Effective 23 June 2026

Privacy Policy

This policy explains what information EvenUp collects, why we collect it, how we use it, and the controls you have over your data.

1. Who we are

EvenUp ("we", "us") is the data controller for the information you share through the EvenUp app. You can reach us at support@evenup.in for any privacy question or request.

2. What we collect

We collect only what we need to make the app work:

  • Account details: your user ID, name, phone number, and email — verified by OTP. Avatar/colour preference if you set one.
  • Contacts: if you allow contacts access, EvenUp reads contact names, phone numbers, and email addresses on your device so you can find and invite people. Your full address book stays on your device. Only the contact details you explicitly choose are sent to EvenUp when you add or invite someone.
  • Content you add: friends, groups, expenses, balances, settlements, notes, and attachments (e.g., receipt images) you upload.
  • Notification and app identifiers: push tokens, installation identifiers, and session identifiers used to deliver notifications and operate the app.
  • Device, interaction & diagnostic data: app version, device model, OS, runtime version, current screen or feature context, and crash/error reports — used to diagnose problems and keep the app stable.
  • Support data: any messages, screenshots, or device info you send us through Help & Support.

EvenUp does not handle money, bank details, card details, or UPI credentials. We never collect them.

3. How we use your information

  • To run the core app — sync your groups, balances, and settlements across your devices and with people you share groups with.
  • To verify your phone or email and keep your account secure.
  • To send notifications you have enabled (expense added, settled up, reminders).
  • To respond to support tickets and feedback you raise.
  • To debug crashes, fix bugs, and improve performance.
  • To send service messages — for example, important changes to these policies or to your account.

4. Who we share it with

We do not sell your data. We share data only with service providers who help us run EvenUp, and only to the extent needed:

  • Supabase — hosted database, authentication, file storage, and server functions.
  • Expo push notification service, Apple Push Notification service (APNs), and Firebase Cloud Messaging (FCM) — to deliver notifications.
  • Sentry — crash and error reporting used to diagnose stability problems. Default personal-information collection is disabled.
  • Zoho Mail — authentication, invitation, account, and support emails.

We may also share information when required by law, by valid legal process, or to protect the rights, safety, or property of EvenUp or its users.

Other people in your shared groups can see what you add to those groups (members, expenses, balances, notes, attachments) — that is how shared expense tracking works. Only add people and information you are comfortable sharing.

5. Where your data is stored

Your data is stored on managed cloud infrastructure (Supabase). It may be stored or processed outside your country. We use industry-standard safeguards including encryption in transit and access controls.

6. Your rights

You can, at any time:

  • Access and review your data through the app.
  • Correct or update your account details from your profile.
  • Export your data as a downloadable CSV from Summary.
  • Withdraw consent for push notifications, contact use, or other optional processing.
  • Request deletion of your account and your data (see below).

7. Account deletion and export

You can request account deletion in the app from Profile > Delete Account. If you cannot access the app, visit https://evenup.in/delete-account or email support@evenup.in from your registered email address.

The app shows the exact cooling period deadline before you confirm. Under our current standard policy, the cooling period is 30 days. During this time your account remains usable, but deletion is scheduled unless you cancel the request from the same Delete Account page before the deadline.

  • We send a confirmation email when the request is received, a reminder before the cooling period deadline, and a final confirmation after deletion is completed, when a verified email is available.
  • You can export your records from Summary before the cooling period deadline.
  • Reviewing or settling balances is optional and does not delay deletion.

After the cooling period deadline, the request becomes final and access to the app is restricted. Permanent deletion is completed automatically during a later processing run. Your sign-in identity, profile details, contact details, avatar, notification tokens, private notifications, and private support data are removed from active systems.

Shared expense and settlement records may remain in other participants’ histories so their ledgers stay accurate. Your name and personal details are replaced with “Deleted user”. Groups you own transfer to another active member at final deletion; a group without another active member closes.

8. How long we keep your data

We keep account and personal data while your account is active and through the cooling period. After final deletion, anonymised shared ledger records may remain for as long as those records are needed by other participants. Minimal deletion audit records, security records, and records required by law may be retained only for those purposes. Backups are rotated and overwritten on their normal schedule. Diagnostic and crash data is typically retained for up to 90 days.

9. Children

EvenUp is not designed for children under 13. If you believe a child under 13 has shared personal information with us, please contact support@evenup.in and we will remove it.

10. Security

We use encryption in transit, server-side access controls, and OTP-based account verification. No service can be perfectly secure, so please use a strong, unique password if you set one, and let us know straight away if you suspect unauthorised access to your account.

11. Changes to this policy

We may update this policy from time to time. If a change is material, we will let you know through in-app notifications, and by email if you have one verified. The "Effective" date at the top tells you when the latest version was published.

12. Governing law

This policy is governed by the laws of India. Any dispute relating to it will be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka.

13. Contact us

For privacy questions, data requests, or to exercise any of the rights above, email support@evenup.in. We aim to respond within 30 days.