Privacy

Owesome is a shared-expense ledger. It records who paid for what among people who already know each other. It is not a payment service and never moves money.

Who is responsible

PassionFlow Ltd, Meteoron 18, Avalon 1, Villa 18, 8250 Paphos, Cyprus.

Contact: Daniel Drinhausen — info@passionflow.net.

What is stored

• Your account. Email address, a hashed password if you use one, your display name, an optional profile photo and your language preference.
• Your shared ledgers. The spaces you belong to, the people in them, and every expense, split, settlement and payment request — amounts, currencies, dates, categories and any note you type.
• Receipts. Photos or PDFs you upload, kept in private storage that only members of that space can read through short-lived signed links.
• Guests. A name, and a cookie on the guest’s device holding a one-time link. Guests have no account and no password.
• Activity. A log of who added, changed or deleted an entry, so a space can be audited by its own members.

There is no advertising, no profiling and no analytics or tracking product in Owesome.

Signing in with Google or Apple

If you sign in with Google, we receive your name, email address and profile picture from Google. If you sign in with Apple, we receive your name and an email address — and if you choose Hide My Email, that address is an Apple relay address, which is all we ever see. We use it only to identify your account. We never receive your password, and Owesome cannot read anything else in your Google or Apple account.

An account created with Apple’s relay address is a separate account from one created with your real address. Revoking Owesome’s access in your Apple or Google settings stops future sign-ins; it does not delete the account, which you delete in Owesome.

Reading receipts with AI

When receipt scanning is switched on, the receipt file you upload is sent to Google’s Gemini API to be turned into a list of items and prices. Only the file is sent: no names, no group membership, no balances and no other expense. The result is a suggestion you confirm or correct before anything is saved. Nothing is booked automatically, and the model has no access to your ledger.

Who else processes it

• Supabase — database, authentication and file storage, hosted in the EU (eu-central-1).
• Vercel — application hosting; server functions run in Frankfurt (fra1).
• Google — the Gemini API for receipt scanning, and Google sign-in if you use it.
• Apple — Sign in with Apple, if you use it.

How long it is kept

Your data stays for as long as your account exists. When you ask for deletion, the account is scheduled for purge 30 days later; signing in during that window cancels it, because signing in is how you change your mind. After the purge your profile becomes an unnamed tombstone, your email and password are destroyed, your payment methods and guest links are revoked, and your profile photo is deleted.

Your entries are not erased with you. An expense you paid for is also other people’s record of what they owe, so it stays in that space attributed to a nameless former member. Once a space is fully settled, that placeholder is anonymised too, at the latest twelve months later. Nothing in this deletes another member’s expenses.

Your rights

You can see and correct your own data in the app, export nothing you did not put in, and have your account deleted from account settings. Under the GDPR you may also request access, correction, deletion, restriction, portability, and object to processing — write to info@passionflow.net. Owesome’s lead supervisory authority is the Office of the Commissioner for Personal Data Protection in Cyprus, and you may also complain to the authority where you live.

Cookies

Owesome sets a session cookie so you stay signed in, and a guest cookie on a guest’s device so a shared link keeps working. Both are strictly necessary for the app to function. There are no advertising or analytics cookies.

Changes

If this changes materially, the app will say so before the change takes effect.