Privacy Policy
WannaShare is a group expense-splitting app. It works only if the people in your group can see who paid for what, so most of what we store is there to be shared with them — and with nobody else. This page says exactly what we hold, why, and how to get rid of it.
Who is responsible for your data
WannaShare (the “app”, “we”, “us”) is the data controller for the personal data described here, within the meaning of the EU General Data Protection Regulation (GDPR).
Contact for any privacy question or request: support.wannashare@smoothless.org. We answer privacy requests within 30 days.
What we collect
Account data
When you create an account we store your email address, your display name, and — if you set one — a profile picture. If you sign in with a password, we store a hashed version of it and never the password itself.
Data from Google Sign-In
If you choose “Continue with Google”, Google sends us your email address, your name, and your profile picture URL. That is all we request and all we receive. We never receive your Google password, and we ask for no access to Gmail, Drive, Contacts, Calendar, or any other Google service. The same applies to any other sign-in provider we offer.
Group and expense data
The content you create in the app: groups you belong to, expense names, amounts, currencies, dates, how each expense is split, recorded payments and their notes, and messages you send in a group. This data is visible to the other members of that group — that is the point of the app.
Receipt photographs
If you scan a receipt, the photograph passes through our server on its way to Anthropic (see below) and is not saved by us. What we keep is the expense you create from it, and a count of how many receipts you scanned this week, for the weekly scan limit.
Payment details you choose to add
To let group members pay you back, you can optionally save payment identifiers to your profile: a phone number, a bank account number, a SWIFT/BIC code, a country, and handles for the payment methods you use. These are optional, you can remove them at any time, and they are shown only to members of groups you share.
WannaShare does not move money. We are not a payment provider. We never hold funds, never initiate transfers, and never see card numbers or banking credentials. Settling up happens in your own bank or payment app; we only record that you said it happened.
Device and technical data
If you enable push notifications, we store a notification token for your device so we can deliver them. Our server keeps standard request logs — IP address, timestamp, and the endpoint called — which we use for security and debugging.
What we do not collect
No advertising identifiers, no third-party analytics or tracking SDKs, no location data, no contact list access, and no behavioural profiling. We do not sell or rent personal data to anyone, and we never will.
Why we use it, and on what legal basis
- To run the app — accounts, groups, balances, settle-up suggestions, invitations. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- To send service email — invitations, verification, password resets. Legal basis: performance of a contract.
- To read a receipt you scan — sending the photograph to Anthropic and turning its answer into an expense. Legal basis: performance of a contract.
- To send push notifications you have enabled. Legal basis: your consent, withdrawable at any time in your device settings (Art. 6(1)(a)).
- To keep the service secure and working — abuse prevention, debugging, backups. Legal basis: our legitimate interest in a functioning, non-abused service (Art. 6(1)(f)).
We do not use your data for advertising or automated decision-making of any kind.
Who else sees it
- Other members of your groups — your name, profile picture, the expenses and payments you record, your balances, your messages, and any payment identifiers you have saved.
- Google — if you use Google Sign-In, Google knows you signed in to WannaShare. Google's own handling of that is governed by Google's Privacy Policy.
- Firebase Cloud Messaging (Google Ireland Ltd.) — delivers push notifications. It receives your device token and the notification content.
- Our email provider — receives the recipient address and the content of service emails such as invitations.
- Anthropic PBC — reads receipts, and only when you choose to scan one. It receives the photograph of the receipt and our instructions for reading it, and sends back the merchant, the total and the lines it can read. It receives no name, email address, group or balance, and nothing at all if you never scan a receipt. We do not store the photograph; the line items, assignees and adjustments you end up with are worked out and stored by WannaShare. Anthropic does not use API data to train its models and deletes it within 30 days, except where it must keep it longer for abuse review or by law.
That is the complete list. We share data with no one else, except where we are legally required to do so.
Where your data is stored
WannaShare runs on our own servers, located in the Czech Republic, reached through a reverse proxy. Your data is stored inside the European Union. Two of the services named above may process data outside it:
Google's push-notification and sign-in infrastructure may process data outside the EU under the European Commission's Standard Contractual Clauses.
When you scan a receipt, Anthropic processes the photograph outside the EU under the European Commission's Standard Contractual Clauses.
How long we keep it
Your account data and group content are kept for as long as your account exists. Delete your account and we delete your profile, your saved payment details, your notification token and your group memberships — permanently, and without a recovery window. The expenses and payments inside a shared group stay with that group for its remaining members, with your name removed, because each one is also a record of what someone else owes. Delete your account sets out the steps and the full list of what goes and what stays.
We take a snapshot of the database before each server update, and keep only the ten most recent. A copy of deleted data can therefore survive in those snapshots for a period that depends on how often we deploy, until it is rotated out. Snapshots are stored on the same EU server as the live data and are used solely to recover from a failed update.
Server request logs are automatically deleted after 5 days.
Your rights
Under the GDPR you may:
- ask for a copy of the data we hold about you (access, and portability);
- correct anything inaccurate — most of it is editable in the app under Profile;
- have your data deleted — see Delete your account;
- restrict or object to how we process it;
- withdraw consent for push notifications at any time.
To exercise any of these, email support.wannashare@smoothless.org. If you believe we have handled your data wrongly, you have the right to complain to your national data protection authority — in the Czech Republic, the Office for Personal Data Protection (ÚOOÚ).
Security
All traffic between the app and our servers is encrypted with HTTPS. Your session token is held in the iOS Keychain or Android's encrypted storage, not in plain text. Passwords are stored only as salted hashes. Access to group data is enforced server-side per request: you can read a group's expenses only if you are a member of that group.
Children
WannaShare is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has given us personal data, write to us and we will delete it.
Changes to this policy
If we change what we collect or who receives it, we will update this page and move the date at the top. Material changes will also be announced in the app before they take effect.