Privacy Policy - BillDude

Last updated: June 2026 · Developer: Titrias · Contact: apps@titrias.com

Offline-first

Without an account, all your data stays on your device. Signing in turns on cloud sync for every group you are an active member of.

Account: email, display name, optional avatar URL, and a one-way password hash. We use one-time codes (OTPs) to verify your email and to reset your password.
Synced group data (visible to all members of the group): group name, category, currency, invite code, optional photo; each member's name and optional email; expenses (description, amount, payer, date, currency); per-member splits and balances.
Audit log: a permanent record of every change made in a group (who, what, when), shared with current and future members of that group. Can be used for accountability and dispute resolution.
In-app notifications addressed to you, synced to your devices.
Invitations: if you invite someone by email, that email is stored to deliver the invite and visible to other members of the group. Invite requests never reveal whether an email is already registered.

What we do not collect

No advertising SDKs, no third-party analytics, no social-sign-in, no location, no contacts, no calendar, and no scans of your photo library.

On-device only

Voice input, receipt scanning, and natural-language expense parsing all run locally on your device. Your audio, photos, and typed text are not sent to us or any third party.

Local backups

Backups you export are encrypted and saved only where you choose. We never receive them.

Device permissions

Camera group photos and optional receipt scanning.
Microphone / speech recognition on-device voice input.
Internet only when sync, email delivery, or crash reporting is active.

Retention and deletion

When you delete a group, member, or expense in the app, the record is marked deleted and hidden, but kept so other members' devices stay consistent and the audit log remains complete. Audit log entries are kept. Email apps@titrias.com to request erasure and we will action verified requests within 30 days. Data tied to other members' groups may be retained in those groups' audit logs; we will replace personal fields with a placeholder where technically possible.

Security

Data is encrypted in transit. Passwords and one-time codes are stored only as one-way hashes. Backups are encrypted with AES-256. Sessions are protected against token reuse.

Children

BillDude is not directed to children. Do not use the service if you are under 13 (or the higher minimum digital-consent age in your country).

Where your data is processed

Our backend is hosted in the EU. We use third parties only to operate the service (e.g. cloud hosting and transactional email). We do not sell your data, do not share it with advertisers, and disclose it only when required by law.

Your rights

Under applicable law (including GDPR / UK GDPR) you may request access, correction, portability, restriction, or erasure of your personal data, and object to processing. Email apps@titrias.com; we respond within 30 days.

Updates

Material changes will be announced in the app and reflected in this document.