Who we are
Danowe is an app for keeping track of shared expenses. It is made and run by an individual developer (“we”, “us”). We decide how your data is used and are responsible for it under the data protection laws that apply to you, such as the EU and UK GDPR, Turkey’s Personal Data Protection Law (KVKK) and US state privacy laws like California’s CCPA.
Questions and requests: support@danowe.com.
The short version
- We collect what the app needs to work: your email, your name, and the expenses you and your friends add.
- There are no ads, no advertising trackers and no analytics. We don’t sell or rent your data.
- You can export your data and delete your account from inside the app at any time.
What we collect
Your account
- Email address, used to sign in with a one-time code. Codes are deleted after a day.
- Name, profile photo (optional), avatar color, default currency and language.
- Notification settings and the push token of each device you use.
- If you sign in with Apple: the identifier Apple gives us for you, the email address Apple shares (which can be a private relay address if you chose to hide yours), and a token we use only to revoke the Apple sign-in when you delete your account.
What you add
- Expenses and payments: titles, amounts, currencies, dates, notes, categories, who paid and how they were split, receipt items and receipt photos. When you scan a receipt, the text is read on your iPhone; only the photo you attach is uploaded.
- Groups, comments, reminders and the activity history of these.
- Feedback you send us, with the app version and device model.
People you add
When you add a friend, you give us their name and, if you choose, their email address, so they can join and see what you share with them. If you add someone without an email, you send them their invite link yourself, by message or any app you like; we never see how you sent it. Danowe doesn’t access your contacts or upload your address book.
Purchases
Danowe is free and doesn’t sell anything in the app at the moment. The app includes the Adapty SDK, which we will use for subscriptions; it receives an installation identifier, your device model, iOS version and Danowe account ID, and is set not to collect your advertising identifier or IP address. If we offer subscriptions later, Apple will handle the payment and we will never see your card details.
Technical data
- Crash reports (Firebase Crashlytics): device model, iOS version, app version, what went wrong, and your account ID, without your name or email.
- App integrity check (Firebase App Check with Apple’s App Attest): a token showing that a request comes from the genuine Danowe app on a real device. It doesn’t identify you.
- Your IP address, used for a moment to limit how many requests one connection can send. We don’t store it; our server logs keep only the time, the request and error details, and are deleted automatically after a short time.
- If we suspend an account for breaking our Terms of Use, a note of why, kept while the suspension lasts.
Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account, signing you in, keeping and sharing your expenses and balances with the people in them | Performing our contract with you |
| Push notifications about activity that involves you | Your consent (you can turn them off in the app or in iOS Settings) |
| Subscriptions, if we offer them and you buy one | Performing our contract with you |
| Fixing crashes, preventing abuse, keeping the service secure, backups | Our legitimate interest in a working, safe service |
| Answering your messages and feedback | Our legitimate interest, or your request |
| Keeping records the law requires | Legal obligation |
Who can see it
Other Danowe users. People you share a group or an expense with see your name, photo, email address and the shared expenses, payments and comments. That’s how splitting works.
Service providers. These companies process data for us, under contracts that limit them to doing so:
| Provider | What for | Where |
|---|---|---|
| Hetzner | Server and database | Nuremberg, Germany |
| Cloudflare | Network and security in front of our server and this website (connections pass through it), receipt and profile photos (R2), daily backups, forwarding email to [email protected] | Global network; photos and backups in the European Union |
| Google Firebase | Push notification delivery, crash reports, app integrity checks | EU and United States |
| Apple | Sign in with Apple, push notifications, App Attest, the App Store | United States and elsewhere |
| Adapty | Subscription infrastructure | European Union and United States |
| Resend | Sending sign-in codes and invitation emails | European Union (Ireland) |
Your data may be processed in countries other than the one you live in. Where the law requires it, these transfers are protected by safeguards such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
We disclose data to authorities only when the law requires it.
How long we keep it
- Your account and expenses: as long as you have an account.
- Sign-in codes: one day. Expired sign-ins: deleted soon after they expire.
- Backups: 30 days, then overwritten.
- Crash reports: up to 90 days.
Deleting your account
In the app, go to Account, tap Edit on your profile, then Delete account. We then delete your email, profile photo, sign-ins, devices, invitations and friend list, and any group that only you are in. Expenses you shared with others stay, so their balances still add up; in them, your name is shortened to your first name and last initial and marked as deleted. Copies in backups disappear within 30 days.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent at any time. Many of these you can do in the app (edit your profile, export to CSV, turn off notifications, delete your account). For anything else, write to support@danowe.com; we answer within 30 days.
You can also complain to the data protection authority where you live, for example your national authority in the EU, the ICO in the UK or the Personal Data Protection Authority (KVKK) in Turkey.
If you live in the United States
We don’t sell your personal information or share it for targeted advertising, and we don’t use it to profile you. Depending on your state, you can ask to know what we hold about you, to correct it or to delete it, as described above; we won’t treat you differently for asking.
Security
Connections are encrypted (HTTPS). Sign-in codes and tokens are stored hashed. Photos are private and shown only to people allowed to see them. The app can be locked with Face ID. No system is perfectly secure, but we take care to keep yours safe.
Children
Danowe is not meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
Changes
If we change this policy, we will update the date above. If the changes are significant, we will tell you in the app before they apply.