Privacy Policy

1.Information we collect

Account information

When you create an account, we collect the information needed to sign you in and identify you to the people you share with. Depending on how you sign in (email, phone, Apple, or Google), this may include your name, email address, phone number and country code, and a unique identifier from your chosen sign-in provider.

Content you create

We collect the data you enter to use the app, including groups you create or join, expense descriptions and amounts, dates, categories, splits, calculated balances, notes, and the friends and people you add.

Contacts

With your permission, EvenSteven accesses your device’s address book to help you find and add friends. See Section 4 for details on how this works.

Subscriptions & purchases

EvenSteven offers an optional paid subscription, EvenSteven Pro. When you subscribe, the payment itself is processed by the Apple App Store or Google Play — we never receive or store your card or payment-account details. To unlock and keep Pro features in sync across your devices, we work with RevenueCat, which records your subscription status (such as whether a subscription or free trial is active, the product purchased, and renewal or expiry dates) tied to an app-specific user identifier. We may also record whether you are eligible for our founding-member offer. We do not receive your full payment information from Apple, Google, or RevenueCat.

Device & diagnostic information

To keep the app reliable and understand how it is used, we automatically collect limited technical information such as device model, operating-system version, app version, and general usage and product events (via Google Firebase Analytics), along with crash and error reports (via Google Firebase Crashlytics). This may include your IP address and approximate, network-derived location. We do not use precise GPS location.

2.How we use information

• to provide, operate, and sync the Service across your devices;
• to authenticate you and secure your account;
• to calculate balances and “settle up” suggestions within your groups;
• to match the friends you add to existing EvenSteven accounts (see Section 3);
• to sell and manage EvenSteven Pro subscriptions and unlock the features they include;
• to diagnose problems, prevent abuse, and improve the app’s stability and features;
• to understand how the app is used through aggregate product and usage analytics;
• to communicate with you about the Service, including important notices;
• to comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use it for third-party advertising.

3.Contact matching & directory

So that friends can be linked to the right account, EvenSteven maintains a directory that maps a user’s phone number and/or email address to their account. When you add a friend by phone or email, we check this directory to see whether they already have an EvenSteven account, so shared groups and expenses reach the correct person. Your own directory entry (name, phone, email) is created from your account details for this same purpose and is only used to enable contact matching among users.

4.Access to your contacts

If you grant the contacts permission, the app reads names, phone numbers, and email addresses from your device’s address book on your device to present a list you can choose from. We only transmit the details of a specific person to our servers when you actually choose to add or invite that person — for example, to match them to an existing account or to include them in a group or expense. We do not upload your entire address book, and you can decline or revoke this permission at any time in your device settings (the app remains usable without it).

5.How information is shared

We share information only as follows:

• With other users: when you participate in a shared group or expense, the relevant details (such as your name and the expense information) are visible to the other members of that group so the app can show who owes whom.
• With service providers: we use trusted third parties to run the Service on our behalf, under contractual confidentiality and data-protection obligations (see Section 6).
• For legal reasons: if required by law, regulation, legal process, or to protect the rights, safety, and security of our users, the public, or Aviora Tech.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

6.Service providers

EvenSteven is built on Google Firebase and related services. Our key providers include:

These providers process data under their own privacy and security commitments. We encourage you to review Google’s and Apple’s privacy policies for more information.

7.Storage & international transfers

Your data is stored locally on your device and, when you are signed in, on Google Cloud / Firebase infrastructure operated on our behalf. This infrastructure may be located in, and your information may be processed in, countries other than the one in which you live, where data-protection laws may differ. By using the Service, you consent to such transfer, storage, and processing, and we take steps to ensure appropriate safeguards are in place.

8.Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Note that expenses and balances you shared with others may remain visible to those users as part of their own records.

9.Your rights & choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can:

• view and edit much of your information directly within the app;
• delete your account from within the app to remove your personal data;
• manage the contacts permission in your device settings;
• contact us at contact@avioratech.com to exercise any right — we will respond as required by applicable law.

10.Security

We take reasonable technical and organizational measures to protect your information, including encryption of data in transit, authenticated access, and reliance on Google’s secure infrastructure. Because your data is local-first, much of it lives on your own device under your device’s protections. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11.Children’s privacy

EvenSteven is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take steps to delete it.

12.Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

13.Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact us at contact@avioratech.com.