Privacy Policy

1. Who are we?

BillFighters is a shared expense management app developed by BillFighters.

2. Data collected

Account data

• Email address
• Username
• Profile photo (optional)

Usage data

• Groups created or joined
• Guests added by a member: name, and email or phone number if the member enters one
• Expenses added (amount, description, date)
• Receipt photos (optional)
• Draw history
• Ad progress (number of ads watched)
• Card and badge inventory (gamification)

Event data

• Event title, description and location
• Start and end date/time, timezone
• Cover image (optional)
• Associated web link (optional)
• Participant and guest lists (real members and group guests)
• Waitlist (FIFO queue)
• Pot payments recorded (amounts, payers, coverage)
• Share links (signed, revocable, time-limited tokens)
• Anti-spam logs (IP of public-link visitors, briefly retained)

Technical data

• Device type and operating system
• IP address
• Push notification token (for alerts)
• Crash and performance data (via Sentry)
• Advertising identifier (IDFA/AAID, with consent)

Report data

• Message content
• Sender’s email address
• Screenshots
• Data about the reported person or content
• For a report made from the app: the chosen reason and the reporter’s account

Blocked accounts

• List of the accounts you have blocked, visible only to you

3. Use of data

Your data is used to:

• Create and manage your account
• Calculate balances between members
• Send notifications (debts, payments)
• Improve the application
• Process reports, apply your blocks and enforce the Terms of Use

Legal basis: report handling, blocks and moderation rely on the performance of the Terms of Use and on our legitimate interest in keeping the service safe. Crash reports (Sentry) rely on our legitimate interest in keeping the app stable (section 5.bis).

4. In-App Purchases and Subscriptions

BillFighters offers a Premium subscription with advanced features.

Payment processing

All payments are processed by Apple (App Store) or Google (Play Store). We do not collect, store, or have access to your payment information.

Subscription data we receive

• Subscription status (active/expired/cancelled)
• Subscription type (monthly/yearly)
• Start and expiration dates
• A unique transaction identifier

Third-party services

We use RevenueCat to manage subscriptions. RevenueCat processes data according to their Privacy Policy.

5. Advertising

The app displays optional ads via Google AdMob. Ad personalization respects your consent choice (see section 7.bis).

5.bis. Subcontractors and third-party services

We use the following third-party services to operate the application:

Google AdMob (advertising)

Ad display. Data processed: advertising identifier (IDFA/AAID), interaction data. Google Policy.

Sentry (crash reports)

Collection of crash reports and performance measurements to improve app stability. Data processed: error traces, device information, session data. Sentry starts once your advertising choice is recorded, or right away where this choice is not requested; it relies on our legitimate interest in keeping the app stable. Sentry Policy.

hCaptcha (security)

Bot protection during registration, login and password reset requests. Data processed: interaction data, device fingerprint, IP address. hCaptcha Policy.

Expo (push notifications)

Routing push notifications to your device. Data processed: push token, platform. Expo Policy.

Supabase (data hosting)

Database and authentication. European servers. Encryption in transit and at rest. Supabase Policy.

Google Sign-In

Account sign-in and creation via Google. Data processed: email address, Google profile name and picture, account identifier. Google Policy.

Sign in with Apple

Account sign-in and creation via Apple, with the option to hide your email address (Apple private relay). Data processed: Apple identifier, real or relay email address. Apple Policy.

Google UMP (advertising consent)

Collection, display and storage of your consent choice for advertising and measurement. Data processed: consent choice, technical identifier, IP address. Google Policy.

Google ML Kit and Apple Vision (receipt reading, OCR)

Text recognition on receipt photos: Google ML Kit on Android, Apple Vision on iOS. Processing happens entirely on your device: no receipt image leaves your device for this reading.

Frankfurter (exchange rates)

Currency conversion when an expense is entered in a currency other than the group’s. Data processed: IP address and requested currency pair; no account data.

Google Play Install Referrer (Android)

Reading the referrer string provided by Google Play on first launch, in order to open, after installation, the invitation link (group, poll or event) opened before it. Data processed: referrer string provided by Google Play. Google Policy.

Our email service providers

Hosting of the emails we receive, reports included. Data processed: message content, sender’s email address, attachments (including screenshots).

6. Storage and security

• Data stored on Supabase (European servers)
• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Restricted data access

7. Your rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data
• Rectify your information
• Delete your account (what is erased and what remains: section 8)
• Export your data (portability)
• Withdraw your consent
• Object, on grounds relating to your particular situation, at any time to processing based on our legitimate interest (reports and moderation; Sentry crash reports)
• Request restriction of the processing of your data
• Lodge a complaint with the CNIL, the French data protection authority

To exercise these rights, use the "Delete My Account" option in the app or contact us.

7.bis. Consent withdrawal

You can withdraw your advertising consent at any time:

• In the app: Profile > Settings > Privacy > Manage Consent
• The consent form will be displayed again so you can change your choices
• Withdrawing consent is as easy as giving it, in accordance with GDPR (art. 7.3)

Withdrawal of consent does not affect the lawfulness of processing based on consent given before withdrawal.

8. Data retention

• Account data: until account deletion
• Expense and draw data: as long as the group exists; after your account is deleted, expenses and draws in shared groups stay visible to the other members under the name “Utilisateur supprimé” (deleted user)
• Notifications already received by other members: they may still mention your name after your account is deleted
• Event data: until group or event deletion by an administrator
• Event share links: revocable tokens, expire with the event
• Anti-spam logs (public-link visitor IPs): daily purge of records older than 24h, i.e. a maximum retention of 48h
• Technical logs: 90 days
• Reports, including screenshots: 12 months after processing, then deletion
• Blocked accounts: until you unblock them or delete your account

9. Changes

This policy may be updated. Significant changes will be notified in the application.