tab-it — Privacy Policy
Effective 11 June 2026
tab-it is an app for tracking and splitting expenses on group trips. This policy explains what data tab-it collects, why, and what control you have over it. The short version: we collect only what the app needs to work, we don't run ads or analytics, and we never sell your data.
What we collect
- Account details — your name and email address, provided when you sign in with Apple, Google, or an email code. If you use Apple's "Hide My Email", we only ever see the private relay address.
- Trip and expense data — trip names, expense descriptions, amounts, currencies, dates, payment records, and settlement records you and your trip members create.
- Receipts — photos of receipts you choose to attach to expenses.
- Email addresses of people you add — when you add someone to a trip by email (typed or chosen from your contacts), we store that address so they can join the trip when they sign in. We never read or upload your address book; the system contact picker shares only the single address you select.
- Push notification token — a device token used solely to deliver trip activity notifications you've enabled.
We do not collect your location, browsing history, advertising identifiers, usage analytics, or anything else not listed above.
How we use it
Only to run the app: signing you in, syncing trips between you and your trip members, showing who paid what, sending the sign-in codes and push notifications you request. We have no advertising, no analytics SDKs, and no data brokers. We never sell or share your data for marketing.
Who can see your data
Trip data is visible only to the members of that trip. Your profile name is visible to people who share a trip with you. Nothing is public.
Where it lives
Data is stored with our hosting provider, Supabase, on servers in the EU (eu-west-1). Sign-in is processed by Apple or Google when you use those options. Sign-in code emails are delivered by our email provider. Push notifications are delivered through Apple's notification service. These providers process data only on our instructions.
How long we keep it
For as long as your account exists. Deleted expenses, settlements, and trips are recoverable for 30 days, then permanently erased.
Deleting your account
You can delete your account at any time in the app under Settings → Delete account. This permanently removes your sign-in, profile, email address, push tokens, and every trip that only you joined — including its expenses and receipts. In trips you shared with others, the group's expense records remain (they belong to the group's ledger too), but your email and account identity are removed from them. Account deletion cannot be undone.
Your rights
Depending on where you live (including under UK and EU GDPR), you may have rights to access, correct, export, or erase your personal data, and to complain to a data protection authority. The in-app deletion covers erasure; for anything else, email us.
Children
tab-it is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their data.
Changes
If this policy changes materially, we'll note it here with a new effective date.
Contact
Questions or requests: support@tab-it.app