Privacy Policy

Last updated: October 2026

Introduction

At TabApp, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our bill splitting application. By using TabApp, you agree to the collection and use of information in accordance with this policy.

What Data We Collect

We collect the following types of information to provide and improve our service:

  • Account Information: Your email address (collected via Clerk authentication) and display name.
  • Payment Details: Payment method information you choose to store, which is encrypted and securely stored.
  • Bill Data: Information about the bills you create, including item names, prices, participants, and split configurations.
  • People You Add: The name of each person you put on a bill, and a phone number or email address if you enter one for them. We message that person only when you ask us to send their invite, and every message says how to stop them.
  • Notifications on Your Devices: When you turn notifications on for a phone or computer, we store the address and keys your browser gives us for reaching that device. They are removed when you turn notifications off there, sign out of that device, or delete your account.
  • Usage Data: General information about how you interact with the app to help us improve the user experience.

How We Use Your Data

We use your information to:

  • Provide and maintain the TabApp service
  • Enable bill splitting and expense tracking features
  • Allow you to share bills with friends and family
  • Send important service updates and notifications
  • Improve and optimize our application
  • Respond to customer support requests

Data Storage and Security

Your data is stored securely using Turso, a SQLite edge database, which provides fast, reliable, and secure data storage. We implement industry-standard security measures including:

  • Encryption of sensitive data at rest and in transit
  • Secure authentication via Clerk
  • Regular security audits and updates
  • Access controls to limit data access to authorized personnel only

Third-Party Services

We use trusted third-party services to help operate TabApp:

  • Clerk: For secure user authentication and account management.
  • Turso: For database storage and management.
  • Vercel: For hosting and infrastructure.
  • Mailgun and Twilio: For delivering the emails and text messages TabApp sends on your behalf.
  • Your browser's push service: A notification to your device is carried by the service your browser uses (run by Google, Mozilla, Apple or Microsoft). It is encrypted so that only your device can read it.
  • LogRocket: For session recording when we need to diagnose a problem. See Cookies and Tracking below.
  • Sentry: For error reports when something in TabApp breaks. See Cookies and Tracking below.

These services have their own privacy policies and we encourage you to review them. We do not sell your personal information to third parties.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format, from Account under Me
  • Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us using the information below.

Cookies and Tracking

TabApp uses essential cookies required for authentication and basic functionality. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

If you join a bill from an invite link without an account, we set one essential cookie for that bill. It holds a random key that keeps your seat on that browser for up to thirty days, and nothing else about you; we store only a scrambled copy of the key, on the bill. Clearing it, or the organiser releasing your seat, ends it. For a seat taken this way we also keep the kind of browser and device it was taken on, such as Safari on iOS, which the organiser can see so that they can tell seats apart.

Session recording is switched off by default. We may switch it on to diagnose a problem, and while it is on LogRocket, a third-party service, records how pages are used. Text on the page and anything typed into a form are masked before they leave your device, the contents of requests are not recorded, and a recording is linked to an account identifier rather than a name or email address.

When TabApp fails, on your device or on our servers, a report of the error is sent to Sentry, a third-party service, so we can fix it. A report holds the technical description of the error, the page it happened on and, if you are signed in, your account identifier. Email addresses, phone numbers and invite links are removed before it is sent, and it does not include the contents of your bills.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@tabapp.app