privacy

your phone number, stored in normalized E.164 form. it is the only identifier we use to sign you in and to deliver SMS.

a push notification token from each device you sign in on, refreshed each time you open the app.

the friend list you build inside the app, and the events you post or are invited to: titles, start and end times, places, descriptions, RSVPs, doc text, and chat messages.

an optional receipt photo you may attach to each in-app expense. receipts are stored privately, shown only to the event’s invitees via short-lived signed links, and hard-deleted on the same 7-day timer as the expense itself.

we send you a magic-link SMS when you sign in. there are no passwords. links expire 24 hours after issue, or 14 days for first-time invites, and are single-use.

we send a push notification (or, for friends who do not yet have the app installed, a one-time SMS) when something happens that involves you: a new event you are invited to, an edit, a cancel, an RSVP, or a chat message.

every event is private to its invitee list. only the people the host invited can see the event, its docs, or its chat. share links the host generates from inside the app are bound to a single event and the host can revoke them.

we do not sell your data, share it with advertisers, or pass it to data brokers.

we do not run analytics, tracking pixels, or third-party SDKs that phone home. the web pages you are reading right now load no scripts beyond what is required to open the app.

we do not show your phone number to anyone except friends who already have it, and we do not make events, profiles, or any part of the friend graph public or discoverable from outside the app.

rows live in the database until you delete your account. account deletion is not a self-serve button in v1 — email the address below and the operator will handle it by hand.

docs you delete inside an event are recoverable for 7 days, then permanently purged. expenses (and any receipt photo attached to them) follow the same 7-day undo window before they are hard-deleted. removing a friend hides their future events from you (and yours from them) but does not erase past shared events.

questions about privacy, take-down requests, or "please delete my account":