Privacy Policy

Zentally (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile application and related services (collectively, the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your email address and display name. You may optionally provide a phone number and profile photo.

Financial Data

We collect expense descriptions, amounts, currencies, dates, split information, and settlement records that you voluntarily enter into the Service. This data is essential for the Service to function.

Device Information

We collect device identifiers, operating system version, and push notification tokens to deliver notifications and ensure app compatibility.

Usage Data

We collect anonymized analytics about how you use the Service, including screen views, feature usage, and error reports via Sentry.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process and display your expenses, balances, and settlements
• To send push notifications about expenses and payment reminders
• To convert currencies using real-time exchange rates
• To respond to support requests
• To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored on Supabase, a cloud platform built on PostgreSQL. Data is encrypted at rest and in transit using TLS 1.2+. We use row-level security policies to ensure you can only access your own data and data shared with your groups.

Authentication tokens are stored securely using platform-specific secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).

4. Third-Party Services

We use the following third-party services:

• Supabase — Database, authentication, and file storage
• Yahoo Finance — Currency exchange rates
• Sentry — Error tracking and performance monitoring
• Expo — Push notification delivery

These services have their own privacy policies. We encourage you to review them.

5. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

• With other users in your groups or individual connections, limited to expense and balance data
• With third-party service providers as described above
• When required by law or to protect our legal rights

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for optional data processing

You can export your data at any time from Account → Privacy & Security → Export My Data in the app (JSON or CSV). You can also hide your profile from search and contact matching there. To exercise any other right, email us at privacy@zentally.co.

7. Data Deletion

You can delete your account in the app from Account → Delete Account (or Privacy & Security → Delete Account). Deletion takes effect immediately: your login is removed, you leave all groups, recurring expenses you created stop, and your name, email, phone number, photo, and preferences are erased.

Expenses, settlements, comments, and receipts you shared with other people stay in their history so their balances remain correct, but they are shown as from “Deleted user” and are no longer linked to your identity. Some anonymized data may be retained for analytics purposes.

If you no longer have the app installed, email privacy@zentally.co from your account’s email address and we will delete your account within 30 days.

8. Cookies

The mobile app doesn’t use cookies. Our website (zentally.co) uses no cookies and no analytics. It keeps two things in your browser’s local storage: your light or dark theme choice, and, if you sign in, your session so you stay signed in. Both stay on your device. Signing out removes the session, and clearing your browser data removes both.

9. Children’s Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or email. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@zentally.co