Home · Legal

Privacy policy

Last updated October 2026 · Terms of use →

1. Introduction

Welcome to Fairpiece. Your privacy is important to us. This Privacy Policy explains what information we collect when you use our application and website, why we collect it, on what legal basis, who processes it for us and what control you have over it. Fairpiece is operated by Dmytro Shraho, an individual entrepreneur registered in Ukraine, who is the controller of your personal data. For any privacy question or request, write to the contact in section 14.

2. Information we collect

• Account information: when you sign in with Apple or Google we receive your email address and name; Google also gives us your profile photo, and Apple may provide a relay address instead of your real one. If you sign in with a one-time code, we store the email address you entered. We also keep the name you enter, your language, time zone and default currency. Fairpiece has no passwords.
• Anonymous session: you can use the application without signing in. We then create an anonymous session on our server that holds your bills without an email address. When you sign in, its data moves to your account. Data of an anonymous session is kept until you delete it (section 8).
• Bills: titles, dates, currency, payment details, receipts with shop names and payers, items, amounts, who had what, the names of the people you add — just names, without email addresses or phone numbers — and, if you use them, your marks of who has paid you back and your payment notes. This is the core content of the application.
• Receipt photos (Pro): the photos you scan or attach to a receipt, and the text a scan reads from them.
• Purchases and subscription status: whether you have Pro, which plan, where it was bought, when it renews or expires, and the identifiers and dates of purchase events. Payments are processed by Apple, Google or, on the website, Paddle, so we never receive your card details. Pro can be bought only by a signed-in account and is linked to it, so it also works on your other devices and on the website.
• Device and technical data: your application version, platform, language and time zone, and server logs with IP address and request time used for security and debugging. With each sign-in session we also store the IP address and the device or browser type (user agent) it was opened from.
• Messages to us: what you write in the support form on the website or in a problem report in the application, the email you leave for a reply, and details of your device and application version.
• Usage and advertising data: usage statistics collected by Firebase Analytics and, for users without Pro, the data Google's advertising services need to show ads (section 6).

3. How we use your information and on what legal basis

Where the GDPR, the UK GDPR or similar laws apply, we rely on these legal bases:

• To provide Fairpiece under our Terms of use (performance of a contract): keeping your bills and receipts and syncing them across your devices, calculating everyone's share, building the links and PDF files you share, signing you in and sending sign-in codes, scanning receipts, and unlocking Pro for your account.
• Our legitimate interests: keeping the service secure and running, preventing abuse and fraud, diagnosing failures, answering your messages and problem reports, and understanding how the application is used so we can improve it. You can object to processing based on legitimate interests (section 11).
• Your consent: ads and analytics cookies on the website, personalised ads where the law requires consent, and tracking on iOS. You can withdraw consent at any time (section 6); this does not affect processing that happened before.
• Legal obligations: keeping the records the law requires and answering lawful requests from authorities.

We do not sell your personal data and we do not use the contents of your bills for advertising or profiling. We make no decisions about you based solely on automated processing that have legal or similarly significant effects. Ads are shown only to users without Pro and, where the law requires it, only after you have made your choice in the consent form.

4. AI processing of receipts

• When you scan a receipt (Pro), its photo is sent to our AI provider, OpenAI, which reads the shop, items and amounts and returns a draft receipt that you check and correct.
• We use the OpenAI API under terms that do not permit your content to be used to train their models.
• A scan and its result are kept for 30 days. A photo you attach to a receipt is kept as long as the receipt exists. The photo of a receipt you save from a scan stays with that receipt.
• Receipts can show more than prices. Please crop out or avoid photographing card numbers, loyalty card numbers and other details you do not want to share.

5. Bill links and what other people see

• Only you see and edit the bills you create. Other people see a bill only through a link or a PDF that you send them yourself.
• Anyone who has the link to a bill can open it without an account and see its title, date, currency, payment details, receipts with their payers, items, amounts, who had what, participant names and totals. A personal link opens one participant's check in that bill: with Pro you can share it yourself. It contains the link to the whole bill, so whoever has it can open the whole bill too.
• Pages opened by a link never show email addresses, account identifiers, receipt photos, your marks of who has paid you back or your payment notes, and search engines do not index them.
• A bill has one link for its whole life. The link and every personal link of the bill stop working only when the bill is deleted, so delete a bill if it should no longer be seen.
• Share a link only with the people who should see the bill, and do not put anything in the payment details that you would not send them yourself.

6. Advertising, analytics and cookies

• Ads: users without Pro see ads served by Google — AdMob in the mobile application and Google Ad Manager on the website — including a rewarded video before the sharing options for the whole bill open and banners on pages opened by a link. Google may use your device's advertising identifier, IP address and cookies to show and measure ads.
• Your choice: in the European Economic Area, the United Kingdom and Switzerland we ask for your consent through Google's consent form before ads are shown; you can change your choice in the application and on the website under Profile → Ad privacy. On iOS the system asks whether the application may track you, and without your permission the advertising identifier is not shared. Elsewhere you can limit personalised ads in your device or browser settings.
• Pro: with Pro the advertising SDK is not loaded at all, and you see neither ads nor the consent form.
• Analytics: Firebase Analytics records which screens are opened and which actions are taken, together with a random application instance identifier, device model, operating system and approximate region. It does not receive the contents of your bills, names or email addresses. Analytics also receives a pseudonymous user identifier — the internal ID of your session, never your name or email address. On the website analytics works without cookies until you give consent.
• Cookies and local storage: the website and web application keep your sign-in session in a protected cookie, remember the site language in a cookie and keep your theme and a cache of your data in the browser's local storage. These are needed for the service to work and are not used for tracking. Advertising and analytics cookies are set only as described above. Paddle's checkout uses its own cookies to process a payment.

7. Payments

• In the application: Apple App Store or Google Play processes the payment and shares the purchase with RevenueCat, which validates it and tells us whether your account has Pro.
• On the website: Paddle.com is the Merchant of Record. Its checkout collects the details needed to take the payment, calculate tax and issue your receipt — such as your email address, country, postcode where required, payment method and, for a business, its tax ID — and processes them as an independent controller under the Paddle privacy notice. Paddle shares the purchase with RevenueCat, which tells us whether your account has Pro. We receive the plan, its status and dates and the transaction identifiers, never your card details.
• To link a purchase to your account, RevenueCat receives the internal ID of your account — never your name or email address from us.

8. Data storage and retention

• Your account and bills are kept until you delete them or your account. Without signing in it is the same: an anonymous session and its bills have no time limit and are kept until you delete them. Signing in moves the data to your account. To delete the data of an anonymous session, use Profile → Delete account.
• Receipt scans are deleted after 30 days; an uploaded photo that was never attached to a receipt is deleted after 24 hours. The photo of a receipt you saved from a scan is kept as long as that receipt exists.
• Sign-in codes are valid for 10 minutes and are deleted when used, when replaced by a new code or when you delete your account. A session stays signed in for up to a year after it was last used.
• Server logs are kept for a short operational period and then discarded.
• Problem reports sent from the application and messages to support are deleted after 7 days: we read them right away to fix problems and answer you. Problem reports are also deleted earlier, together with your account.
• Your Pro status is kept while your account exists and is deleted with it. Purchase and billing records are kept by Apple, Google, Paddle and RevenueCat under their own policies and the tax and accounting laws that apply to them (section 9). The log of subscription events we receive from RevenueCat lets us process each purchase event exactly once and look into purchase problems; it is deleted after 7 days, and if you delete your account sooner, its entries lose the link to your account.

9. Sharing of information

We never sell your data. We share the minimum necessary with the services that run Fairpiece:

• Railway — hosting of our servers, database and receipt photo storage.
• Resend — delivery of emails with sign-in codes.
• OpenAI — reading receipt photos when you scan one (Pro).
• RevenueCat — purchase validation and subscription status for the application and the website.
• Paddle — sale, payment, tax and invoicing of purchases on the website, as Merchant of Record.
• Apple and Google — sign-in, and payment processing for purchases in the application.
• Google (Firebase Analytics, AdMob, Google Ad Manager) — usage statistics, and ads for users without Pro.

Railway, Resend, OpenAI, RevenueCat and Firebase Analytics act on our instructions as processors under data processing agreements. Apple and Google as app stores and sign-in providers, Google as an advertising provider and Paddle as Merchant of Record process data as independent controllers under their own privacy policies. We may also disclose data to professional advisers bound by confidentiality, or to authorities where the law requires it.

International transfers: we are based in Ukraine, and our providers process data in the United States and other countries. Where the GDPR or the UK GDPR applies, transfers rely on an adequacy decision — including the EU–US Data Privacy Framework for certified providers — or on standard contractual clauses or an equivalent safeguard.

10. Security measures

• Data is transmitted over encrypted connections and stored on managed infrastructure.
• Authentication tokens are kept in the secure storage provided by your device. In the browser the session is kept in a protected cookie.
• Bill links use long random tokens that cannot be derived from the bill or its owner.
• Despite our best efforts, no system is completely secure. Keep your links private and remain vigilant.

11. Your rights

• You can view, edit and delete your bills and receipts at any time inside the application.
• You can delete your account under Profile → Delete account, in the application or in the browser, even if you never signed in. The bills you created are deleted with everything in them, together with your scans. This cannot be undone. The details are on the delete account page.
• If someone added your name to a bill of theirs, it is part of that bill; only its author can change or remove it.
• Depending on where you live, you have the right to access your data and get a copy of it, to have it corrected or erased, to restrict its processing, to receive the data you gave us in a portable format, to object to processing based on legitimate interests, and to withdraw consent at any time. Write to us using the contact below; we answer within one month and may ask you to confirm that the request comes from you.
• You have the right to complain to your local data protection authority — in the EU, the authority of the country where you live or work; in the UK, the Information Commissioner's Office; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.
• Records we must keep by law, and purchase records held by Apple, Google, Paddle or RevenueCat, follow their own retention rules and may survive account deletion. Deleting your account does not cancel a subscription — cancel it in the App Store or Google Play or, for a purchase on the website, under Profile → Manage subscription.

12. Children

Fairpiece is for people aged 16 and older. It is a general-audience service, not designed for or directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be communicated through the application, and the date above shows the latest version. Material changes are announced before they take effect, and where a change needs your consent, we will ask for it.

14. Contact us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us at support@fairpiece.com.