Privacy policy

When you use SharingSG, we collect the information you give us, such as your name, email address, phone or PayNow number, and the content you add to groups, bills, chats, support requests, and feedback. We also keep records of memberships, join requests, payments you mark or confirm, and the messages and reminders we send you. SharingSG helps people coordinate payments made outside the service; we do not collect your bank login or payment-card details for those payments.

Our iOS app creates a random installation identifier and, if you enable notifications, receives a push token so we can send notifications to the right account. The app does not request access to your Contacts, collect an advertising identifier, or keep a history of searches you make in the app.

We use your information to run SharingSG: to manage accounts and groups, show bills and payment status, deliver messages and reminders, respond to support requests, prevent abuse, and keep the service secure and reliable. We may also use it to meet legal obligations.

Product announcement emails are on by default for active accounts. You can turn them off in Account settings or through an email's unsubscribe link. WhatsApp marketing messages require a separate opt-in. These choices do not stop essential service messages.

When enabled, Google Analytics helps us understand website visits and broad actions in the website and iOS app, including Alpha and Production iPhone app builds, such as browsing, joining a group, creating a bill, and using account settings. When enabled, staging and Production use separate analytics streams. Google may receive cookies or similar browser and app identifiers, device information, page addresses or app activity, and approximate location. Our custom events use fixed action names and limited categories; they do not include your name, contact details, account or group identifiers, invite or payment-link codes, search terms, message text, receipt images, or payment amounts. A reported payment is an action in SharingSG, not proof of a bank transfer. We do not use this information for cross-app advertising tracking or ad personalization.

We use Sentry to find errors and improve performance. Reports may include technical information about your device and the error. Some website sessions and errors may be captured in recordings with text and media masked; Production iOS does not capture screen replays. If you submit feedback, we receive your message and any name or email you choose to add. Feedback does not automatically include a screenshot or session recording.

Information you add to a group or bill may be visible to the host, other members, or people with a payment link, as needed for that feature. We also share information with companies that help us operate SharingSG, including providers of sign-in, hosting, storage, email and push delivery, phone verification, analytics, error reporting, and abuse prevention. They receive information needed for those services.

Receipt scanning is optional. If you scan a receipt, its image is uploaded to SharingSG and may be sent to Google's Gemini service to extract bill details. If cloud parsing is unavailable, the app may process the image locally instead. You can enter bill details manually without uploading a receipt. If you follow our optional donation link, you leave SharingSG and Stripe handles the information you provide there under its own privacy policy. We may also disclose information when required by law or to protect the safety and rights of SharingSG and its users.

You can update your account details and notification preferences in Account settings. To request a copy or correction of your information, contact us through the support form. We will verify requests before sharing or changing account information.

We keep information while your account is active and for as long as needed to provide the service. You can request account deletion from Account → Request account deletion on the website or in the iOS app, including from the access screen if iPhone early-preview access has ended. You do not need to contact support to do this. An administrator confirms and processes valid requests, normally within seven days, and cannot reject a valid request. If you host an active group, you must archive it first so its members are not left without a host.

When your account is closed, we revoke access and pending communications and schedule your sign-in identity for deletion. We may retain some group, payment, delivery, security, and audit records when needed for other users, legal obligations, fraud prevention, or the integrity of the service.

We use access controls and encrypt sensitive shared account details. No service can guarantee absolute security. We may update this policy as SharingSG changes; the date at the top tells you when it was last updated.