Privacy Policy
Last updated 20 August 2026
Duesy helps you split shared expenses and track your own spending. This policy describes what we hold, why we hold it, and what you can do about it. It reflects how the product actually works rather than what a template says it might.
What we store
- The expenses, income, budgets and goals you type in — including receipts you choose to upload.
- Your account basics: name, email, and a hashed password.
- Who you split with, so shared balances stay in sync.
What we never touch
- No bank logins — no Plaid, no account linking, ever.
- No card or bank numbers — payments go through the app store; we never see them.
- We never sell your data, and never read your entries to target ads.
That's the short version. The full detail — every provider we use and every choice you have — is spelled out below.
What we collect
- Your account — name, email address, and a hashed password. If you sign in with Google we also receive your Google profile photo and store its address.
- What you record — expenses, incomes, budgets and goals you enter, including amounts, descriptions, dates, categories and any receipt images you upload.
- Who you split with — the friends and groups you connect to, and the balances between you. Adding someone by email means we store that email in order to link the two of you.
- Your preferences — currency, language, theme, notification and data-saver settings.
- Devices — if you enable push notifications, a device token so we can send them.
- Onboarding activity — which setup steps you have completed, so we can tell whether the product is working for new users.
What we do not do
We do not sell your data. We never share the expenses, incomes, budgets, balances or any personal details you record with advertisers.
Ads
Free accounts see ads. In the app these are served by Google AdMob, and on the web by Google AdSense. To show and measure ads, these Google services use a device advertising identifier and limited ad-interaction data, and — where you consent (via the consent prompt shown to users in the EEA and UK) — may personalise the ads you see. They do not receive the financial data or entries you record in Duesy. Pro and ad-free accounts see no ads and load no ad code.
Payments and subscriptions
Duesy Pro is a paid subscription. When you buy or renew it in the app, the payment is taken by the app store you bought it through (Google Play) — Duesy never sees or stores your card or bank details. We use RevenueCat to validate and keep track of your subscription; through it we receive which product you bought, whether it is active, and its start, renewal and expiry dates, so we can unlock Pro features for your account. Pro earned through referrals is granted directly by us and involves no payment.
Who else touches your data
We use a small number of providers, each for a single purpose, and share only what that purpose requires:
- Hosting and email — our servers and the mail that carries your verification and password-reset codes.
- Google Firebase — Google sign-in and push notification delivery. Firebase receives your device token and, if you use Google sign-in, verifies your Google identity.
- Google Analytics — measures aggregate, non-identifying website traffic (pages viewed, approximate location, referrer) so we can see how people find and use the site. Ad-related data collection is turned off.
- Currency rates — exchange rates are fetched for conversion. No account data is sent to obtain them.
- RevenueCat — validates and tracks your Duesy Pro subscription. It receives your purchase and subscription status, never your card details or the entries you record.
- Google Play — processes subscription payments made in the app. Your payment details are handled by Google under its own terms and are not shared with us.
- Google AdMob & AdSense — for free accounts only, to show ads. They receive a device advertising identifier and ad-interaction data, never the entries you record. See "Ads" above.
Data you share with other people
Splitting is inherently shared. When you add an expense involving someone else, that person can see the description, amount, date, how it was split and that you created it. Removing them from an expense, or deleting it, removes their access going forward, but people may already have seen it. Balances between you remain visible to both of you until settled.
How long we keep it
Your data stays while your account is open. Deleted expenses, incomes and goals go to a recoverable area first so an accident can be undone, and are removed permanently after that. When you delete your account we remove your personal data on the schedule described below; entries that form part of another person's balance history may be retained in an anonymised form so their own records stay correct.
Your choices
- Export — download everything associated with your account, as a machine-readable file, from your profile at any time.
- Delete — request deletion of your account from your profile. We hold the request for a grace period so an accidental or regretted deletion can be reversed by signing back in, then remove the account.
- Correct — edit your details and entries directly in the app.
- Notifications — turn off push and per-type notifications in your profile.
Security
Passwords are stored hashed, never in readable form. Verification and reset codes are short-lived, single-use, attempt-limited, and stored hashed. Access to the service uses encrypted connections. No system is perfectly secure, and we will not claim otherwise.
Children
Duesy is intended for adults (18 and over) and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, tell us and we will remove it.
Changes
If this policy changes in a way that materially affects you, we will say so in the app rather than quietly updating the date at the top.
Contact
For any privacy question or request — access, correction, deletion, or a complaint — email us at hello@getduesy.com. We are the party responsible for the personal data described here.