Privacy Policy — Partly bill-splitting app (iOS & Android)
This privacy policy explains what the Partly iOS and Android app collects, why we collect it, who processes it, and how you can export or delete your in-app account.
Data we collect
We collect only what is strictly needed to run the app: your email, an optional display name, the expenses and groups you create, and basic device information for crash reports. Receipt photos are processed for scanning and stored only inside the groups you own.
Sign-in methods
You can sign in with Google, Apple, Facebook, or email and password. You may also use Partly as a guest and upgrade later. Phone sign-in is kept only for existing accounts created before our auth update; we do not use phone numbers for new registrations or group invites.
How we use data
Your data powers the service: syncing groups across devices, calculating balances, generating payment links, receipt scanning, and improving reliability. We never sell your personal data to advertisers or data brokers.
Emails and messages
Transactional emails (sign-in, recovery, account notices) may be sent as needed via Firebase Authentication and our providers. Marketing or product-update emails are sent only if you give explicit opt-in consent (unchecked by default). You can withdraw consent anytime in the app under Settings → Product emails, or by replying UNSUBSCRIBE. Optional SMS payment reminders may be sent in some countries when you explicitly use settlement reminders; we do not SMS group invites.
Payments
Partly does not store card numbers or bank login credentials. Payment links redirect to your bank app, PayPal, Revolut, or other providers you configure. Premium subscriptions are processed by Apple or Google; we do not receive your full payment card details.
Sub-processors
We use trusted providers: Google Firebase / Cloud for hosting, database and authentication, App Store and Google Play for distribution and subscriptions, RevenueCat for subscription status, Google Mobile Ads (AdMob) for ads on the free plan, and the OAuth providers you choose. The Google Mobile Ads SDK may automatically collect and share approximate location inferred from the IP address, app interactions, diagnostics, and device or account identifiers for advertising, analytics, and fraud prevention and security. You can manage advertising privacy choices in Settings and your device controls; Premium removes ads.
Your rights
You can export or delete your data from Settings. Account deletion removes personal data within 30 days; backups are purged within 90 days. You may disable analytics and ads in Settings. EU/UK users have GDPR rights (access, rectification, erasure, portability, objection), contact us to exercise them.
Contact
Privacy questions: contact@partly-app.com, we reply within 5 business days.