Privacy Policy
SharePocket is an expense-sharing and personal debt tracker. You record what you lent, what you borrowed, and what a group of people spent together; the app works out who owes whom. This policy explains exactly what we store, why, who can see it, and how to get it deleted.
The short version. We store the account details Google gives us when you sign in (name, email, profile picture) and the expense records you choose to create. We do not read your phone contacts, we do not track your location, we do not use advertising or analytics SDKs, and we do not sell your data to anyone. SharePocket never touches money — it records amounts, it does not move them, so we never ask for or store card or bank details.
1. Who we are
SharePocket ("we", "us", "the app") is operated by Logic Aspire, the developer and data controller. For any privacy question, data access request, or deletion request, contact info@oldsitewp.logicaspire.com. We aim to reply within 30 days.
2. Information we collect
2.1 Account information
SharePocket uses Google Sign-In — we never create or handle a password. When you sign in, Google provides us with:
- your email address (used as your unique identity, and so friends can find you);
- your display name;
- the URL of your Google profile picture.
You can change the display name shown to others at any time in Settings. We do not receive your Google password or access to any other Google service.
2.2 Information you enter yourself
- Expense records — description, amount, currency, optional category and date.
- Splits and settlements — who owes what share, payments recorded between people, and an optional note.
- Groups — group name, type (personal, trip or roommate), and currency.
- Friends — the people you connect with in the app.
- Offline contacts — you can add someone who is not a SharePocket user (an "offline contact") by typing a name, and optionally an email and a city or country. This is typed by you; the app has no access to your device's contact list.
- Monthly ledger snapshots — when you archive a roommate period, we save a snapshot of the balances so the history stays intact.
- Preferences — your default currency and your light/dark theme choice.
2.3 Technical information
Our hosting provider processes standard connection data (IP address, timestamps) in server logs as an inherent part of delivering the service and protecting it from abuse. Your login session token is stored in your device's secure keychain/keystore.
2.4 What we do not collect
| Data type | Status |
|---|---|
| Device contact list | Never accessed. No contacts permission is requested. |
| Location / GPS | Never accessed. No location permission is requested. Any city or country is text you type yourself. |
| Camera, microphone, photos | Never accessed. |
| Card, bank or payment details | Never collected. SharePocket records debts; it does not process payments. |
| Phone numbers | Not stored on our servers. |
| Advertising ID, ad SDKs, trackers | None. The app contains no advertising libraries. |
| Third-party analytics or crash-reporting SDKs | None. |
| Health, biometric, or precise financial account data | Never collected. |
3. How we use your information
We use your data solely to operate the app. Specifically, to:
- authenticate you and keep you signed in;
- store your expenses and calculate balances and the simplified settle-up plan;
- show shared records to the other members of a group you belong to;
- sync your data across your own devices in real time;
- let you generate a PDF statement of your records;
- keep the service secure and diagnose faults.
We do not use your data for advertising, profiling, or automated decision-making, and we do not train machine-learning models on your records.
4. Who can see your data
4.1 Other people in the app — by design
SharePocket is a shared ledger, so some of your information is visible to people you choose to share with. Specifically:
- Your display name and profile picture are visible to your friends and to members of groups you join.
- Your email address is how other users find and add you as a friend.
- Expenses, splits and settlements in a shared group are visible to every member of that group, including who paid and who owes what.
Your data is not visible to users outside the groups and friendships you take part in. Access is enforced at the database level with deny-by-default row-level security rules.
4.2 Service providers
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase (privacy policy) | Database, authentication and real-time sync hosting | All account and expense data described in section 2 |
| Google (privacy policy) | Sign-in provider | Your name, email and profile picture, at sign-in |
These providers process data on our behalf and are not permitted to use it for their own purposes. Their servers may be located outside your country, which means your data may be transferred and stored internationally.
4.3 Reminders you send
When you send a payment reminder, the app opens WhatsApp, your SMS app, or your device's share sheet with a message already written. Nothing is sent until you press send in that app, and we do not transmit the message ourselves or keep a copy. Once sent, the message is handled under that app's own privacy policy.
4.4 PDF statements
PDF statements are generated on your device and shared only where you choose to send them. They are not uploaded to us.
4.5 Legal disclosure
We may disclose data if we are legally required to by a valid order from a competent authority, or where necessary to protect our rights or the safety of users.
4.6 We do not sell your data
We have never sold, rented or traded personal data, and we will not.
5. How we protect your data
- All traffic between the app and our servers is encrypted with HTTPS/TLS, and data is encrypted at rest by our hosting provider.
- Every database table is protected by deny-by-default row-level security, so a request can only ever return rows you are entitled to see.
- Your session token is stored in the device's secure keychain/keystore, not in plain application storage.
- Input is validated before it reaches the database, and privileged server keys are never included in the app.
No system can be guaranteed perfectly secure, but we take these measures seriously and will notify affected users without undue delay if a breach affecting personal data occurs.
6. How long we keep your data
We keep your data for as long as your account exists, because the app's purpose is to maintain an accurate running record. When you delete your account, see section 7. Server logs held by our hosting provider are retained for a short period under their retention schedule.
7. Deleting your data
You can delete your account from inside the app: Settings → Delete account. The action requires a typed confirmation, and it removes your profile and your personal records.
One important limit. SharePocket records are shared. An expense you added to a group is also part of the other members' financial history, so deleting your account does not erase the shared record from their ledger — doing so would silently corrupt their balances. Your profile and personal data are removed; the shared entries remain in that group.
If you want your data erased more completely than the in-app option allows, email info@oldsitewp.logicaspire.com and we will action it manually, including removal of the underlying authentication record.
You can also request account deletion without installing the app by emailing us from the address you signed up with.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data (your display name is editable directly in Settings);
- delete your data (section 7);
- export a copy of your records — the app's PDF statement does this, and we can supply a fuller export on request;
- object to or restrict certain processing, and to withdraw consent;
- complain to your local data protection authority.
To exercise any of these, email info@oldsitewp.logicaspire.com. We do not charge a fee, and we will not discriminate against you for making a request.
9. Children
SharePocket is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.
10. Adding other people to the app
If you add an offline contact, you are entering another person's details. Please only add information you are entitled to share, and tell them their name is recorded in an app you use to track shared expenses. If someone believes their details were added without a proper basis, they can email us and we will remove them.
11. Changes to this policy
We may update this policy as the app changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle your data, we will give notice in the app before it takes effect. Continuing to use SharePocket after an update means you accept the revised policy.
12. Contact
Questions, requests, or complaints about privacy:
Email: info@oldsitewp.logicaspire.com
Developer: Logic Aspire