Last updated May 14, 2026
Privacy Policy
This policy explains what data SharingBill collects, why it is processed, which providers support the service, and how users can exercise privacy rights.
This page is provided for transparency for an early-stage MVP. It is not legal advice and may be updated as SharingBill evolves.
1. Controller and contact
SharingBill is currently operated as a personal MVP project. For privacy requests or questions, contact honglinchen1226@gmail.com.
2. Data collected
SharingBill may process your email address, display name, password hash, session records, password reset records, books, invite codes, members, placeholder members, roles, expenses, participant splits, balances, settlement records, and technical data needed to operate, secure, and debug the service.
3. Purposes of processing
Data is processed to provide account registration, login, sessions, password resets, shared book collaboration, invites, expenses, settlements, service messages, security, abuse prevention, debugging, and reliability.
4. Legal basis
For users in the EU or Germany, processing is primarily based on providing the requested service, legitimate interests in operating and securing the service, and compliance with applicable legal obligations where relevant.
5. Service providers
SharingBill uses infrastructure and communication providers to operate the service, including Railway and PostgreSQL hosting for application and database infrastructure, Resend for production email delivery, and Cloudflare or DNS services for domain routing.
6. Cookies and sessions
SharingBill uses an HTTP-only session cookie that is necessary to keep users logged in. The service does not currently use advertising cookies or third-party tracking cookies.
7. Retention
Account and book data is generally retained while the account or book remains active. Some records may be retained where needed for service integrity, security, dispute handling, or legal obligations. You can request deletion by contacting the email above.
8. Your rights
Depending on your location and applicable law, especially under GDPR in the EU, you may have rights to access, rectify, erase, restrict, or receive your personal data, and to object to certain processing. You may also have the right to lodge a complaint with a data protection supervisory authority.
9. Security
SharingBill uses password hashing, HTTP-only sessions, and managed infrastructure providers. No online service can be guaranteed to be perfectly secure, so users should avoid storing unnecessary sensitive information in expense titles, member names, or notes.
10. Changes
This policy may be updated as SharingBill changes. Material updates will be reflected on this page with a new last-updated date.