Privacy Policy

This Privacy Policy explains how Tabi (“Tabi,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Tabi mobile application and related services (the “Service”). Tabi is a group bill-splitting app that helps people record and settle shared expenses.

By using Tabi, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide

• Account details — your name, phone number, and a password (stored only in hashed form; we never store your plain-text password). If you sign in with a third-party provider (see Google Sign-In below), we receive your basic profile from that provider instead of a password.
• Profile — the avatar character you choose. Tabi avatars are one of a small set of built-in illustrated characters, not uploaded photos.
• Expense & event data — the events you create, participants you add, expenses, line items, amounts, additional charges, balances, and settlement records.
• Receipt images — photos of receipts you choose to scan or upload, and payment-proof images you attach to a settlement.

Information from your device (with your permission)

• Contacts — if you grant contacts access, Tabi reads contacts on your device so you can add people to an event. Only the phone numbers you select are sent to our servers, and only to check whether they already have a Tabi account. We do not upload or store your entire address book.
• Camera & photos — used only to capture or select receipt and payment-proof images when you choose to.

Information collected automatically

• Technical data — basic device and log information (such as app version and error diagnostics) needed to operate and secure the Service.

2. Google Sign-In & Google API Services

If Tabi offers you the option to sign in with Google, we request the minimum scopes needed to identify you — typically your basic profile (name and profile identifier) and your email address. We use this information solely to create and authenticate your Tabi account.

Specifically, data obtained from Google is:

• used only to provide and improve the user-facing features that were clear at the time you granted access (signing in to and using your Tabi account);
• not sold to anyone, and not used or transferred for advertising, ad targeting, or credit-worthiness purposes;
• not transferred to others except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition with equivalent protections;
• not read by humans, unless we have your explicit consent, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymized for internal operations.

You can revoke Tabi’s access to your Google account at any time through your Google Account permissions page.

3. How We Use Your Information

• Create and manage your account and authenticate you.
• Provide core features: creating events, recording expenses, scanning receipts, calculating balances, and generating optimized settlement plans.
• Match phone numbers you select against existing Tabi accounts so you can add the right people to an event.
• Operate, maintain, secure, and improve the Service.
• Respond to your support requests and communicate with you.
• Comply with legal obligations and enforce our terms.

4. How We Share Information

We do not sell your personal information. We share it only:

• With other participants in your events — people you add to an event can see the shared event data (your name, avatar, expenses, and balances within that event).
• With service providers — trusted vendors who host our infrastructure and object storage, acting on our behalf under confidentiality obligations.
• For legal reasons — when required by law or to protect the rights, safety, and security of Tabi and its users.
• In a business transfer — as part of a merger, acquisition, or sale of assets, with equivalent privacy protections.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove or anonymize your personal data, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your Rights & Choices

• Access & update — you can view and edit your profile in the app.
• Export — Tabi lets you export your data as a file from within the app.
• Delete — you can delete your account from the app, which removes your personal data as described above. You may also request deletion by emailing us.
• Permissions — you can change contacts, camera, and photo permissions in your device settings at any time.

7. Data Security

We use reasonable technical and organizational measures to protect your information, including hashing passwords and transmitting data over encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children’s Privacy

Tabi is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. International Users

Your information may be processed and stored in countries other than your own. Where required, we take steps to ensure your data receives an adequate level of protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes may be communicated in the app.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at elianrichards@gmail.com.