Privacy policy

Last updated: 17 October 2026

Your account

We do not ask for an email, phone number or password. Your account is a name you choose, a random key made by your phone that stays on it, and a 16-character recovery code shown to you once. Our servers keep only a fingerprint of the key and the code, never the originals.

Data you enter

• Trips, the names of the people you add (they have no accounts), expenses, deposits, settlements, notes and receipt photos.
• Locations you measure in the “Area guide”.

Stored in a cloud database (Supabase, inside the EU). Receipt photos are kept in private storage. A report link you share can be opened by anyone who has it, until you stop it or delete the trip.

On your phone

An encrypted copy for offline use, and the app PIN stored only as a fingerprint.

Outside services

• Google Gemini (optional — turn it off in ⚙ → “AI”): member evaluation sends trip figures with the members’ names; the area summary sends place information; the help assistant sends only your question.
• Maps and places (Esri, OpenStreetMap, OSRM, TomTom): receive only the coordinates you measure.
• Exchange rates (open.er-api.com): currency codes only.
• Support messages: saved by us and emailed to our mailbox through Resend, with your text, your email if you typed it, a screenshot if you attached one, and an app status summary (no amounts or trips).
• Error reports: the technical error text, app version, device type and a random install id.

We do not sell your data. No ads, no tracking or marketing analytics.

How long we keep it

• Your data is kept while your account exists.
• Receipt photos are deleted automatically after a trip is closed, per your setting (3 to 30 days), except photos you chose to “keep”.
• Deleting your account removes everything at once; technical backups are replaced within 14 days.

Children

The app is not directed at children under 13.

Contact

bms.support.app@gmail.com — or inside the app ⚙ → “Support”.