Privacy policy
Last updated 2 October 2026
Group Debts helps groups of friends keep track of shared costs. This page explains, in plain words, what we store, why, and what you can do about it. The short version: we keep only what the app needs to work, we never sell your data, and there are no ads or trackers.
Who we are
Group Debts is an independent app run from the United Kingdom. For anything about your data, write to support@groupdebts.com.
What we store
| What | Why |
|---|---|
| Your email address, and a password if you set one (stored only in scrambled, hashed form) | To let you sign in and to send you sign-in codes. |
| Your name and, if you add one, your payment link (for example revolut.me or paypal.me) | So people in your groups know who you are and can pay you. |
| Your groups: their names, the people in them, expenses (description, amount, date and time, who paid, how it was split), payments between members | This is the app itself: it is how balances and settle-up are worked out and shared with the group. |
| A history of changes in each group (who added, edited or deleted what, and when) | So everyone in a group can see what changed and nothing happens unnoticed. |
| Names, emails and payment links that you or others enter for group members who have not joined | To keep track for people who don't use the app, and to email them reports if asked. |
Everything in a group is visible to the members of that group. Nobody outside a group can see it.
We do not use analytics, advertising or tracking tools, and this website sets no cookies. The app keeps your sign-in and a copy of your groups on your own device so it opens quickly; this stays on your device.
Who helps us run Group Debts
We use a few trusted services to run the app. They process data only to provide their service to us:
- Supabase: stores the database and handles sign-in.
- Resend: sends emails such as sign-in codes and reports you ask for.
- Cloudflare: hosts this website and the web app, and protects them from attacks.
- Expo: builds and delivers the iPhone and Android apps.
Some of these providers handle data outside the United Kingdom; they do so under their own data protection terms. We never sell or rent your data to anyone.
Our legal basis
We use your data to provide the service you signed up for (the contract between us), and to keep the service secure (our legitimate interest).
How long we keep it
As long as you have an account. You can delete your account at any time in the app: open your account page (tap your name) and choose Delete my account. When you do:
- your sign-in, email and profile are deleted;
- groups where nobody else has an account are deleted completely;
- in groups shared with others, your name stays on past expenses so their balances still add up, but your email and payment link are removed and the entry is no longer linked to you.
If someone added your name or email to a group and you'd like it removed, write to us and we will help.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to support@groupdebts.com and we will reply within a month. If you are unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Group Debts is not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will say so in the app before the change applies.