The short version: we don't want your data.

Your phone number (for account sign-in), the expenses and settlements you create, the names and emojis you pick for friends and circles, and — optionally — receipt images you choose to upload.

Device identifiers for push notifications. Crash diagnostics if you opt in.

Audio from voice commands never leaves your device — on-device speech recognition returns text, and only the text reaches Halved's servers. We do not read your messages, contacts, or calendar. No third-party analytics SDKs. No advertising SDKs.

The people in your circles see the expenses that involve them — that's how the product works. That's the entire list.

We use a small set of infrastructure providers to run the service: a cloud host for our servers, a managed Postgres provider for the database, Apple and Google for sign-in / push notifications, and an SMS gateway for one-time verification codes. They process data on our behalf and are bound by contract.

Delete any expense, any circle, or your entire account from Settings. Account deletion removes every record we hold within 30 days, with the exception of minimal records we're legally required to retain (tax-adjacent where applicable).

Export everything as CSV from Settings → Export. Pro and Unlimited users can do this at any time.

If anything here changes in a way that's meaningfully worse for you, we'll email you before it takes effect. Otherwise we'll just update the page and bump the date.