Privacy Policy

Last updated 23 October 2026

Who we are

Danowe is an app for keeping track of shared expenses. It is made and run by an individual developer (“we”, “us”). We decide how your data is used and are responsible for it under the data protection laws that apply to you, such as the EU and UK GDPR, Turkey’s Personal Data Protection Law (KVKK) and US state privacy laws like California’s CCPA.

Questions and requests: support@danowe.com.

The short version

  • We collect what the app needs to work: your email, your name, and the expenses you and your friends add.
  • There are no ads, no advertising trackers and no analytics. We don’t sell or rent your data.
  • You can export your data and delete your account from inside the app at any time.

What we collect

Your account

  • Email address, used to sign in with a one-time code. Codes are deleted after a day.
  • Name, profile photo (optional), avatar color, default currency and language.
  • Notification settings and the push token of each device you use.
  • If you sign in with Apple: the identifier Apple gives us for you, the email address Apple shares (which can be a private relay address if you chose to hide yours), and a token we use only to revoke the Apple sign-in when you delete your account.

What you add

  • Expenses and payments: titles, amounts, currencies, dates, notes, categories, who paid and how they were split, receipt items and receipt photos. When you scan a receipt, the text is read on your iPhone; only the photo you attach is uploaded.
  • Groups, comments, reminders and the activity history of these.
  • Feedback you send us, with the app version and device model.

People you add

When you add a friend, you give us their name and, if you choose, their email address, so they can join and see what you share with them. If you add someone without an email, you send them their invite link yourself, by message or any app you like; we never see how you sent it. Danowe doesn’t access your contacts or upload your address book.

Purchases

Danowe is free and doesn’t sell anything in the app at the moment. The app includes the Adapty SDK, which we will use for subscriptions; it receives an installation identifier, your device model, iOS version and Danowe account ID, and is set not to collect your advertising identifier or IP address. If we offer subscriptions later, Apple will handle the payment and we will never see your card details.

Technical data

  • Crash reports (Firebase Crashlytics): device model, iOS version, app version, what went wrong, and your account ID, without your name or email.
  • App integrity check (Firebase App Check with Apple’s App Attest): a token showing that a request comes from the genuine Danowe app on a real device. It doesn’t identify you.
  • Your IP address, used for a moment to limit how many requests one connection can send. We don’t store it; our server logs keep only the time, the request and error details, and are deleted automatically after a short time.
  • If we suspend an account for breaking our Terms of Use, a note of why, kept while the suspension lasts.

Why we use it

PurposeLegal basis
Creating your account, signing you in, keeping and sharing your expenses and balances with the people in themPerforming our contract with you
Push notifications about activity that involves youYour consent (you can turn them off in the app or in iOS Settings)
Subscriptions, if we offer them and you buy onePerforming our contract with you
Fixing crashes, preventing abuse, keeping the service secure, backupsOur legitimate interest in a working, safe service
Answering your messages and feedbackOur legitimate interest, or your request
Keeping records the law requiresLegal obligation

Who can see it

Other Danowe users. People you share a group or an expense with see your name, photo, email address and the shared expenses, payments and comments. That’s how splitting works.

Service providers. These companies process data for us, under contracts that limit them to doing so:

ProviderWhat forWhere
HetznerServer and databaseNuremberg, Germany
CloudflareNetwork and security in front of our server and this website (connections pass through it), receipt and profile photos (R2), daily backups, forwarding email to [email protected]Global network; photos and backups in the European Union
Google FirebasePush notification delivery, crash reports, app integrity checksEU and United States
AppleSign in with Apple, push notifications, App Attest, the App StoreUnited States and elsewhere
AdaptySubscription infrastructureEuropean Union and United States
ResendSending sign-in codes and invitation emailsEuropean Union (Ireland)

Your data may be processed in countries other than the one you live in. Where the law requires it, these transfers are protected by safeguards such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

We disclose data to authorities only when the law requires it.

How long we keep it

  • Your account and expenses: as long as you have an account.
  • Sign-in codes: one day. Expired sign-ins: deleted soon after they expire.
  • Backups: 30 days, then overwritten.
  • Crash reports: up to 90 days.

Deleting your account

In the app, go to Account, tap Edit on your profile, then Delete account. We then delete your email, profile photo, sign-ins, devices, invitations and friend list, and any group that only you are in. Expenses you shared with others stay, so their balances still add up; in them, your name is shortened to your first name and last initial and marked as deleted. Copies in backups disappear within 30 days.

Your rights

You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent at any time. Many of these you can do in the app (edit your profile, export to CSV, turn off notifications, delete your account). For anything else, write to support@danowe.com; we answer within 30 days.

You can also complain to the data protection authority where you live, for example your national authority in the EU, the ICO in the UK or the Personal Data Protection Authority (KVKK) in Turkey.

If you live in the United States

We don’t sell your personal information or share it for targeted advertising, and we don’t use it to profile you. Depending on your state, you can ask to know what we hold about you, to correct it or to delete it, as described above; we won’t treat you differently for asking.

Security

Connections are encrypted (HTTPS). Sign-in codes and tokens are stored hashed. Photos are private and shown only to people allowed to see them. The app can be locked with Face ID. No system is perfectly secure, but we take care to keep yours safe.

Children

Danowe is not meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we will delete it.

Changes

If we change this policy, we will update the date above. If the changes are significant, we will tell you in the app before they apply.