Privacy Policy

1. Introduction

OweNo ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our bill-splitting application ("the App").

2. Information We Collect

2.1 Information You Provide

• Display Names: Names you enter when joining bills (limited to 15 characters)
• Receipt Images: Photos of restaurant bills you upload
• Bill Information: Items, prices, and other details extracted from receipts
• Payment Handle or Link (Optional): If a host provides a Venmo username or profile link, we store it on the bill so participants can use payment links/QR codes to pay the host

2.2 Automatically Collected Information

• Session Identifiers: Anonymous session tokens to track your usage
• Device Information: Browser type, operating system, and device characteristics
• Usage Data: Features you use, timestamps, and interaction patterns
• IP Addresses: Collected for security and analytics purposes

2.3 Third-Party Services

We use third-party services that may collect information:

• OCR Services: Receipt images are processed by third-party OCR providers to extract bill data
• Analytics: We may use analytics services to understand app usage (see Cookie Policy)
• Hosting: Data is stored on cloud hosting providers (e.g., Supabase, Vercel)

3. How We Use Your Information

We use collected information to:

• Provide bill-splitting functionality and calculations
• Process receipt images through OCR services
• Enable real-time collaboration between bill participants
• Improve app functionality and user experience
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Storage and Security

Data Storage: Your data is stored securely on cloud servers. Receipt images and bill information may be retained for a limited period. For unregistered users, bills may become inaccessible after an expiry window. If a host deletes a bill, it becomes inaccessible in the App (it will behave like “not found”). We may still retain certain information for a period of time in backups, logs, and audit records, or as required for security, fraud prevention, or legal compliance.

Security Measures: We implement industry-standard security measures including encryption in transit and at rest, secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• With Other Bill Participants: Bill information (items, amounts, participants) is visible to users who join the bill. If a host adds a Venmo link, it may be visible to bill participants and may be used to generate payment links/QR codes shown within the bill. If you share a bill link, anyone you share it with may be able to access and view the bill.
• Service Providers: With third-party services that help us operate the App (OCR providers, hosting, analytics)
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To protect our rights, prevent fraud, or ensure user safety

6. Your Rights (GDPR & CCPA)

6.1 GDPR Rights (EU Users)

If you are in the European Union, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

6.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Know if your personal information is sold or disclosed
• Opt-out of the sale of personal information (we do not sell personal information)
• Access and request deletion of your personal information
• Non-discrimination for exercising your privacy rights

To exercise these rights: Please contact us through the App or use the contact methods provided. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session and improve the App. For detailed information, please see our Cookie Policy.

Session Cookies: Essential for app functionality, cannot be disabled

Analytics Cookies: Optional, used to understand usage patterns (you can opt out)

8. Children's Privacy

The App is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. International Data Transfers

Your data may be processed and stored in countries other than your country of residence. By using the App, you consent to the transfer of your data to these locations, which may have different data protection laws than your country.

10. Data Retention

We retain your data for as long as necessary to provide the App and comply with legal obligations. Bills may expire for unregistered users, after which they may become inaccessible. If a bill is deleted by the host, it becomes inaccessible in the App, but certain information may be retained for a period in backups, logs, and audit records. You can request deletion of your data at any time, and we will evaluate and respond in accordance with applicable law.

Rescans: If you rescan a bill, the bill may be updated in place. Rescans may be limited.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or via email if you have provided contact information. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through the App or via the contact methods provided in our Terms & Conditions.