Draft — pending review
Privacy policy
tabtomo is free, has no ads and doesn’t track you. This page says what we store, why, and how to delete it.
Who we are
tabtomo is run by [operator name and address, to be completed]. For anything about your data, write to support@tabtomo.com.
What we store
• Your account: email address, name, how you sign in (Apple, Google or an email code), language, default currency and notification settings.
• Your groups: their names and members (including people you add by name), expenses, splits, payments and the history of every change.
• Receipt photos you attach to an expense.
• Push tokens of the devices where you turn on notifications.
• The assistants you connect: which assistant, what you allowed it to do and the tokens it uses, until you revoke it.
• Sign-in sessions, so you stay signed in on your devices.
• Technical logs and IP addresses, kept briefly, to run the service and stop abuse such as repeated sign-in attempts.
How we use it
Only to run tabtomo: show your groups and balances to their members, keep your devices in sync, send the sign-in codes and notifications you asked for, and keep the service secure.
What we don’t do
We don’t sell your data, show ads, or use tracking or advertising tools. We don’t use your data to train AI models.
Who processes it
• Cloudflare hosts tabtomo: servers, database, file storage and sign-in emails.
• Expo, Apple and Google deliver push notifications to your devices.
• Apple or Google, if you sign in with them.
• When you connect Claude or ChatGPT, what your assistant reads from tabtomo is also handled by Anthropic or OpenAI, under their own privacy policies.
• Feedback is sent to a private GitHub repository. Its words and pictures go to Cloudflare Workers AI to write the issue title. Diagnostic context contains no amounts, names or emails.
Where it’s stored
On Cloudflare’s network. The main database is in western North America, with read copies in other regions to keep tabtomo fast.
How long we keep it
As long as you have an account. A deleted group can be restored for 30 days, then it is erased. Receipt photos no longer attached to an expense are removed by a monthly cleanup.
Deleting your account
In the app, go to Account, then Delete account. Your sign-in methods, sessions, connected assistants and push tokens are deleted, and your account is removed. In groups you shared, you appear as “Deleted user”: the expenses stay, so the other members’ balances remain right.
Your rights
You can see and correct your data in the app, export a group’s expenses as CSV, and delete your account. For any other request, such as a copy of your data, write to support@tabtomo.com. Depending on where you live, you can also complain to your data protection authority.
Changes
If this policy changes, we’ll update this page, and tell you in the app when the change matters.