Divido Privacy Policy
Divido helps people manage shared expenses. We collect account, profile, group, expense, receipt, notification, purchase, and diagnostic data only as needed to provide the app, keep the ledger secure, operate subscriptions or ads when enabled, and respond to support requests. We do not sell personal information.
1. Who we are
Divido is published by Yanai Hollander. For privacy questions or requests, contact yanayh90@gmail.com.
2. Scope
This policy applies to the Divido mobile apps, backend services, and public static web pages. It does not apply to third-party payment apps or app stores that you may open from Divido.
3. Information we collect
| Category | Examples | Purpose |
|---|---|---|
| Account and authentication data | Email address, Firebase user ID, sign-in provider, email verification status, and authentication tokens. If you use email/password sign-in, your password is processed by Firebase Authentication; Divido does not store your raw password. | Create and secure your account, keep you signed in, and protect backend API access. |
| Profile data | Display name, optional profile image URL, app preferences, pinned or archived group IDs, language, theme, and analytics consent. | Show your identity to authorized group members and personalize the app. |
| Shared-expense data | Groups, members, roles, expenses, allocations, settlements, comments, audit history, currencies, receipt references, and related metadata. | Provide the shared ledger, calculate balances, sync authorized views, and support export or deletion. |
| Images and receipts | Optional profile images and receipt images or attachments that you choose to upload. | Attach context to profiles or expenses. Profile image bytes are stored through the backend in Azure Blob Storage. |
| Notification data | Firebase Cloud Messaging tokens, installation IDs, notification preferences, and delivery status. | Send optional group-expense notifications and remove tokens when you sign out or delete your account. |
| Purchase and entitlement data | Subscription or purchase status, product identifiers, store, entitlement status, and RevenueCat app-user identifiers. | Unlock paid features, restore purchases, and manage subscriptions. |
| Diagnostics and analytics | App version, device model, operating system version, locale, consent state, screen or feature events, failures, and crash or operational diagnostics. | Improve reliability and understand product usage. Sensitive financial content is not sent to general analytics. |
| Advertising data, if ads are enabled | Consent state, ad delivery signals, and identifiers handled by Google Mobile Ads according to your device settings and applicable consent choices. | Show optional rewarded ads and comply with advertising consent requirements. |
4. Information we do not collect for analytics
Divido does not send participant names, receipt contents, payment references, notes, or exact financial amounts to general product analytics. Group and expense data is used for the ledger itself and for authorized sharing inside your group.
5. How we use information
- Authenticate users and protect accounts.
- Create, sync, display, export, and delete shared-expense records.
- Operate invitations, profile images, notifications, subscriptions, and optional rewarded ads.
- Detect abuse, troubleshoot issues, and maintain service security.
- Comply with legal obligations and app-store requirements.
6. Service providers
Divido may use Firebase Authentication, Firestore, Firebase Cloud Messaging, Firebase Analytics, RevenueCat, Google Play, Apple App Store, Azure hosting and Blob Storage, and Google Mobile Ads if ads are enabled. These providers process data according to their own terms and privacy policies.
7. Sharing
Expense and group data is shared with authorized members of the relevant group. We may share data with service providers that operate Divido, with app stores for purchases, or when required by law. We do not sell personal information.
8. Security
Data is encrypted in transit using HTTPS. Mobile clients do not write directly to Firestore; mutations go through the authenticated Divido backend API. Backend services use privileged server-side access where required.
9. Retention
Account and ledger data is retained while your account is active or as needed to provide group auditability, comply with law, prevent abuse, resolve disputes, and maintain backups. Some group records may be retained or anonymized where deletion would break another member's ledger history. Provider retention periods may differ.
10. Your choices and rights
- You can update preferences inside the app.
- You can request account deletion from the app or by following Account Deletion.
- You can request access, correction, export, or deletion by contacting yanayh90@gmail.com.
- You can manage subscriptions through Google Play or the Apple App Store.
- You can control notification permissions and ad personalization through your device and store settings.
11. Children
Divido is not directed to children. The app may let an adult represent a dependent in a household ledger, but children should not create accounts unless permitted by applicable law and app-store rules.
12. International transfers
Divido and its providers may process data in countries outside your own. Where required, transfers rely on appropriate safeguards such as contractual protections or provider compliance programs.
13. Changes
We may update this policy. When we do, we will change the last updated date and, where required, provide additional notice.
14. Contact
Email yanayh90@gmail.com for privacy questions or requests.