Privacy

What we store

• Account holders: your name, email, and a securely hashed password (we never store the password itself).
• Accountless participants: only the display name typed when joining by link — no email, no password.
• Group data: the groups, expenses, splits, and settlements you create.
• Photos: any receipt or group photo you upload is stored by our hosting provider (Vercel) at a private, hard-to-guess web address — not password-protected, so only share that link with people you trust.
• Feedback: if you use the feedback button, we store your message, the page you were on, any email you type in, and — if you’re signed in — your account, so we can read and reply.

What we don’t do

• No ads, and no selling or sharing your data with advertisers or data brokers.
• No tracking you across other websites.
• No reading or moving your actual money — settlements are tracked, not executed.

Third parties we use

A handful of trusted services help us run Balnesto, only to do their one job for us — never for their own marketing: Vercel (hosting, anonymous performance stats, and storing uploaded photos), Neon (the database that stores your Balnesto data), Sentry (alerts us when something breaks), and Resend (delivers the emails you get from us — notifications, feedback replies, password resets). If you sign in with Google, Google verifies your identity and shares your name and email with us — only when you choose that option.

Cookies

We use a session cookie to keep you logged in, a per-group cookie to remember accountless guests, and a cookie to remember your chosen language. No advertising or analytics cookies.

Your control

You can change your name and password, download a full copy of your data (as a readable page or as JSON), and delete your account, from your account settings. Deleting signs you out immediately and schedules permanent removal in 30 days — logging back in during that window cancels it. Either way, your past entries remain in shared groups as a name-only record so other people’s balances stay correct.