signed in, that name and email are stored on our servers so the expense can be shared.

4. Who processes your data

WhoWhat they handle
SupabaseHosts the database, authentication and server functions. Your account and expense data live here.
Google — Sign-InAuthenticates you. We receive your email, name and picture; Google does not receive your expenses.
Google — Firebase Cloud MessagingDelivers notifications. It receives the notification text, which names the person and the amount you owe.
Google — AdMobServes the banner advert. See section 5.
Google PlayProcesses the ad-free purchase.

5. Advertising

The free version shows a single banner advert on list screens. There are no full-screen or video adverts.

Google AdMob may use an advertising identifier to select adverts and measure them. You can reset or delete that identifier in Android’s settings under Settings → Privacy → Ads. AdMob’s own policy is at policies.google.com/technologies/partner-sites.

Buying the one-off ad-free upgrade removes the banner permanently for your account. Every other feature is free either way — the purchase does not unlock anything.

6. Deleting your data

Delete your account and its data

Email sidanaarjun7@gmail.com from the address you signed in with, with the subject Delete my account. Your account and the data listed below are deleted within 30 days, and we will confirm when it is done.

Deleted: your account and sign-in identity, your profile (name, email, picture), your notification tokens, and your record of the ad-free purchase.

What is not deleted, and why

Expenses you shared with other people are not deleted, because they are not solely yours. An expense recorded between you and three friends is part of their ledger too, and removing it would silently change what those people are owed. Your rows are unlinked from your identity instead: they revert to being ordinary contact entries in the ledgers of the people who added you, exactly as they were before you signed in.

If you want an expense itself removed, delete it in the app, or ask the person who created it to.

Signing out, and uninstalling

7. Retention

Data is kept while your account exists. Rows are marked deleted rather than erased immediately, so that a device that has been offline cannot resurrect them when it reconnects and so money history stays auditable. Deleted rows are purged on the schedule described in section 6.

8. Security

Traffic between the app and our servers is encrypted in transit. Access to your data is enforced at the database level: a signed-in account can read only its own data and data belonging to groups and expenses it is part of. This is enforced by the database itself rather than by the app, so a modified client cannot read somebody else’s ledger.

No system is perfect. If you believe you have found a security problem, please email sidanaarjun7@gmail.com rather than posting it publicly, and we will respond.

9. Children

Even Pay is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

10. Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, using the address below. If you are in a jurisdiction that grants you additional rights over your personal data, those rights apply.

11. Changes

If this policy changes materially, the date at the top changes and the app will tell you the next time you open it. Continuing to use Even Pay after that means you accept the revised policy.

12. Contact

sidanaarjun7@gmail.com