Privacy policy

Who is responsible

Evenly is a private project run by samemd in Switzerland. For any question about your data, or to use your rights, write to privacy@split-evenly.com. This policy follows the Swiss Federal Act on Data Protection (FADP).

What Evenly processes and why

Evenly only processes the data it needs to split expenses within a group and to settle up.

Your account

Name, email address and a hashed password, or the link to your Google account. Evenly needs these to sign you in and to show you to the people in your groups.

Payment details

Optional: TWINT phone number, IBAN, street, postal code, city and country, plus your preferred currency. Evenly uses them so that people who owe you money can pay you.

Groups and expenses

Group names, members, expenses, amounts, dates, notes and recorded payments. This is the ledger Evenly exists to keep.

People you add

When you add someone to a group, you enter their name and, optionally, their email address. Evenly uses the email address only to send that person an invitation. Only add people who expect to hear from you.

Sign-in sessions

While you are signed in, Evenly stores your session with the IP address and browser it started from, to keep you signed in and to protect your account.

Evenly shows no ads, uses no analytics or tracking tools, and does not sell or share your data for marketing.

Who can see your data

The other members of a group see your name, email address and profile picture, everything recorded in that group, and your TWINT number if you added one. When a member pays you with a Swiss QR-bill, the code contains your name, IBAN and address, because the banking app needs them to make the payment. Nobody outside your groups sees any of this.

Anyone with a group's invite link can see the group's name and the names of its members before joining.

Service providers and where your data is stored

Evenly uses these providers, which process data on its behalf:

• Convex, Inc. (USA)
  Database and server functions. Stores all account, group and payment data.
  Stored in Ireland (EU)
• Vercel Inc. (USA)
  Hosting of the website. Processes every request, including your IP address.
  Servers in Dublin, Ireland (EU), delivery network worldwide
• Resend, Inc. (USA)
  Sending invitation, confirmation and password reset emails.
  USA
• Google
  Only if you choose "Continue with Google". Google confirms your identity and shares your name, email address and profile picture with Evenly.
  Under Google's own privacy policy

Some providers are based in the USA, which does not offer the same level of data protection as Switzerland in every respect. Where a provider is certified under the Swiss-U.S. Data Privacy Framework, the transfer relies on that certification. Otherwise it relies on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).

Exchange rates come from the European Central Bank through the Frankfurter service. Evenly only asks it for currencies and dates, never for personal data.

Cookies

Evenly sets only the cookies it needs to keep you signed in. Your light or dark theme choice is saved in your browser. There are no advertising or tracking cookies.

How long data is kept

Your account and payment details stay stored until you ask for them to be deleted. Group data stays for as long as the group exists, because the other members rely on the shared ledger. Deleted expenses, deleted groups and the names of people who left stay in the database as part of the group history.

Sign-in sessions end after at most seven days without use. The log of account emails, which Evenly keeps to limit how often emails go to one address, is deleted after about an hour.

Your rights

You can ask what data Evenly holds about you, have it corrected or deleted, and receive a copy of the data you provided in a common format. You can correct your profile and payment details yourself in the settings. For everything else, including deleting your account, write to privacy@split-evenly.com. Group entries that others also rely on may be kept in anonymised form.

If you believe your data is processed unlawfully, you can complain to the Federal Data Protection and Information Commissioner (FDPIC).

Changes

When Evenly starts processing data in a new way, this page changes first. The date at the top shows the latest version.