Privacy Policy

1. Information we collect

We collect only the information needed to operate the App and provide its features. This falls into three categories:

a. Information you provide directly

• Account & profile details: when you sign in with Google, we receive your name and email address associated with that Google Account. During onboarding you may also provide your full name, mobile number, gender, and date of birth.
• Financial & transaction content: expense and income amounts, descriptions/notes, settlement status, room names, room descriptions, and the members you invite. PoolPay is a personal-finance tracker, so this content is central to the service.
• Room security data: if you enable a Room Lock, the 4- or 6-digit PIN/passcode you set for that room.
• Support communications: messages you send us through the in-app Contact form or by email.

b. Information collected automatically

• Authentication tokens: a JWT access token is generated at sign-in and stored in your device's secure storage to keep you logged in and authenticate API requests.
• Usage & analytics data: we use Google Analytics on our website to understand aggregate traffic (e.g., pages viewed, approximate region, device/browser type). This helps us improve the product.
• Device & log data: standard technical information such as app version, general device type, and error/diagnostic logs that help us keep the App reliable.

c. Information from third parties

• Google Sign-In: when you choose to sign in with Google, Google provides us with basic profile information (name and email) that you have authorized it to share. We do not receive your Google password.

Sensitive data: PoolPay does not intentionally collect government IDs, biometric data, precise GPS location, contacts, photos, or payment-card numbers. PoolPay does not process real-money payments — settlements record who has paid whom for your own bookkeeping and are not executed through the App.

2. How we use your information

We use the information we collect to:

• Create and manage your account and authenticate you at each launch;
• Provide core features — creating rooms, logging expenses and income, calculating balances, and tracking settlements;
• Display your profile and enable collaboration with the members of rooms you join;
• Secure private rooms via the Room Lock PIN you set;
• Generate features such as Room Credit Scores and Top Spender Certificates;
• Respond to your support requests and communicate service-related notices;
• Monitor, maintain, debug, and improve the App's performance and security;
• Detect, prevent, and address fraud, abuse, or violations of our terms;
• Comply with applicable legal obligations.

We do not sell your personal information, and we do not use your financial or transaction content to serve third-party advertising.

3. How we share information

We share information only in the limited circumstances below:

• With other room members: when you join or are invited to a room, the members of that room can see the room's transactions, notes, balances, and your display name and role. When you invite someone, an in-app disclaimer makes this explicit so consent is clear. In a personal (1-on-1) room, your transaction activity is visible to that single connected friend.
• With service providers: vendors who host and operate the service on our behalf (for example, cloud hosting and authentication and analytics providers) may process data strictly to provide those services to us.
• For legal reasons: when required to comply with a law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of PoolPay, our users, or the public.
• Business transfers: if PoolPay is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We do not otherwise disclose your personal information to third parties for their own independent use.

4. Third-party services

PoolPay relies on trusted third parties whose own privacy policies govern their handling of data:

We encourage you to review the privacy policies of these providers to understand their practices.

5. Data security

We take reasonable technical and organizational measures to protect your information, including:

• Secure sign-in through Google — no passwords are stored by PoolPay;
• Token-based authentication: JWT access tokens are held in your device's secure storage and injected as Bearer credentials on API requests, which are transmitted over encrypted HTTPS connections;
• Room Lock PINs to restrict access to sensitive rooms;
• Access controls based on granular Owner/Admin/Member roles so users see only what they should.

No method of transmission or storage is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security. Logging out clears your security tokens from the device.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the App and comply with our legal obligations. Rooms you leave or delete move to a "Previous Rooms" history with countdown windows before permanent deletion and a separate window during which you can rejoin or recover them. Once those windows expire, the associated data is permanently removed. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

7. Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information — you can edit your profile details directly in the App;
• Delete your account and associated personal data (see the next section);
• Object to or restrict certain processing, and withdraw consent where processing is based on consent;
• Data portability — request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details in the Contact us section. We will respond within the timeframe required by applicable law. You can also disable analytics tracking through your browser settings or Google's opt-out tools.

8. Account & data deletion

You can request deletion of your PoolPay account and personal data at any time by emailing us at support@poolpay.com from the address associated with your account, or by using the account options within the App. Upon a verified request, we will delete your profile information, rooms you solely own, and your transaction records, subject to any limited retention required for legal, security, or fraud-prevention purposes. Note that content shared within a room you did not solely create (for example, shared transaction history visible to other members) may persist for those members in accordance with this policy.

9. Children's privacy

PoolPay is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International data transfers

Your information may be stored and processed on servers located in countries other than your own, where data-protection laws may differ. Where required, we take appropriate safeguards to ensure your information receives an adequate level of protection when transferred internationally.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice within the App. Your continued use of PoolPay after an update takes effect constitutes acceptance of the revised policy.

12. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: