HalvdelWho we are
Halvdel is an app for keeping track of shared expenses. It is made and run by an individual developer (“we”, “us”). We decide how your data is used and are responsible for it under data protection law, including the EU and UK GDPR and Türkiye’s Personal Data Protection Law No. 6698 (KVKK).
Questions and requests: support@halvdel.com.
The short version
- We collect what the app needs to work: your email, your name, and the expenses you and your friends add.
- There are no ads, no advertising trackers and no analytics. We don’t sell or rent your data.
- You can export your data and delete your account from inside the app at any time.
What we collect
Your account
- Email address, used to sign in with a one-time code. Codes are deleted after a day.
- Name, profile photo (optional), avatar color, default currency and language.
- Notification settings and the push token of each device you use.
What you add
- Expenses and payments: titles, amounts, currencies, dates, notes, categories, who paid and how they were split, receipt items and receipt photos.
- Groups, comments, reminders and the activity history of these.
- Feedback you send us, with the app version and device model.
People you add
When you add a friend, you give us their name and, if you choose, their email address so they can join and see shared expenses. When you pick someone from your contacts, the app reads only that contact, on your device. Their name and email are sent only if you add them; their phone number is used on your device to open Messages and is never sent to us. We don’t upload your address book.
Purchases
If you subscribe to Halvdel Premium, Apple handles the payment; we never see your card details. We receive the subscription’s product, status and dates from Apple through Adapty, linked to your Halvdel account.
Technical data
- Crash reports (Firebase Crashlytics): device model, iOS version, app version, what went wrong, and your account ID, without your name or email.
- Server logs: IP address, time, request and error details, kept for security and troubleshooting.
Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account, signing you in, keeping and sharing your expenses and balances with the people in them | Performing our contract with you |
| Push notifications about activity that involves you | Your consent (you can turn them off in the app or in iOS Settings) |
| Premium subscriptions and the free daily limit | Performing our contract with you |
| Fixing crashes, preventing abuse, keeping the service secure, backups | Our legitimate interest in a working, safe service |
| Answering your messages and feedback | Our legitimate interest, or your request |
| Keeping records the law requires | Legal obligation |
Who can see it
Other Halvdel users. People you share a group or an expense with see your name, photo, email address and the shared expenses, payments and comments. That’s how splitting works.
Service providers. These companies process data for us, under contracts that limit them to doing so:
| Provider | What for | Where |
|---|---|---|
| Oracle Cloud | Server and database | Frankfurt, Germany |
| Cloudflare (R2) | Receipt and profile photos, daily backups | European Union |
| Google Firebase | Push notification delivery, crash reports | EU and United States |
| Apple | App Store purchases, push notifications | United States and elsewhere |
| Adapty | Subscription status | European Union and United States |
| Resend | Sending sign-in codes and invitation emails | United States |
Where data leaves the EEA, the UK or Türkiye, it is protected by the safeguards the law requires, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. Under KVKK, transfers abroad rely on these safeguards and, where needed, your explicit consent.
We disclose data to authorities only when the law requires it.
How long we keep it
- Your account and expenses: as long as you have an account.
- Sign-in codes: one day. Expired sign-ins: deleted soon after they expire.
- Backups: 30 days, then overwritten.
- Crash reports: up to 90 days.
Deleting your account
In the app, go to Account › Delete account. We then delete your email, profile photo, sign-ins, devices, invitations and friend list, and any group that only you are in. Expenses you shared with others stay, so their balances still add up; in them, your name is shortened to your first name and last initial and marked as deleted. Copies in backups disappear within 30 days.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw consent at any time. Many of these you can do in the app (edit your profile, export to CSV, turn off notifications, delete your account). For anything else, write to support@halvdel.com; we answer within 30 days.
You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority where you live; in the UK, the ICO.
Security
Connections are encrypted (HTTPS). Sign-in codes and tokens are stored hashed. Photos are private and shown only to people allowed to see them. The app can be locked with Face ID. No system is perfectly secure, but we take care to keep yours safe.
Children
Halvdel is not meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
Changes
If we change this policy, we will update the date above. If the changes are significant, we will tell you in the app before they apply.