Privacy Policy

Last updated: 17 August 2026

PayBack is a bill-splitting tracker. It records who owes what after a shared bill — it never moves money and never touches a payment network. This policy describes the little data the app handles.

Accounts are optional

PayBack works fully without an account. On first launch the app generates a random identifier for your device — no name, no email, no phone number. A device never holds an email address at all; only an account can, and only if you add one.

You may optionally create an account so your splits survive changing phones. An account stores only: your full name, a username, a one-way hash of your 6-digit PIN (never the PIN itself), your optional payout details, and — only if you add one — an email address. We never ask for a phone number. To block PIN guessing, too many wrong PINs in a row temporarily locks the account.

A forgotten PIN cannot be reset, and adding an email does not change that. The address is used to send you notifications and for nothing else: it is not a recovery channel, and there is no way to sign in with it. That is deliberate — an inbox that could unlock an account would make the PIN decorative.

Data you may choose to provide

Full name (only if you create an account) — shown to the people you split bills with, same as a display name.
Username (only if you create an account) — used to sign in. It is not shown to the people you split bills with.
Display name (optional) — shown to people you split bills with.
Payout details (IBAN and account-holder name) (optional) — shown only to participants of your bills so they know where to send their share. PayBack never uses these details to move money.
Email address (optional, account holders only) — used only to send you notifications about your own splits: someone sends you money, someone confirms you are square, a group session lands, or somebody asks to link you to their group. We confirm the address first by sending it a link, so nobody can sign you up for mail you did not ask for. It is never shown to the people you split bills with, never shared, never sold, and never used for marketing. Every email carries an unsubscribe link, and you can remove the address entirely from the You screen. We do not use read receipts, tracking pixels or click tracking in any email we send. Our email provider, SendGrid (Twilio), processes the message on our behalf in order to deliver it.
Support messages (only when you write to us) — if you use Help & Support on the You screen, we store what you typed, the email address you gave us so we can reply, which phone and account it came from, and whether you were on iOS, Android or the web. That address is used for one thing only: answering you. It is never added to any mailing list, never shown to the people you split bills with, and nothing else in PayBack ever sends to it. Unlike the address above, you do not need an account to write to us — so this one is not confirmed, and it is not used for anything that would matter if it were mistyped.
Bill data — amounts, titles, and payment confirmations for the splits you create or join.

What we don't do

No advertising and no ad networks.
No analytics or tracking SDKs.
No selling or sharing of data with third parties.
No access to your contacts, location, or photos. The camera is used only while you scan a bill's QR code and no images are stored.

Where data lives

Bill data is stored on our server (hosted on Railway) so that everyone at the table sees the same live status. Data is transmitted over HTTPS.

Deleting your data

Deleting the app removes the device identifier from your phone. If you never created an account, that permanently orphans your data on our server — email us at the address below with your device name and we will remove it.

If you have an account, deleting the app is not the same as deleting your data: your splits stay with your account and come right back the moment you sign in again on any device, including a fresh install. To have your account and its data explicitly deleted, email us at the address below with your username and we will remove it.

Changes to this policy

If this policy changes, the new version will be published here with an updated date. We will never quietly expand what the app collects.

Contact

Questions or deletion requests: [email protected]

The short version: a random device ID, an optional account (full name, username, a hashed PIN), an optional IBAN, and your bills. Nothing else — and nothing is sold, tracked, or advertised against.