Privacy Policy

Information we collect

Depending on the features you use:

• Account details: your email address (if you register with email), username, display name and avatar choice. Passwords are handled by our authentication provider and stored only in hashed form. If you sign in with Google or Apple, that provider handles your sign-in and we receive the basic account details needed to create your account. Guest sessions use an anonymous ID and no email address.
• Phone number: only if you add one to your profile; it is used to help friends find you.
• Bill and group content: bills, items, prices, splits, the names of participants (including people who do not use Slyce), groups, invitations, friend connections, payments and settlements you record (amounts, notes and payment method), and related notifications. Stored on your device and, when you use online features, on our servers.
• Receipt scans: before your first scan, the app asks for your permission. When you scan a receipt, the photo is sent to our servers and processed by Google services (see below). If you save the bill, the photo is kept with it for 7 days so the people on the bill can check the paper receipt, then it is deleted automatically. We do not keep the extracted text after processing; we keep a record that a scan took place, to apply usage limits.
• Contacts (optional): only if you choose to import contacts, the app reads names and phone numbers from your device. Phone numbers are sent to our servers only to check which of your contacts already use Slyce. We do not build an address book from them.
• Payment details (optional): the payment handle or account details you add so people can pay you — for example a PayPal username, IBAN, BSB, Pix key, PromptPay ID or e-wallet ID — plus an account name, an optional label and a currency. They are encrypted at rest with AES-256-GCM. Slyce does not accept government or tax ID numbers (such as CPF or CNPJ) as payment keys, and never asks for card numbers, bank passwords or one-time codes. Saved payment details are shown only to people who owe you money in Slyce. Slyce never initiates, holds or moves funds.
• Purchases: your subscription status and the purchase identifiers Apple or Google provide, which we use to verify your subscription. We never receive your payment card details.
• Device and technical data: a random device identifier used for guest limits and syncing, your push notification token if you allow notifications, your language, currency and theme preferences, error reports, and IP address and request logs kept by our servers and hosting providers.
• Data stored on your device: your bills, cached data, and changes waiting to sync while you are offline.

How we use information

• Create and secure your account
• Calculate splits and balances, and sync and share bills and groups with the people you choose
• Read receipts you scan and apply scan limits
• Show the payment details you save to people who owe you in Slyce, so they can pay you in their own app
• Send notifications about activity on bills and groups you take part in
• Verify subscriptions and provide Pro features
• Diagnose errors, prevent abuse, and keep the service reliable

We do not use your information for advertising, we do not track you across other companies’ apps or websites, and we do not sell your personal information.

Storage and security

Your device keeps local data for offline use; our server database holds synced and account data. Data is sent over encrypted HTTPS connections and access to our systems is restricted. Saved payment details are encrypted at rest with AES-256-GCM, and payment values are never written to logs or error reports. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Providers may keep routine logs and backups for their own retention periods.

Service providers and third-party AI

We use the providers below to run Slyce. They process data only to provide their service to us. Receipt scanning uses third-party AI: when you scan a receipt, the photo is sent to Google Cloud Vision (text recognition) and Google Gemini (an AI model that helps structure the result). The app asks for your permission before your first scan, and you can decline; receipts can contain personal details, so scan only receipts you are happy to send to these services. Manual bill entry is always available.

See also Google Privacy Policy, Apple Privacy Policy and Supabase Privacy.

Advertising and tracking

Slyce contains no advertising and no third-party advertising or analytics SDKs. We do not “track” you as defined by Apple’s App Tracking Transparency framework, so the app does not ask for tracking permission, and we do not use advertising identifiers.

Device permissions

• Camera — optional, to scan receipts and QR codes.
• Photos / media — optional, to import a receipt image; iOS can also save receipt photos you choose to your library.
• Contacts — optional, only if you choose to import contacts to find friends (see above).
• Notifications — optional, for activity on your bills and groups.
• Internet — sync, sign-in, receipt scanning, purchases and push.

Slyce does not use the microphone, SMS, or your location. You can turn any permission off at any time in your device settings.

Account and data deletion

You can delete your Slyce account — a registered account or a guest session — from the app, and its associated service data is removed as below. Deletion is never refused because of open balances, payments, or bills you created.

How to start deletion

In the app (recommended)

1. Open Slyce.
2. Open Settings (registered accounts and guests) or Profile (registered accounts); on iOS and Android the steps are the same.
3. Tap Delete account, review what stays with the groups you share, and confirm.

On the web

Step-by-step instructions and context: https://slyce-bills.vercel.app/delete-account (same flow summary as above, plus email alternative).

By email

If the app is unavailable or deletion fails, email slyce.app@outlook.com with subject Delete my Slyce account and include:

• The email used to register (email/password sign-up), or
• The Google or Apple account email, or the username shown in Profile (Google / Apple sign-in).

We may ask for reasonable verification before deleting or disabling access.

What we delete

When you delete your account we immediately delete or irreversibly remove:

• Your sign-in record and profile: email, username, display name, phone number, avatar, language, theme and currency preferences, and subscription details.
• Bills and groups no one else takes part in, with their items and payments, and any unfinished drafts you started.
• Saved payment details (handles and account details you added to receive payments).
• Friend connections, notifications, receipt-scan records, custom categories, invite links you created, purchase links, and push tokens.

Bills and payments shared with other people

Bills, groups and payments you share with other people are part of their records, so they are not deleted and their amounts do not change. Payment records keep only the payment method type you selected, not the saved details themselves. In those shared records you keep appearing under the name the group already used for you, marked Deleted account. That entry is no longer linked to any email, username, phone number, avatar or sign-in, and it cannot be signed into or claimed by anyone. Bills you created that others share are handed to another participant, and a group you administered gets a new admin. We keep this under our legitimate interest, and the other participants', in accurate shared expense records.

Deleting your Slyce account removes our link to that identity; data held only by Google, Apple or other third parties may require their own account tools.

What we may keep and for how long

• Security, fraud, and abuse: Short-lived logs, rate-limit or quota-related records (including guest-related rows described elsewhere in this policy).
• Backups: Copies at hosting providers may persist until they roll off in the normal backup cycle.
• Legal / tax: Records we must retain under law.
• Re-registration check: a one-way hash of your email and your subscription tier for up to 30 days; free accounts cannot re-register with the same email for 5 days.
• Deletion record: an internal record of the deletion holding only identifiers and counts (for example which bills were handed over), with no personal details, so we can answer support questions.

In-app deletion takes effect immediately. For requests by email, unless the law requires longer, we aim to finish deletion of active account data within 30 days of a verified request. Backups can take additional time before all copies expire.

Data only on your device

Some data may exist only on your phone until you clear it or uninstall. Deleting your server account does not remove a shared bill from someone else’s device.

Children

Slyce is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Sharing

We share data with the providers above, with other users as needed for bills/groups you share, and when required by law or to protect users and the service. The payment details you save are shown only to people with an outstanding obligation to you, so they can pay you. OS Share sends content to the app you choose; we do not control that app.

International transfers

Data may be processed in the U.S. and other countries where our providers operate, using appropriate safeguards where required (e.g. standard contractual clauses).

Your rights and choices

• View and edit your bills, items, participants and profile in the app.
• Export bill summaries as CSV or PDF using your device’s share function.
• Delete your account or clear your data as described above.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, and to complain to your data protection authority. To use these rights, email us. For California residents, we do not sell or share personal information as those terms are defined under California law. For EEA/UK users, Lilawa Co. is the controller for the processing described here (providers have their own notices for their own accounts).

Changes

We may update this policy and change the Last updated date. If changes are significant, we will let you know in the app.

Security incidents

If we must notify you or a regulator about a breach affecting personal data we hold, we will do so as required by applicable law.

Do Not Track

The app does not respond to browser Do Not Track signals; it does not track you across other companies’ apps or websites.

Third-party links

Links inside the app may open third-party sites or apps. Their terms and privacy policies apply there.

Contact

Privacy and data requests: slyce.app@outlook.com

For privacy questions, deletion help, or rights requests, use this address. We cannot remotely wipe data that exists only on your device—use in-app clearing or uninstall.

Help and support: https://slyceit.online/support

Developer: Lilawa Co.

Summary

• Slyce (Lilawa Co.): bills stored on your device and, for online features, on our servers; Supabase sign-in; Google Cloud Vision and Gemini read receipts you scan; Apple / Google purchases and push; optional saved payment details (encrypted at rest with AES-256-GCM, shown only to people who owe you); optional Sentry error reports. No ads, no tracking, no sale of personal information.
• Delete account: Settings or Profile → Delete account, or https://slyce-bills.vercel.app/delete-account, or email slyce.app@outlook.com with subject Delete my Slyce account.
• Deletion target: immediate in the app; within 30 days for email requests after verification; backups and legal/security retention may run longer as described above.

This website: analytics

The Slyce apps contain no analytics SDKs (see above). This website (slyceit.online) uses Google Analytics 4, only if you click Accept on the cookie notice, to understand which pages are found and read and where the site can improve. It records page views, scrolling, clicks on our download buttons, and use of the free expense calculator, together with your approximate location, device and browser type, and the page you came from. We do not enable advertising features or ad personalisation, and we never send the bills, names or amounts you type into the calculator (they stay in your browser).

If you click Decline, Google Analytics does not set cookies; Google may still receive limited, cookieless pings it uses for aggregate, modelled statistics. You can change your choice at any time with Cookie settings in the page footer, or block analytics in your browser. Google LLC acts as our processor for this data; see the Google Analytics data-use policy.