Privacy Policy
Partible helps friends keep track of shared costs, such as trips, dinners and a shared home. This policy explains what we keep, why, where, who else handles it and what you can do about it. In short: we keep only what the app needs to work, we never sell your data, there are no ads or trackers, and you can export or delete everything from inside the app.
1. Who is responsible
Partible is made by Viet Muoi Pham, an individual developer based in Hanoi, Vietnam (“we”, “us”), who is the controller of your personal data. Contact: muoipham.digital@gmail.com. We answer privacy requests within one month. The same person is our Data Protection Officer (Singapore), the person in charge of the protection of personal information (Québec, Canada) and the business operator responsible for personal information (Japan) and the data user (Hong Kong). Our postal address is given on request.
2. Who Partible is for
Partible is for people 16 and over, in every country. It is not directed at children. If we learn that an account belongs to someone under 16, we delete it. In places where Apple tells apps a person’s age range, such as some US states, Partible checks it and doesn’t create an account for anyone under 16.
3. What we keep and why
| Data | Why | Who sees it |
|---|---|---|
| Your name, initials and avatar (a drawn face or a colour) | So people in your groups know who paid what | You and the people in your groups |
| Your email address, from Sign in with Apple or Google. With Apple you can hide your real address, and we then get a relay address | To sign you in and to recover your account | Only you |
| Your mobile number, if you add one | Kept on your profile, for your own reference | Only you |
| Groups and what you add to them: group names and dates, costs (title, amount, category, date, note, who paid, how it was split), payments you record, invite codes and the change history | This is the app: it works out who owes whom and keeps everyone’s copy in step | The people in that group |
| An account ID | To link your groups and costs to you | Only our systems |
| A push token for your iPhone, and your notification switches. Only if you allow notifications | To deliver reminders from friends you owe, and the notifications you switched on | Only our systems |
| Your preferences: language, number format, default currency | To show amounts the way you read them | Only you |
Kept only on your iPhone: your Personal tab (your own costs, monthly bills and the charts made from them). These never reach our servers. They are in your device backup if you use one.
What we don’t collect: bank account numbers, IBANs, payment handles or card numbers (Partible never moves money; you pay each other in your own bank or payment app and record it here); your contacts or address book; your location; photos (when bill scanning arrives, receipts are read on your iPhone and the photo is not uploaded); Face ID data (iOS checks your face, and the app only learns yes or no); advertising identifiers; analytics or tracking of what you do in the app. We don’t show ads.
4. Legal basis (EU, EEA, UK and Switzerland)
- To provide the app you asked for (contract, GDPR Article 6(1)(b)): your account, groups, costs, payments and sync.
- Your consent (Article 6(1)(a)): push notifications. You can withdraw it at any time in iOS Settings or in the app’s Profile.
- Legitimate interest (Article 6(1)(f)): keeping the service secure, for example limiting repeated wrong invite codes.
5. Where your data is kept, and who helps us
We don’t sell or rent your data, and we don’t share it for advertising. These companies process it for us, only to run Partible:
- Google (Firebase). Your groups, costs, payments, profile and push tokens are stored in Google Cloud Firestore in Europe (the “eur3” location: Belgium and the Netherlands), and our server functions run in Belgium. Sign-in records (Firebase Authentication) and push delivery (Firebase Cloud Messaging) are handled by Google and may be processed in the United States and other countries.
- Apple. Sign in with Apple, and the Apple Push Notification service that delivers notifications to your iPhone.
- Google Sign-In, if you choose to sign in with Google.
When data leaves the EEA, UK or Switzerland, it is protected by the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the company is certified, or by the European Commission’s Standard Contractual Clauses. People using Partible from other countries should know their group data is stored in Europe, and that sign-in and push delivery may happen in the United States:
- Japan: the EU is recognised by Japan’s Personal Information Protection Commission as having an equivalent level of protection. For the United States, which has no such recognition, Google is bound by contract to protect the data to the standard of Japan’s Act on the Protection of Personal Information (APPI). We give you more detail on these measures on request.
- Canada: data stored or processed outside Canada is subject to the laws of those countries, and their authorities may be able to access it. Before using services outside Québec, we assessed that Google and Apple protect the data adequately, as Québec’s Law 25 requires.
- Singapore: we transfer data outside Singapore only to companies bound to protect it to a standard comparable to the Personal Data Protection Act (PDPA).
- Hong Kong and Taiwan: data is transferred outside your territory only to the companies above, which are bound by contract to protect it.
- United States, Australia, New Zealand and elsewhere: the same protections apply, wherever you live.
6. How long we keep it
- We keep your account and groups for as long as you have an account.
- Delete your account in the app: Profile → Delete my account. If you still owe or are owed money, the app asks you to settle first, so nobody’s balances break.
- When you delete your account, we remove your profile, email, mobile number, preferences and push tokens straight away. Costs and payments you shared stay with the other people in those groups, because they are part of their records too, but your name on them becomes “Former member”.
- Google may keep encrypted copies in its own backups for a short time before they are overwritten.
- Signing out removes this iPhone’s push token.
7. Your rights
You can ask us to show, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent. Much of this is in the app:
- Export: Profile → Export my data (JSON), and each group’s export (CSV and JSON).
- Correct: Profile → Edit profile.
- Delete: Profile → Delete my account.
For anything else, email muoipham.digital@gmail.com. You can also complain to a data protection authority: in the EU or EEA, the one where you live; in the UK, the ICO; in Switzerland, the FDPIC; in Australia, the OAIC; in New Zealand, the Office of the Privacy Commissioner; in Canada, the Office of the Privacy Commissioner of Canada (in Québec, the Commission d’accès à l’information); in Singapore, the PDPC; in Japan, the Personal Information Protection Commission; in Hong Kong, the Privacy Commissioner for Personal Data (PCPD); in Taiwan, the Personal Data Protection Commission.
United States residents, including California: we don’t sell or share your personal information for targeted advertising, and we don’t use sensitive information to infer things about you. You have the rights to know, correct and delete, and we won’t treat you differently for using them.
8. Security
Data travels encrypted (HTTPS) and is encrypted at rest by Google. Only people in a group can read that group, and only you can read your profile. Every change goes through our server checks. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law where you live requires.
9. Changes to this policy
If we change what we collect or why, we update this page and its date, and for important changes we tell you in the app before they take effect.