Privacy Policy

Evenkeel is a free app for splitting expenses with friends, run by Surendar PD (“we”). This policy explains what we collect, why, who helps us run the app, and the choices you have. We only collect what the app needs to work. We don't sell your information, show ads, or use tracking or analytics cookies.

What we collect

• Your account: name, email address, username, and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google.
• What you enter: groups, expenses, amounts, notes, payments, and the names (and, if you add them, email addresses) of people you split with.
• Notifications: if you turn them on, the push address your browser gives us for each device, and the device's browser name.
• Technical data: your IP address and browser details, used for keeping you signed in, preventing abuse (rate limits) and fixing errors. Server logs are kept for a short time by our hosting provider.
• Receipt scans: when you scan a receipt, the photo or PDF text is sent to an AI model to read the items and totals. The image is not stored by us; we only keep a count of scans to apply the daily limit.

People you add

When you add someone by email, we store their name and email so their balance follows them when they join, and we send them one invitation email naming you. Only add people you know and who would expect to hear from you. Anyone who receives an invitation can ask us to delete their details.

Why we use it

• To provide the app: calculate balances, show shared expenses to the people in each group, and send the emails and notifications you expect.
• To keep the app secure and available: sign-in, abuse prevention and fixing problems.

We use your information only for these purposes, with your consent, which you give by creating an account and can withdraw by deleting it.

Who can see your information

People in a group see that group's members, expenses and payments. Nobody else does. We use these service providers, who process data only to run Evenkeel for us:

• Cloudflare: hosting, database, receipt-reading AI and security. Data may be stored or processed outside Canada, including in the United States.
• Resend: sending sign-up codes, password resets and invitations.
• Google: only if you choose to sign in with Google.
• Your browser's push service (Google, Apple, Mozilla or Microsoft): delivering notifications you turned on.

We may disclose information if the law requires it.

Cookies

We use only essential cookies that keep you signed in. There are no advertising or analytics cookies, so there's nothing to opt out of.

How long we keep it

We keep your account while you use it. When you delete your account, your sign-in details, email, username, devices and notification settings are deleted right away. Expenses you shared stay with the other people in those groups, under the display name you used, because they are part of their records and balances. Backups held by our hosting provider expire on their normal schedule.

Your choices and rights

• See and correct your information in the app (Account), or ask us for a copy.
• Delete your account any time from Account → Delete account.
• Turn notifications off at any time in Account or your device settings.
• Ask us questions or make a privacy request at hello@updates.surendarpd.dev. We reply within 30 days. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Security

Data is encrypted in transit (HTTPS), passwords are hashed, access to each group is limited to its members, and requests are rate-limited. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as required by law.

Children

Evenkeel is not intended for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above, and tell you in the app if the change is significant.