Privacy Policy

Divizo is made by Appfaa Inc. (“Appfaa”, “we”, “us”), 3184 Capstan Crescent, Coquitlam, BC V3C 4E3, Canada. We are responsible for the personal information described in this policy. Under the GDPR, Appfaa is the data controller.

Our privacy officer can be reached at appfaa@appfaa.com. This policy is written to meet Canada's PIPEDA and British Columbia's PIPA, the EU and UK GDPR, and US state privacy laws such as California's CCPA.

Information you give us

• Account details: your email address. If you sign in with Google, also your name, profile photo, and a Google account identifier. If you sign in with Apple, your name (the first time only) and an Apple account identifier; if you choose to hide your email, Apple gives us a private relay address instead.
• Sign-in codes: when you sign in by email, we send a 6-digit code to that address and keep only a one-way hash of it until it is used or expires 10 minutes later.
• Profile settings: your display name, default currency, language, and any payment handles you add (Venmo, PayPal.Me, Cash App, Interac email).
• Your consent choices: when you accept the Terms and this Privacy Policy, and whether you want product news and activity emails. For each choice we keep the date, the version of the Terms, where you made it (sign-up, your account page, or an email link), and the IP address and browser it came from, as a record of your consent.
• Group content: group names, members (including names you enter for placeholder members), expenses, amounts, currencies, categories, dates, notes, comments, budgets, recurring bills, payments you record, and attachments.
• Receipt images you upload or scan.
• Locations you attach to an expense. If you tap “use my location”, your browser asks for permission and shares your approximate position once; we don't track your location in the background.
• Messages to us, such as support emails.

Information created as you use Divizo

• Friends and activity: who you share groups with, friend requests, and in-app reminders about balances.
• Account activity: when you created your account, how you last signed in (Google, Apple, or email code), when you last used Divizo, and which account emails we have sent you.
• Subscription status: whether you have Divizo Pro, the plan, renewal and expiry dates, and billing events, received from RevenueCat. Card details are collected and held by Stripe; we never see your full card number.
• Usage counters for AI features and rate limits (for example, how many receipts you scanned this month).
• Technical data: IP address, browser and device type, and request logs kept by our hosting provider, plus App Check and reCAPTCHA signals used to block abuse.
• Analytics data, only if you allow analytics cookies (see Cookies).

We don't collect bank account numbers or government IDs, and we ask you not to put sensitive information such as health details in notes or comments.

We use your information to:

• provide Divizo: sign you in (including emailing sign-in codes), store your groups, calculate balances, and sync your devices;
• show your content to the members of the groups you share it with;
• run the AI features you choose to use;
• convert currencies and look up places you search for;
• manage Divizo Pro subscriptions and enforce usage limits;
• keep Divizo secure, prevent fraud and abuse, and fix problems;
• send account emails: sign-in codes, a welcome email when you join, and confirmations when you start or cancel Divizo Pro;
• send product news and activity notifications by email, only if you turn them on;
• answer your messages and send important service notices;
• understand and improve Divizo, using analytics only if you allow it; and
• meet legal obligations, such as tax and accounting records.

We don't sell your personal information, and we don't share it for cross-context behavioural advertising. We don't use your content to train AI models.

Legal bases (EU and UK users)

• Contract: to provide Divizo and Divizo Pro.
• Legitimate interests: to keep Divizo secure and to improve it, balanced against your rights.
• Consent: for analytics and marketing cookies, for product news and activity emails, and for using your device location. You can withdraw consent at any time.
• Legal obligation: to keep records the law requires.

When you use an AI feature, we send only what that feature needs to Google's Vertex AI service (Gemini models):

• Receipt scanning: the receipt image, to read the merchant, items, and amounts.
• Category suggestions: an expense's description, notes, place name, and item names.
• Spending insights: a summary of the group's expenses.
• Cover art: the group's name and type, and any style you describe.

Google processes this data as our service provider under the Google Cloud terms, which prohibit using it to train Google's models. The results are saved to your group like any other content.

• Members of your groups see the group's content, including your name, photo, and payment handles. Friends you share groups with see your balance with them.
• Service providers who process data for us under contract:
  • Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Hosting, App Check and reCAPTCHA Enterprise, Vertex AI, and Google Maps Platform);
  • Google Analytics, only if you allow analytics cookies;
  • Apple (Sign in with Apple), only if you use it;
  • Resend (sending sign-in codes and other emails);
  • RevenueCat (subscription management);
  • Stripe (payment processing for Divizo Pro).
• Payment apps such as Venmo or PayPal, only when you tap a pay link; the details are passed to that app on your device.
• Authorities, when the law requires it or to protect the rights and safety of our users or others.
• A buyer or successor, if Appfaa is involved in a merger, acquisition, or sale of assets. We would tell you before your information became subject to a different privacy policy.

Currency rates are fetched from public exchange-rate services (Frankfurter and currency-api); no personal information is sent.

Divizo runs on Google Cloud, and our service providers may store and process your information in the United States and other countries, where local authorities may be able to access it under local law. When we transfer personal information from the EU, UK, or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses and our providers' data processing terms.

• Account and profile information: for as long as you have an account.
• Group content: for as long as the group exists. If you leave a group, what you added stays in the group for the remaining members, because it is part of their shared record. Deleting an expense or a group deletes its content, including receipt images.
• Sign-in codes: 10 minutes at most, and each new code replaces the last.
• Consent records: for as long as you have an account, so we can show what you agreed to and when.
• Subscription and billing records: as long as tax and accounting law requires, usually 7 years.
• Hosting logs: generally 30 days, and up to 400 days for security logs.
• Backups: overwritten in the normal cycle, usually within 90 days.

You can delete your account yourself under You → Privacy & data, or ask us to. We remove your profile, friend connections, sign-in, and payment handles right away, and delete remaining personal information from backups within 90 days. Groups only you are in are deleted. In groups shared with other people, past expenses keep your display name as a former member so everyone else's balances still add up; your email address, photo, and payment handles are removed from them.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy (you can download it yourself under You → Privacy & data → Download my data);
• correct information that is wrong;
• delete your account and personal information (you can do this yourself in the app);
• take your data with you (Download my data gives you a JSON file, and you can export any group to CSV at any time);
• object to or restrict certain processing;
• withdraw consent, for example to analytics cookies or to emails (every email has an Email preferences link, and your account page has the same switches); and
• not be treated differently for using these rights.

To use any of these rights, email appfaa@appfaa.com from the address on your account. We may need to verify your identity. We answer within 30 days, or tell you if we need more time as the law allows. You can also let an authorised agent contact us for you.

If you are unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or your local data protection authority.

Divizo stores small pieces of information on your device using cookies, local storage, session storage, and IndexedDB. We sort them into three categories:

• Necessary: required for sign-in, security, and core features. These are always on.
• Analytics: Google Analytics helps us understand how Divizo is used. Off unless you allow it.
• Marketing: measure whether our ads work. Off unless you allow them.

Until you choose, only necessary storage is used, and Google services are told that analytics and advertising storage are denied (Google Consent Mode). If your browser sends a Global Privacy Control signal, we treat it as an opt-out of marketing.

Change your cookie settings at any time, from the footer of this site, or from your Profile in the app.

We protect your information with encryption in transit and at rest, access controls that block direct database access from browsers, App Check verification, and limited staff access. Sign-in codes expire after 10 minutes, work only once, and lock after five wrong tries. No service is perfectly secure, so please keep your email and sign-in accounts safe. If we learn of a breach that creates a real risk of significant harm, we will notify you and the relevant authorities as the law requires.

Divizo is not meant for children under 13 (under 16 in the EEA and UK without parental consent), and we don't knowingly collect their personal information. If you believe a child has given us information, contact appfaa@appfaa.com and we will delete it.

We may update this policy as Divizo changes. If a change is significant, we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it. The date at the top shows the latest version. Also see our Terms of Use.

Privacy Officer, Appfaa Inc.
3184 Capstan Crescent
Coquitlam, BC V3C 4E3, Canada
appfaa@appfaa.com