The trader postal address. Required of an EU trader selling in-app purchases, and published on the store listing anyway. Waiting on the move to Portugal — search this file for FILL-IN.
Then delete this box.
Last updated: 14 August 2026
Billy splits receipts between friends. This policy explains, in plain language, exactly what leaves your phone and what does not. It is short because Billy collects very little.
There is no account. Billy never asks for your name, email address, or phone number, and there is nothing to sign up for.
Your trips, the people on them, the receipts, what everyone had, and who owes whom are stored only in the app on your device. None of it is ever sent anywhere. Nobody — including the developer — can see it.
This also means it is not backed up. If you lose the phone, the data goes with it. Settings → Export writes a copy you can keep.
One thing: the photo of a receipt, when you choose to scan one.
The photo is shrunk on your phone and sent, over an encrypted connection, to Billy's own server, which passes it to Anthropic — an AI service that reads the text and sends back the list of items. Anthropic states that data submitted through its API is not used to train its models.
The photo is not stored. Not by Billy's server, not in any log, and not in any database. It exists only for the few seconds it takes to read, and is then gone. Typing a receipt in by hand sends nothing at all.
Billy gives every install of the app a random reference — a string like
c2987a1a-9bfe-444b-b159-332468f72103 — generated on your phone when you first open it.
It is not derived from anything about you or your device, and it is not linked to your name, because
Billy does not know your name. You can see yours under Help & about, at the bottom.
Against that reference, the server stores:
| What | Why |
|---|---|
| How many scans this install has used | To count the free trial. This has to live on a server: if it lived on the phone, clearing the app's data would hand out unlimited free scans. |
| How many scans it has bought | So scans you paid for are still there next time. |
| The time of the most recent scan | To stop automated abuse of the scanning service. |
| A record of each completed purchase | So that a payment notification arriving twice does not charge you twice, and so a refund can be applied correctly. |
Separately, and not linked to any install reference, the server counts how many scans were performed each day and what they cost to run. That record contains no reference, no photo, and no time more precise than the date, so it cannot be used to work out when anybody shops.
If you buy a pack of scans, the payment is handled entirely by Google Play. Billy never sees or receives your card details, billing address, or name. Google tells a service called RevenueCat that a purchase happened, which tells Billy's server to add the scans to your install reference. What is passed along is the reference and which pack was bought — nothing else.
| Who | What they handle |
|---|---|
| Anthropic (United States) | Reads the receipt photo. Does not keep it. |
| Cloudflare | Runs Billy's server and stores the scan counts described above. |
| Google Play | Takes payment, if you buy a pack. |
| RevenueCat | Reports that a purchase happened. |
Some of these are outside the European Economic Area, so a scan involves an international transfer of the photo. It is sent encrypted, read, and not retained.
The scan count is kept for as long as the app is installed. It is deliberately never reset — the free trial is once per install, for the life of that install, rather than a monthly allowance — so there is no point at which it expires on its own. Ask, and it will be deleted.
Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. In Billy's case that is the short list in the table above and nothing else.
To make a request, email the address below and quote your install reference — it is under Help & about in the app. It is the only handle the record is stored under, so without it there is genuinely no way to find, or delete, your row. Deleting it also removes any scans you have bought, which cannot be undone.
You also have the right to complain to your national data protection authority.
Billy is not directed at children and does not knowingly collect anything from them. There is nothing to collect: no account, no name, no contact details.
If this policy changes, the date at the top changes with it. Material changes will be announced in the app.
Billy is made by Pedro Santos.
Contact: hello@splitwithbilly.com
Address: FILL-IN — trader postal address