Privacy Policy

Last updated: June 13, 2026  ·  Effective date: June 13, 2026

This Privacy Policy explains how Divo LLC ("DIVO", "we", "us", or "our") collects, uses, shares, and protects information when you use the DIVO mobile application (the "App"). DIVO is a bill-splitting app that helps you scan receipts, split costs with friends, plan group trips, and track who owes what.

If you have questions or want to exercise a privacy right, contact us at info@divosplit.com or by mail at [Mailing address — to be filled before publication].

1. Plain-language summary

• We collect the email and password you use to sign in, the name you choose to display, and the content you create in the App (splits, receipts, groups, plans, events, messages, bucket lists, friends, etc.).
• Your data is stored on Supabase, our backend provider.
• When you scan a receipt, the receipt image is sent to a backend function that forwards it to Anthropic (Claude AI) to read the line items. Anthropic does not use this data to train its models.
• We do not sell your data, do not share it for cross-context behavioral advertising, do not show ads, and do not use analytics or tracking SDKs.
• You can request deletion of your account and data at any time by emailing us. We are also building an in-app delete option.
• DIVO is not intended for children under 13 (under 16 in the EEA/UK).

2. Information we collect

2.1 Information you give us when creating an account

• Email address (used as your login and for account-related messages).
• Password (handled by our authentication provider, Supabase; we never see your plaintext password).
• Display name (the name shown to your friends and groups).

2.2 Information automatically generated for your profile

• A user identifier (UUID).
• Your initials (derived from your display name).
• A hex color used for your avatar.
• Account creation timestamp.

2.3 Content you create in the App

We store the content you create so the App can show it to you and the people you share it with:

• Splits: titles, dates, tax/tip values, category tag, members, who paid, approvals, and settled state.
• Receipt items: name, quantity, price, who's assigned, who paid; discounts.
• Receipt photos: when you scan a receipt with the camera or upload one from your photo library, the image is sent to our backend for AI processing (see Section 6). The original image itself is not stored on our backend after processing; only the structured text extracted from it (line items, totals, restaurant name) is stored.
• Groups: name, emoji, members, roles, joined-at timestamps.
• Group messages (legacy): text content if your account has any historical messages.
• Events: title, emoji, date/time, free-text location and address, notes, color, organizer, and ❤️ reactions.
• Plans and plan ideas: titles, date ranges, ideas with names/locations/notes/times, schedule, and per-member approvals.
• Bucket list items, collections, favorites, and saved items.
• Friends and friend requests (who's connected to whom, favorite status).
• Notifications (in-app notifications generated by your activity).

2.4 Location-related information

DIVO does not request access to your device's GPS location. When you add a location to a split, event, plan idea, or bucket item, the App uses Apple's MapKit to autocomplete and geocode the text you type. The text and the geocoded address you select are stored with that item. We do not track your real-time location.

2.5 Information stored only on your device

• Authentication session token: stored in the iOS Keychain so you stay signed in (handled by the Supabase iOS SDK).
• App preferences: your selected view modes and a list of event IDs you've already viewed (so we can show a "New" badge for unseen events). This is stored in UserDefaults on your device only.

2.6 Information we do not collect

We do not collect, and the App does not request:

• Your precise or coarse GPS location.
• Your contacts.
• Microphone, motion, or health data.
• Calendar or reminders data.
• Photos beyond the specific receipt image you choose in the system photo picker.
• Advertising identifiers (IDFA). The App does not call ATTrackingManager and is not configured for advertising tracking.
• Crash logs or analytics events through any third-party SDK.

3. iOS permissions

We do not request location, contacts, microphone, motion, health, push notifications, or tracking permissions in this version of the App.

4. How we use your information

We use the information we collect to:

• Create and maintain your account.
• Provide the App's core features: splitting bills, calculating who owes who, hosting your groups, syncing plans and events, showing notifications.
• Parse receipt images you scan into structured line items (using the AI service described in Section 6).
• Send you friend-request and group-activity notifications inside the App (we do not currently send push notifications or marketing emails).
• Diagnose and fix bugs from server-side logs (Supabase logs of requests, without user-content payloads where possible).
• Comply with legal obligations and enforce our terms.

We do not use your information for advertising, marketing personalization, profiling for automated decision-making that has legal effects, or training third-party AI models.

5. Who can see your content

• You can see all content you create.
• Friends and group members can see content you share with them. For example, members of a group can see that group's splits, events, plans, bucket items, and messages. Friends can see that you're friends but not your private splits unless they're in the same group.
• DIVO staff can access account data only as needed to operate, debug, or secure the service, or to respond to legal requests.
• Our service providers (Section 7) process data on our behalf under contract.
• We do not make your data publicly available, sell it, or share it for advertising.

Row-Level Security (RLS) policies on our database restrict each user to their own data and the data of groups they belong to.

6. AI features and Anthropic (Claude)

What uses AI

The Receipt Scan feature uses an AI model to extract line items, totals, taxes, tips, restaurant name, and date from a photo of a receipt.

How it works

1. You take or select a receipt photo in the App.
2. The image is resized (max 1568px on the longest edge, JPEG q0.7), base64-encoded, and sent over HTTPS to our backend.
3. Our backend (a Supabase Edge Function called parse-receipt) authenticates you, then forwards the image to Anthropic's Claude API (model claude-sonnet-4-20250514) with a structured prompt asking Claude to return the line items as JSON.
4. Claude's JSON response is parsed by our backend and returned to the App, where it pre-fills the split form for you to review and edit.

What's sent to Anthropic

Only the receipt image is sent to Anthropic. We do not send your email address, name, user ID, or any other content. The request is made by our backend using our own API key, not yours.

What Anthropic does with the data

Anthropic processes the image to generate the structured response. Under Anthropic's Commercial Terms of Service, inputs and outputs from API requests are not used to train Anthropic's models and are retained only as needed to provide the service and meet legal obligations. For details see Anthropic's privacy policy at anthropic.com/legal/privacy and Anthropic's terms at anthropic.com/legal/commercial-terms.

Storage

Our backend does not persist the receipt image. It is held only in memory for the duration of the request. The structured text (item names, prices, etc.) returned by Claude is stored with your split.

Accuracy disclaimer

AI output can be wrong. Receipt parsing may misread item names, prices, or totals; it may miss items, mis-assign quantities, or get the date wrong. Always review the parsed receipt before saving a split. The App shows the AI's output for confirmation; nothing is finalized until you save it. DIVO is not a tax, accounting, or financial-advice service.

7. Service providers (sub-processors)

We use the following service providers to operate the App. Each processes data on our behalf under a contract that limits use to providing the service.

We do not use analytics, advertising, crash-reporting, or marketing service providers.

8. International data transfers

If you use the App from outside the United States, your data will be transferred to and stored on servers in that country. When personal data is transferred from the European Economic Area ("EEA"), United Kingdom, or Switzerland to the United States or other countries, we rely on appropriate safeguards including the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum where applicable. Our providers (Supabase, Anthropic) make these clauses available as part of their data processing agreements.

9. Data retention

• Account data (profile, friends, groups, splits, events, plans, etc.) is retained for as long as your account exists.
• Receipt images sent to the AI parser are not persisted by our backend after the request completes. Anthropic retains API inputs only as needed to provide the service and to meet legal obligations, per its terms.
• Server logs at Supabase may contain timestamps, IP addresses, and request metadata, retained per Supabase's standard retention windows.
• Deleted items (splits, groups, plans, etc.) are removed from the database on delete; database backups may retain a copy for up to 30 days before being overwritten.
• Closed accounts: when you delete your account, your profile and content are cascaded-deleted from our database. Anonymous, aggregated, or de-identified data may be retained indefinitely.

10. Your rights and choices

You can do the following at any time:

• Access the personal information we hold about you.
• Correct inaccurate information (you can edit your display name and the content you create directly in the App).
• Delete your account and the personal information associated with it.
• Export a copy of your account data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where we rely on consent as a legal basis (Section 11).
• Opt out of "sale" or "sharing" for cross-context behavioral advertising — though we do not engage in either (Section 12).
• Lodge a complaint with a data protection authority.

To make a request, email info@divosplit.com from the email address associated with your account. We aim to respond within 30 days (or the legally required timeframe for your jurisdiction). We may ask you to verify your identity before fulfilling certain requests.

Account deletion (interim flow): at the time of this policy's effective date, account deletion is processed by emailing info@divosplit.com from your account email; we delete your account and cascade-delete your data within 30 days. We are adding an in-app "Delete Account" option to a future release.

11. Legal bases for processing (EEA, UK, Switzerland)

If you are in the EEA, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR to process your personal data:

We do not process special categories of personal data under Article 9.

Your GDPR/UK GDPR rights

You have the rights of access, rectification, erasure ("right to be forgotten"), restriction, portability, and objection, as well as the right not to be subject to solely automated decision-making with legal or similarly significant effects (we do not engage in such decision-making). You can withdraw any consent at any time.

You can complain to:

• The data protection authority in your EU member state (list: edpb.europa.eu).
• The UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
• The Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

Data Protection Officer and EU/UK Representative

We have not appointed a Data Protection Officer or an EU/UK Representative; we are not required to do so based on our processing activities. Please contact us at the email above for any data-protection question.

12. California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights.

Categories of personal information we collect

In the prior 12 months we have collected the following categories (per Cal. Civ. Code §1798.140):

Sale and sharing

We do not "sell" personal information and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not have a "Do Not Sell or Share My Personal Information" link because we do not engage in either practice. We also do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information

The only sensitive personal information we process is your account log-in credentials (your password), which we collect solely to authenticate you and which is handled by Supabase Auth. We do not use or disclose it for any purpose that would trigger a right to limit under §1798.121.

Your CCPA/CPRA rights

• Right to know what personal information we collect, use, and disclose.
• Right to delete your personal information.
• Right to correct inaccurate information.
• Right to opt out of sale or sharing (not applicable — we do neither).
• Right to limit the use of sensitive personal information (not applicable as described above).
• Right to non-discrimination for exercising these rights.

To exercise these rights, email info@divosplit.com. You may use an authorized agent; we will ask the agent to provide proof of authorization and may verify your identity directly.

"Shine the Light"

California Civil Code §1798.83 lets California residents request information about disclosures to third parties for direct-marketing purposes. We do not disclose personal information for third-party direct-marketing purposes.

13. Other U.S. state privacy rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa, Tennessee, Indiana, Minnesota, Maryland, Kentucky, Rhode Island, or another U.S. state with a comprehensive privacy law, you may have rights similar to those described in Section 12, including the rights to access, correct, delete, port, and opt out of targeted advertising, sale, or profiling. We do not engage in targeted advertising, sale of personal information, or profiling that produces legal or similarly significant effects.

To exercise these rights, contact us at info@divosplit.com. You may appeal a denied request by replying to our decision; we will respond to appeals within the timeframe required by your state's law.

14. Children's privacy (COPPA)

DIVO is not directed at children under 13 and we do not knowingly collect personal information from children under 13. The App requires you to create an account with an email address, and by doing so you represent that you are at least 13 years old (or 16 in the EEA/UK).

If you believe a child under 13 (or under 16 in the EEA/UK) has provided personal information through the App, please contact us at info@divosplit.com and we will delete the account and associated data.

15. Security

• All traffic between the App and our backend uses HTTPS/TLS.
• Passwords are handled by Supabase Auth, which stores them as cryptographic hashes; we never see plaintext passwords.
• Your auth session token is stored in the iOS Keychain.
• Our database enforces row-level security so that one user cannot read or modify another user's content outside of the groups they're in.
• Server-side SECURITY DEFINER functions and triggers handle privileged operations like creating notifications, so the App never has more access than it needs.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@divosplit.com.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Material changes will be brought to your attention in the App or by email. Continuing to use the App after the changes take effect means you accept the updated policy.

17. Contact

Questions, requests, or complaints:

Divo LLC
[Mailing address — to be filled before publication]
Email: info@divosplit.com
Governing law: [Governing law — to be filled before publication]