Legal
Privacy policy
This explains what DueCircle collects, why, and what control you have. We have tried to write it in plain language rather than the usual defensive legalese.
What we collect
- Account information: your email address, display name, mobile number, preferred currency, and — unless you signed in with Google — a password, stored only as a cryptographic hash. We never see or store the password itself.
- Your mobile number is required because group members settle up with each other directly, and it is shown to the other members of any group you join, so they know who they are paying.
- Group content: the expenses, splits and settlements you and your group members create. This is the data the product exists to hold.
- Technical data: IP address, browser type and pages visited, used to keep the service running securely and to understand which pages are useful.
- We do not collect your date of birth, bank credentials, card numbers, or transaction feeds. We never connect to financial institutions.
How we use it
- To operate your groups: calculating balances, working out who should pay whom, and showing your history.
- To send you email you have asked for: verifying your address, signing you in, and resetting your password.
- To keep the service secure: detecting abuse, debugging faults, and preventing unauthorised access.
- We do not sell your data. We do not share group content with advertisers, data brokers, or any third party, except where legally compelled.
Advertising and analytics
- DueCircle is free. It is intended to be funded by advertising on our public pages — guides, calculators and marketing pages — and never inside your account.
- Advertising is not currently switched on. When it is, your group's financial data will not be used to select or target it: ads will be contextual to the page being read, not to you or your spending.
- We use Google Analytics on our public pages to understand which pages are useful. In the EEA, the UK and Switzerland, analytics and advertising consent is set to denied by default, so no analytics or advertising cookies are stored unless and until you agree to them.
- We do not run advertising or analytics inside the signed-in app.
Who can see your data
- Members of a group can see that group's expenses, balances and settlements, and can add, edit and delete them.
- Members of a group can also see each other's display name, email address and mobile number.
- A group is joined by a code or QR code shared by whoever created it. A code on its own admits nobody: the person who created the group has to approve each request, and until they do, the requester sees only the group's name.
- Data in one group is never visible from another group, even to a user who belongs to both.
- Our staff do not access group content routinely. Access happens only when you ask us to investigate a specific problem, or where required to prevent harm or comply with the law.
Your rights
- Access and export: ask us and we will send you a copy of your data. We do this manually today — a self-service export is not built yet.
- Deletion: ask us and we will delete your account and the data attached to it. Expenses you created in a shared group are part of other people's records too, so we will tell you what can be removed outright and what has to be anonymised instead.
- Correction: you can edit your own profile at any time, and any member of a group can correct that group's expenses.
- If you are in the EU, UK, India or another region with equivalent protections, you also have the right to object to processing and to lodge a complaint with your data protection authority.
Security and retention
- Traffic is encrypted in transit with HTTPS. Passwords are hashed with bcrypt, a deliberately slow algorithm.
- Deleting an expense hides it from balances but keeps the record, so an accidental deletion can be put right. Ask us if you need one restored.
- We keep account data for as long as your account exists, and remove it when you ask us to delete the account.
Contact
For any privacy question, data export or deletion request, contact us via the contact page. We respond to rights requests within the timeframes required by applicable law.