Privacy policy
Mathless is a bill-splitting app for iPhone and Android (app ID com.mathless.app). It is a personal project built and run by one person, Ibrahim Nisar, not a company. This page explains what the app collects, why, who else handles it, and how to delete it.
The short version. Mathless keeps the groups, expenses and settlements you record so you and the people you split with see the same numbers. It has no ads, no analytics and no tracking, and it does not sell your data. Voice notes, typed lines and receipt photos go to Google's Gemini AI only after you allow it. Notifications are sent only if you allow them. You can delete your account at any time.
Who is responsible
Ibrahim Nisar is responsible for your data in Mathless. For any privacy question or request, email hello@mathless.app.
What Mathless collects
About you
- Email address. Used to create your account and sign you in with your email and password (confirmed once with a one-time code), or received from Google if you sign in with Google.
- Display name. The name your groups see.
- Phone number, if you choose to add one.
- Profile photo, if you choose to add one.
What you record
- Groups and one-to-one ledgers, and who is in them.
- Expenses: title, amount, currency, date, category, notes, items, who paid and how it was split.
- Settlements (payments you mark as made between people).
- Receipt photos you attach to an expense, or scan into one.
- Recurring expenses you set up, and reminders you schedule: the message, who it goes to and when.
- The history of changes to these entries, including who made each change, so a group can see what was edited.
About people you add
When you add someone to a group, you give their name and, if you choose, their email address or phone number. They may not use Mathless yet. If you ask the app to invite them by email, it sends them one email saying you added them. That email names you and the group and contains no amounts. Mathless does not read your phone's contact list.
If someone added you to a group using your email address, signing in to Mathless with that address links you to that group automatically.
For AI reading, only if you allow it
Mathless can turn a voice note, a typed sentence or a receipt photo into an expense. Before the first time, the app asks whether it may send these to Google Gemini. If you allow it, the app sends:
- the recording, the typed text or the photo, and
- the names of the people in that group and the group's currency, so the AI can match "Ali paid" to the right person.
It does not send your email address, your phone number or your contacts. Mathless does not keep the recording after it is read. A receipt photo is kept only if you save the expense with it (see Receipt photos). Mathless uses Google's paid Gemini API. Under Google's terms for paid use, Google does not use what you send or what the AI replies to improve its products, and may keep it for a limited time only to detect and prevent abuse and to meet legal requirements. Mathless's own server logs do not contain what you typed, said or photographed (see Technical data). You can turn AI reading off in Account, and you can always add expenses by hand instead.
To record a voice note the app needs microphone access, which your phone asks you for. The microphone is used only while you are recording.
Receipt photos
A receipt photo you attach or scan is saved with that expense, in private storage that only the members of that group can open. It is shrunk to a small JPEG first. Removing the photo, or deleting the expense, deletes it from the server once your phone syncs.
Notifications, only if you allow them
If you allow notifications, your phone gives the app a device token, which Mathless stores with your account so it can reach that phone. Mathless sends a notification when an expense that involves you is added, when a settlement to or from you is recorded, and when someone in your groups sends you a reminder, now or on a schedule they set. A notification can show names, the group and amounts. Notifications are delivered through Google's Firebase Cloud Messaging and, on iPhone, Apple's push service. You can turn them off at any time in your phone's settings. Signing out or deleting your account removes the token.
Reports and blocks
You can report or block another user. A report saves who reported whom, the reason you chose and when, and is emailed to the developer with both people's names and email addresses so it can be reviewed. A block is saved so the app can enforce it: you stop seeing that person's profile photo, and they can no longer add you to anything new. The person you report or block is not told.
Pro subscription
If you buy Mathless Pro, Google Play or the App Store handles the payment. Mathless never sees your card or payment details. RevenueCat manages the subscription and receives your Mathless account ID (a random code, not your name or email) and your purchase details. Mathless stores whether Pro is active, the plan, and when it renews or ends.
Technical data
- Sign-in session tokens, so you stay signed in.
- A copy of your groups and entries stored on your phone, so the app works offline and syncs later.
- Server logs kept by the hosting provider, used to run and secure the service. They contain technical details only, such as request times, IP addresses and error codes, and not what you typed, said or photographed.
Mathless has no advertising, analytics or crash-reporting tools, and it does not track you across other apps or websites.
Why it is used
- To run the app: keep your ledger, work out balances, and sync it between your devices and the people you split with.
- To sign you in and keep your account secure.
- To send the emails you ask for: confirmation and password-reset codes, and invites.
- To send notifications you allow.
- To provide Pro if you subscribe.
- To review reports and enforce blocks, and keep people safe.
- To read voice notes, typed lines and receipts into expenses, if you allow it.
- To fix problems and keep the service working.
Your data is not used for advertising, sold, or shared with anyone to market to you.
Who can see what
- People in your groups see your display name and profile photo, and everything recorded in groups you share: expenses, receipt photos, settlements, balances and the history of changes, including who made them.
- People you block keep seeing what you share in groups you are both in, but you stop seeing their profile photo.
- People you are not in a group with cannot see your name, photo or entries.
- The email address and phone number on your account are not shown to other users. But if someone added you to a group with your email or phone number, the members of that group can see what they entered.
- Contact details you enter for people you add are visible to the members of that group in the same way.
- If you leave a group, the entries you added stay in it so its balances stay right.
Services that handle your data
Mathless uses these providers to run. They process data on Mathless's behalf, under their own terms and security practices:
- Supabase — hosting, database, sign-in and server functions. Holds your account and everything you record. supabase.com/privacy
- Google — Google Sign-In, if you use it (Google tells Mathless your name and email address), the Gemini API, which reads voice notes, typed lines and receipt photos if you allow AI reading, Firebase Cloud Messaging, which delivers notifications, and Google Play, which handles Pro payments on Android. policies.google.com/privacy · Gemini API terms
- Apple — on iPhone, delivers notifications and handles Pro payments through the App Store. apple.com/legal/privacy
- RevenueCat — manages Pro subscriptions. Receives your Mathless account ID and purchase details, not your name or email. revenuecat.com/privacy
- Brevo — delivers the app's emails (confirmation and password-reset codes, invites, and reports sent to the developer), so it receives the recipient's email address and the email's content. brevo.com/legal/privacypolicy
These providers may store and process data on servers outside your country.
Mathless may also disclose data if the law requires it.
How long it is kept
- Your account and what you record are kept while your account exists.
- Deleted expenses and groups are hidden but kept in the group's history, so every device stays in sync and changes can be traced.
- Server logs are kept by the hosting provider for a few days and then deleted automatically.
- Reports are kept as long as they are needed to handle them and to keep the service safe.
- When you delete your account, your data is removed as described below. Copies may remain in the hosting provider's backups for a short time until they are overwritten.
Deleting your account
You can delete your account in the app under Account → Delete account, or on the web at mathless.app/delete-account. Either way you confirm with a one-time code sent to your email, and the deletion happens straight away. You do not need to email anyone or wait.
What is deleted
- Your account, sign-in details and sessions.
- Your profile: display name, phone number and profile photo.
- Groups and ledgers that no one else with an account is part of, with everything in them.
- Invites you sent or accepted, and pending invites sent to your address.
- Receipt photos in the groups and ledgers that are deleted.
- Your device tokens, reminders you scheduled, people you blocked, and your Pro status record.
- The copy of your data on the phone you delete from.
What stays in shared groups
Groups you share with other people are their records too, so they stay, and every balance in them stays exactly as it was. No money moves. In those groups:
- the name the group knows you by stays on the entries, so everyone can still tell whose share is whose;
- that name is no longer linked to any account;
- your email address and phone number are removed;
- your name is removed as the author of entries and changes;
- receipt photos on expenses stay with those expenses.
Reports you made, or that were made about you, are kept but no longer linked to your account. Deleting your account does not cancel a Pro subscription; cancel it in Google Play or the App Store.
If you were the only admin of a shared group, another member with an account becomes admin.
If someone else added you to their own group by email but you never joined it, that entry is their own contact note and is not part of your account. Ask them to remove it, or email us.
Your choices and rights
- See and export your data: Account → Export your data.
- Correct your name in Account, and edit any entry you can see in a group.
- Remove your profile photo, or turn off AI reading, in Account.
- Turn off notifications in your phone's settings.
- Unblock people you blocked, in Account.
- Delete your account, as above.
For anything else, including a copy of your data or a question about how it is used, email hello@mathless.app. We aim to reply within 30 days.
Security
Data travels over encrypted connections (HTTPS). The database only lets you read groups you are a member of. Sign-in uses your email and password, or Google. If you use a password, it is stored only as a one-way hash by the authentication provider, never in readable form. No system is perfectly secure; if a breach affects your data, you will be told.
Children
Mathless is not directed at children under 13, and does not knowingly collect data from them. If you believe a child under 13 has given Mathless their data, email hello@mathless.app and it will be deleted.
Changes to this policy
If this policy changes, the new version is posted here with a new effective date. If a change affects how your data is used in a significant way, you will be told in the app or by email before it takes effect.
Contact
Ibrahim Nisar
hello@mathless.app