Privacy Policy

1. Who we are

Evenzy is developed and operated by Olmo Technologies, a sole-trader business based in Norway.

For the purposes of the General Data Protection Regulation (GDPR), Olmo Technologies is the data controller for personal data processed in connection with Evenzy.

Contact: contact@olmo-technologies.com

2. What data we collect

Unlike some of our apps, Evenzy is a connected service: because it lets several people share and settle expenses together, your data is stored on our backend (Supabase) rather than only on your device.

Account information

• Your email address (used to sign in and to let friends add you)
• A display name you choose (shown to people in your groups)
• Your password, which is stored only as a secure salted hash by our authentication provider — we never see or store your actual password
• Your chosen default currency and app language

Content you create

• Groups (trips) you create or join, and their members and guests
• Expenses you add — including merchant name, amounts, currency, dates, and individual line items
• Receipt photos you choose to scan or attach
• How expenses are split, and settlements ("who paid whom")
• Your friend connections and invitation codes

Technical and usage data

• A push-notification token (if you enable notifications) so we can notify you when a group member adds an expense
• Your subscription status and a count of how many receipts you have scanned, used to apply the free scan limit and Pro features

What we do NOT collect

• Location data
• Your contacts or calendar
• Advertising identifiers
• Browsing history or behaviour across other apps
• Your card or bank details — payments to friends happen outside Evenzy (e.g. in Vipps), and subscription payments are handled entirely by Apple or Google

3. How we use your data

We use your data solely to provide and operate Evenzy:

• Store and sync your groups, expenses, receipts and settlements across your devices and the members you share them with
• Calculate balances and simplify who owes whom
• Read receipts you scan (see Section 5) to extract items, prices, dates and currency
• Convert foreign amounts using the exchange rate on the purchase date
• Send you push notifications about activity in your groups (if enabled)
• Apply the free scan limit and manage your Pro subscription

We do not use your data for advertising, profiling, or any commercial purpose beyond operating the app. We do not sell your data.

Our legal basis under the GDPR is the performance of our contract with you (providing the app you signed up for) and, for optional features such as push notifications, your consent.

4. Sharing within groups

Evenzy is a shared, collaborative app. When you are a member of a group, the expenses, receipts, splits and settlements in that group are visible to the other members of that group, and your display name is shown to them. This is a core function of splitting bills together.

Only people who are members of a group can see that group's data. Access is enforced on our servers using row-level security so that people outside a group cannot read its contents. Your email address is only shared for the purpose of adding friends by email or code.

5. Third-party services

We use a small number of trusted providers to run Evenzy. We share only the data each provider needs for its function.

Supabase (backend)

Your account and content data is stored and processed using Supabase, which provides our database, authentication, file storage and server functions. Data is hosted in the European Union (Stockholm, Sweden). Supabase's data handling is governed by the Supabase Privacy Policy.

Anthropic (receipt scanning)

When you scan a receipt, the image is sent through our secure server function to Anthropic (maker of Claude) to extract the items, prices, date and currency. Anthropic does not use data submitted through its API to train its models, and the images are not linked to your identity. Anthropic's data handling is governed by the Anthropic Privacy Policy.

RevenueCat (subscriptions)

Evenzy uses RevenueCat to manage Pro subscription status and validate purchases. RevenueCat may receive your purchase receipt and an anonymous user identifier. RevenueCat's data handling is governed by the RevenueCat Privacy Policy.

Apple and Google

Subscription payments are handled entirely by Apple (App Store) or Google (Play Store) — we never receive your payment details. Push notifications are delivered through Apple Push Notification service and Google/Expo push infrastructure.

Expo (notifications)

Push notifications are sent using Expo's push service, which forwards them to Apple and Google. Only your notification token and the message content (e.g. "Kari added an expense") are processed. Expo's data handling is governed by the Expo Privacy Policy.

Exchange rates (frankfurter.app / European Central Bank)

To convert foreign currencies we request published reference rates from frankfurter.app. Only a date and a pair of currency codes are sent — no personal data.

No advertising networks

Evenzy does not integrate any advertising SDK or third-party tracking library.

6. Data storage and security

Your data is stored in our Supabase project hosted in the European Union (Stockholm). All data is transmitted over encrypted HTTPS connections and is encrypted at rest by the hosting provider. Access to each group's data is restricted on the server using row-level security, so that only members of a group can read its contents.

Receipt images are stored in a private storage bucket and are only made available to group members through short-lived, signed links. Passwords are never stored in plain text — authentication is handled by Supabase Auth, which stores only a secure hash.

7. Your rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the GDPR:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can correct your display name, currency and other details directly in the app, or by contacting us.
• Right to erasure — You can delete your account and personal data at any time via Profile → Delete Account in Evenzy, or by contacting us (see Section 8).
• Right to restriction — You can ask us to restrict processing of your data in certain circumstances.
• Right to data portability — You can request your data in a structured, machine-readable format.
• Right to object — You can object to processing based on legitimate interests.
• Right to withdraw consent — Where processing is based on consent (such as push notifications), you may withdraw it at any time.

To exercise any of these rights, contact us at contact@olmo-technologies.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no.

8. Data retention and account deletion

We keep your data for as long as your account is active. You can delete your account at any time from Profile → Delete Account inside Evenzy, or by emailing us at contact@olmo-technologies.com.

When you delete your account, your personal information — your login, email, display name, friend connections, push token and subscription data — is permanently removed.

Because Evenzy is a shared app, expenses and settlements you were part of are needed for the other members' balances to remain correct. Where such shared records exist, your entries are anonymised (your name is replaced with a placeholder such as "Former member") rather than deleted outright, so that the group's accounts stay consistent for the people you shared them with. These records contain no personal identifiers after anonymisation.

9. Children's privacy

Evenzy is intended for general audiences but is not directed to children under 13 (or the minimum age required in your country to consent to data processing). We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete that information.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you within the app. Your continued use of Evenzy after changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Olmo Technologies
Norway
contact@olmo-technologies.com