Privacy policy

Last updated: 4 November 2026. Settl is operated by Eric (contact: [email protected]). This policy explains what Settl collects, why, and the choices you have.

What we collect

We do not collect bank details, card numbers or UPI PINs. Settl never moves or holds money; payments happen inside your UPI app.

Why we use it

Only to run Settl: show balances, let the people you split with see shared expenses, send invites you trigger, and keep your account secure. We do not sell data or show ads.

Who can see it

People you share a group or an expense with can see those expenses and your name, avatar, UPI ID and birthday. Our service providers process data on our behalf: Supabase (database, sign-in and file storage) and Cloudflare (hosting).

Your choices

Usage analytics

To learn which features help, Settl records product events such as "expense added" or "settings opened", with small labels like which screen or which split type. These events never include names, amounts, phone numbers, UPI IDs or anything you type. They are stored in Settl's own database, not sent to advertising or tracking companies. You can turn this off in Profile, and it is off automatically if your browser sends a Do Not Track or Global Privacy Control signal.

The public website (the home page and blog, not the app) also counts visits and button clicks so we can see which parts are useful. For this we use Cloudflare Web Analytics, Google Analytics and Microsoft Clarity. Clarity can show how visitors scroll and click on these public pages. None of these tools run inside the app, so they never see your expenses or balances. They do not run if your browser sends a Do Not Track or Global Privacy Control signal.

Stored on your device

So Settl works offline, it keeps a copy of your recent data and any changes waiting to sync on your device. Signing out removes it.

Suggestions from the website

If you send a suggestion from the roadmap form, we store your message and, only if you give it, your email address so we can reply.

Security and retention

Data is encrypted in transit, access is limited by per-row database rules, and receipts are stored privately. We keep data while your account is active and delete it within 30 days of a verified deletion request, except where the law requires us to keep it.

Changes

We will post changes here and update the date above.