Privacy Policy

Last updated: October 10, 2026

1. Who We Are & Data Controller

Expendist is a web application designed for fair group expense sharing and tracking based on a rotating-payer model ("whose turn is it to pay next?").

The Data Controller is: Pavel Konečný Business ID (IČO): 01824848 Registered Office: Dětenická 54/8, 197 00 Prague 19, Czech Republic Email: info@expendist.com (hereinafter "we", "us", or "Expendist").

2. Personal Data We Collect

We only process data strictly necessary to provide the service and maintain financial accounting for groups:

1. Account Data by Authentication Method:

   • Google Sign-In (Google OAuth): Email address, full name, profile picture, and Google account identifier.
   • Facebook Sign-In (Facebook OAuth): Email address, full name, profile picture, and Facebook account identifier.
   • Email Sign-In (Magic Link): Email address and a single-use verification token.

2. Group Activity & Shared Ledger Data:

   • Group names, memberships, recorded expenses, receipt line items, split shares, and cash settlement entries.
   • Expense modification history (audit logs providing transparency to fellow group members).

3. Receipt Photos (AI Scanning Feature):

   • Photos uploaded for AI receipt scanning are processed in-memory only. They are transmitted to our AI API providers solely to extract line items and numbers. Images are never permanently stored on our servers and are immediately discarded. Only the recognized line items confirmed by you before saving are persisted.

4. Voluntary Support ("Buy Me a Coffee"):

   • If you choose to support the project via a voluntary tip or donation ("Buy Me a Coffee"), payment processing is handled by third-party payment platforms (such as Buy Me a Coffee / Stripe). We never have access to your payment card details. We only see basic contributor information (such as your name, message, and contribution amount).

5. Technical & Operational Data:

   • Temporary server access and security logs (IP address, timestamp) required to protect infrastructure integrity.

3. Legal Basis for Processing

• Performance of Contract (Art. 6(1)(b) GDPR): Providing Expendist services, managing accounts, groups, balance calculations, and history.
• Legitimate Interests (Art. 6(1)(f) GDPR): Safeguarding the service, ensuring shared financial ledger consistency for all group members, and collecting anonymous traffic metrics.
• Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Financial and tax record-keeping where applicable for voluntary contributions.

We never sell your personal data and never use it for targeted marketing or advertising.

4. Data Sharing Among Group Members

Expendist is a collaborative service. Members of a group you join or create:

• Can view your display name, avatar, and balance within that specific group.
• Can view expenses, line item allocations, settlements, and audit edit logs in that group.

Groups use shareable invite links; anyone possessing a valid invite link can join that group.

5. Subprocessors and Third Parties

We rely on the following verified infrastructure providers:

Identity providers (Google and Meta) act solely to authenticate your identity. We do not transmit your Expendist financial data back to them.

6. Retention and Account Deletion

• Account data is retained for the lifetime of your account.
• Account Deletion: You can request account deletion at any time by contacting info@expendist.com.
• Preserving Group Ledger Integrity: Because other group members rely on historical split calculations, individual expense shares and settlement records will be retained in an anonymized form (e.g., attributed to a "Former Member") so that group balances remain mathematically valid.
• Database disaster-recovery backups are retained for at most 35 days.

7. Cookies & Local Storage

Expendist uses only strictly necessary functional items:

• Session Cookie (authjs.session-token): Maintains your authenticated session (encrypted JWT).
• Language Cookie (NEXT_LOCALE): Remembers your selected language preference.
• Browser Local Storage (localStorage.theme): Stores your light or dark display mode setting.

No third-party tracking, advertising, or marketing cookies are used.

8. Your GDPR Rights

You have the right to access, rectify, erase, or restrict processing of your data, the right to object to processing, and the right to data portability. You may also file a complaint with the supervisory authority: The Office for Personal Data Protection (ÚOOÚ) Pplk. Sochora 27, 170 00 Prague 7, Czech Republic Website: www.uoou.cz

8.1 How to Delete Facebook Data (User Data Deletion Instructions)

If you log in via Facebook and wish to delete your data associated with this app:

1. Email Request: Email us at info@expendist.com requesting account and data deletion; we will process your request promptly (at most within 30 days).
2. Remove App on Facebook: In your Facebook account, navigate to Settings & Privacy → Settings → Apps and Websites, find Expendist, and click Remove.

9. Security

All data transmissions are encrypted using HTTPS. Data is stored with top-tier hosting providers in the EU, and access is strictly restricted.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or within the application. The current version is always available on this page.

11. Contact

For inquiries regarding privacy or your personal data, contact us at: info@expendist.com.