Even App Technologies Inc.

Privacy Policy

Effective July 5, 2026

This Privacy Policy explains how Even App Technologies Inc. ("even", "we", "us", or "our") collects, uses, shares, and protects your information when you use the even app, website, and related services (together, the "Services"). even is a bill-splitting tool that helps people figure out who owes whom and share the payment details to settle up. It is a calculator and an organizer. even never moves, holds, or transmits money, and we never ask for or store your bank, card, or payment-app login credentials.

By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

1. Information we collect

We collect the following categories of information:

Information you provide.

• Account and profile: your first and last name, a public @handle, an optional profile photo, and your country. When you sign up we also collect your email address, and if you sign in with a phone number, your phone number.
• Sign-in information: if you sign in with Google or Apple, we receive basic profile details from that provider (such as your name, email, and avatar). If you use Apple's "Hide My Email", we receive a private relay email instead of your real one. If you use email and password, we store your email and a securely hashed password (handled by our authentication provider).
• Payment handles: the payment identifiers you choose to add (for example a Venmo username, Cash App tag, PayPal address, Interac e-Transfer email, Zelle, Wise, or Wealthsimple handle). These are display-only. We show them so friends can copy them into their own payment app. We never store payment-app passwords, bank accounts, or card numbers, and we never move funds.
• Bills and related content: the bills you create or join, including merchant or description, date, amounts (subtotal, tax, tip), line items, how a bill is split, who paid, and settlement records. If you scan a receipt, we store the receipt image and the extracted details.
• Friends, crews, and relationships: the friend connections and crews (groups) you form, and any per-relationship labels or colors you set.
• Contacts you choose to match or invite: if you use contact-based friend discovery or invite someone by phone number or email, the contacts you choose are sent to our servers to check for a match or to deliver an invite. They are used only for that purpose. We do not store your contacts in raw form: we keep only a hashed value (and, for invites, a last-four fragment) rather than the raw phone number or email, and contact-match requests that go unanswered are automatically deleted.
• Communications and preferences: your notification settings, theme preference, discovery settings, support messages you send us, and, if you join a waitlist, the email you provide.

Information collected automatically.

• Device and usage data: standard technical information sent by your browser or device when you use the Services, such as IP address, device and browser type, operating system, and app interactions needed to operate and secure the Services.
• Push notification tokens: if you enable notifications on a mobile device, we store a device push token, an installation identifier, and your platform (iOS or Android) so we can deliver notifications.
• Local storage: we use your device's local storage and similar technologies to keep you signed in and to save in-progress work (such as a draft split). We do not use third-party advertising or cross-site tracking cookies.

2. How we use your information

• To provide, operate, and maintain the Services, including creating and splitting bills.
• To calculate who owes whom and to surface the payment handles you and others have chosen to share, so amounts can be settled in your own payment apps.
• To manage your account, friends, crews, and invites.
• To send you notifications, reminders (nudges), and service-related messages.
• To provide receipt scanning.
• To protect the Services, prevent abuse and fraud, and verify that requests come from real people (for example, using a CAPTCHA on sign-up and sign-in).
• To respond to your support requests.
• To comply with legal obligations and enforce our Terms of Service.

Where required by law, we rely on the following legal bases: performing our contract with you (to provide the Services), your consent (for example, contact matching or notifications), our legitimate interests (to secure and improve the Services), and compliance with legal obligations.

3. even never moves money

even is not a bank, payment processor, money transmitter, or escrow service. We do not hold, move, or transmit funds, and we are not a party to any debt or payment between users. even only calculates amounts and displays payment handles that each person has added to their own account. Any actual transfer happens directly between users in their own payment apps. We never fabricate, import, or pre-fill a payment handle on someone else's behalf.

4. How information is shared

With other users. even is a social tool, so some information is shared with the people you use it with, governed by strict access rules:

• Your name, handle, and photo are visible to people you are connected to: accepted friends, members of a crew you share, and other participants on a bill you share.
• Your payment handles are shown to another user only when they need to settle up with you on a shared bill.
• People on a bill can see the bill's items, splits, and (if attached) the receipt image, plus the names of other participants.
• When you invite someone to a bill, the invite shows the bill teaser (who paid and the amount) so they can claim their share. Invites never include anyone's payment handle.
• Contact-based friend requests are "blind": adding someone by phone or email does not reveal whether they are on even, and they simply receive a normal friend request.
• Profile discovery (finding you by handle or contact) is limited to signed-in users and is controlled by your discovery setting. It is not open to the anonymous internet.

With service providers (subprocessors). We share information with vendors that help us run the Services, under agreements that limit their use of it:

• Supabase - our backend for authentication, database, storage, and functions. It processes essentially all account, bill, and image data.
• Cloudflare - website and app hosting, and bot protection (Turnstile CAPTCHA).
• Google and Apple - sign-in (OAuth) providers, if you choose them.
• Anthropic - provides the AI that reads scanned receipts. When you scan a receipt, the receipt image is sent to Anthropic to extract the items, tax, and tip.
• Resend - sends transactional emails, such as a waitlist confirmation or a bill invite email you choose to send.
• Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) - deliver push notifications to your device. Notifications never pair an amount with a destination and never contain a payment handle.

Note: SMS invites are sent from your own device using your own messaging app. even does not send text messages or use an SMS carrier on your behalf.

For legal and safety reasons. We may disclose information if required by law, subpoena, or legal process, or where we believe in good faith it is necessary to protect the rights, safety, or property of users, the public, or even.

Business transfers. If even is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data retention and deletion

• We keep your information for as long as your account is active or as needed to provide the Services.
• You can delete your account from within the app. Deletion removes your profile, payment handles, private records, and uploaded images (avatars and receipts). Some deletions are blocked while you have an unresolved obligation, such as an outstanding balance, an open bill, or crew-leader duties, until those are resolved.
• To keep shared history intact for other people, records tied to bills and crews you shared may be retained with your identifying links removed rather than deleted outright.
• Certain data is pruned automatically: unanswered contact-match requests after about 30 days, bill invite links after about 14 days, and orphaned receipt images shortly after they are no longer referenced.
• We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to withdraw consent. Residents of Canada (including under PIPEDA), the European Economic Area and United Kingdom (including under the GDPR), and California (including under the CCPA/CPRA) may have specific rights. You can exercise many of these directly in the app:

• Access and update your profile, payment handles, and preferences in Settings.
• Control who can find you using your discovery settings.
• Manage or turn off notifications.
• Delete your account.

To make any other request, contact us at hello@tryeven.io. We will respond as required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

7. Security

We use technical and organizational measures to protect your information, including row-level access controls that limit data to the users entitled to see it, private storage for receipt images accessible only to bill participants, hashing of contact identifiers, and modern authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's privacy

The Services are not directed to children. You must be at least the age described in our Terms of Service to use even. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

9. International data transfers

even is operated from Canada, and our service providers may process and store information in Canada, the United States, and other countries. These countries may have data protection laws different from those where you live. Where required, we take steps to ensure your information receives an adequate level of protection when transferred.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

11. Contact us

Even App Technologies Inc.
Toronto, Ontario, Canada
hello@tryeven.io