Duefree privacy policy

Who we are

Duefree is provided by Aman Jaiswal, an individual developer in the United Kingdom, who is the “data controller” for the purposes of UK and EU data protection law. In this policy, “we” and “us” mean him.

Data controller: Aman Jaiswal
Data protection: privacy@duefree.co.uk
Help with the app: support@duefree.co.uk
Anything else: hello@duefree.co.uk

If anything in this policy is unclear, email privacy@duefree.co.uk.

The AI assistant runs on your phone. Duefree Plus includes Duefree AI, a chat assistant powered by an on-device model. Your questions, its answers, and the summary of your finances it reads to answer you are all processed on your phone. Duefree makes no network request for artificial intelligence, and no model provider (not us, not Google) ever receives your questions or your financial data. The only related transfer is a one-time download of the model file itself, which carries none of your data.

What data Duefree handles

Data you provide

Account details: your email address, and a display name. Other people find your Duefree account by typing your exact email address, which is how friend requests reach you. If you sign in with Google, Google gives Duefree a one-time identity token to establish your account, and your Google display name and profile photo are copied to your Duefree profile. If you sign in with Apple, Apple gives Duefree a one-time identity token and your email address, or a private relay address if you choose to hide your email (then only someone who knows that relay address can find you), and, the first time only, your name, which becomes your display name unless you have already chosen one. If no name comes with your sign-in, your display name starts as the part of your email address before the “@”, which the people who can see your name will see; for a hidden Apple address that part is enough to find you, so give yourself a name in Profile. You may optionally add a profile photo of your own and choose a display currency. Your accent colour is saved on your device only and never reaches our servers.
Your financial entries: the expenses, income, budgets, shared bills, splits and settlements you record, and the friends and groups you create. You type these in yourself, dictate them to the assistant, or photograph a receipt for it to read, and nothing is saved until you confirm it. Duefree never connects to your bank and never asks for bank credentials.
Messages you send us: if you email us, we receive your email address and whatever you write, so that we can answer you.

Data collected automatically

A push notification token for your device, and a per-installation identifier created by Google’s messaging service, so the app can send you notifications (a friend request, being added to a bill or a group, a bill declined or removed, a settlement, a reminder about money owed). On an iPhone, Apple’s push service delivers them.
Subscription information if you buy Duefree Plus: your Duefree account identifier goes to Google Play or the App Store with the purchase, and the purchase token or transaction identifier, the plan, its status, renewal state and expiry, together with the record the store returns about the subscription, are stored so the app knows whether Plus is active. The App Store keeps one subscription per Apple ID: if Plus is bought on the same Apple ID from a second Duefree account, the subscription moves to the account that made the latest purchase, and we keep a record of that move with the purchase record.

Duefree contains no analytics or crash-reporting software, and does not build an advertising profile of you.

How your data is stored

Your account data (transactions, budgets, friends, groups, bills and settlements) is stored in Duefree’s backend, a database hosted on Supabase in the European Union, so that it syncs across your sessions and so that friends can split bills with you. Access is restricted at the row level: nobody can read a bill they are not part of. Data is encrypted in transit. Profile photos are stored in a public bucket, which means anyone who has the photo’s web address can view it; do not upload a photo you would not want seen.

Who else receives data, and why

Service	What it receives	Why
Supabase (database in the EU)	Your account data	Hosts the database, file storage and server functions
Resend	Your email address and each account email we send you (a sign-up confirmation, a password reset, or a link to confirm a new email address), including the one-time link in it	Sends Duefree’s account emails. Resend stores its account data, including its records of those emails, in the United States
Google Firebase Cloud Messaging	Your device push token and the text of each notification (a name, a bill title, a group name, an amount owed or settled)	Delivers push notifications
Apple Push Notification service	On an iPhone, your device push token and the text of each notification, passed on by Firebase Cloud Messaging	Delivers push notifications to iPhones
Google Play and the Play Developer API	Your Duefree account id and the purchase token, at purchase time	Sells and verifies Duefree Plus on Android
App Store and the App Store Server API	Your Duefree account id with the purchase, then the transaction identifier when we check it	Sells and verifies Duefree Plus on iPhone
Google Sign-In	The sign-in request and the Google account you choose, only if you use Google sign-in; Google returns an identity token, your name and your photo	Signs you in
Sign in with Apple	The sign-in request and the Apple ID you choose, only if you use Apple sign-in; Apple returns an identity token, your email address or a relay address, and your name the first time	Signs you in
Google (profile photo hosting)	A request for a Google-hosted profile photo, including your device’s IP address	Shows the photos of people who signed in with Google
Google Fonts	A font request, including your device’s IP address, the first time each typeface is needed; the font is then cached on your device	Renders the app’s typefaces
Hugging Face	Your IP address and a standard request header, once, when the assistant’s model downloads	Delivers the on-device AI model file (no financial data is sent)
Cloudflare	When you visit duefree.co.uk: your device’s IP address and the details of each request	Hosts the website and counts visits in aggregate, without cookies
Google Workspace	The emails you send to Duefree’s addresses, with any attachments, and the emails we send you from them, such as replies and deletion confirmations	Hosts Duefree’s mailbox

Supabase, Resend, Cloudflare, Firebase Cloud Messaging and Google Workspace act as our service providers: they process the data listed only to run Duefree, on our instructions. Google Play and the App Store are not our processors: each sells the subscription in its own right, and we send it your Duefree account identifier with the purchase so that the subscription can be tied to your account. Google Sign-In, Sign in with Apple and Apple’s push service are provided by Google and Apple under their own terms. Google Fonts, Google’s photo hosting and Hugging Face receive only the request itself, including your device’s IP address, and act on their own account. Duefree does not sell your data, and shares it with nobody for advertising.

Your account data is stored in the European Union, but some of it is handled outside the UK and EU:

Supabase runs Duefree’s server functions (checking a purchase with the store, sending a notification) in the region nearest the device or service that calls them, which can be outside the UK and EU, and the company that provides the service to us, Supabase Pte. Ltd, is based in Singapore. Those transfers are covered by the standard contractual clauses and the UK Addendum in Supabase’s data processing terms.
Google is based in the United States. As our service provider, it handles the push token and the notification text (Firebase Cloud Messaging) and the emails you exchange with us (Google Workspace, which Google Cloud EMEA Limited, in Ireland, provides to us) in the United States and in other countries where it has data centres. Transfers to Google LLC in the United States are covered by its certification to the UK Extension to the EU-U.S. Data Privacy Framework, and other transfers by the safeguards in Google’s data processing terms, such as standard contractual clauses.
Resend is based in the United States and keeps its records of the emails it sends for us there. As our service provider, it handles your email address and those emails under the safeguards in its data processing terms.
Cloudflare is based in the United States and runs a worldwide network, so a visit to the website may be handled in the data centre nearest you and in the United States. As our service provider, it handles the data from those visits under the safeguards in its data processing terms.
Apple and Google, as the App Store, Google Play, the sign-in services, Apple’s push service, Google Fonts and Google’s profile photo hosting, which they run in their own right, and Hugging Face, are based in the United States and handle what they receive, listed above, under their own terms and privacy policies, not as our processors.

Why we use your data

To provide Duefree to you (the contract between us): your account, your entries, shared bills with your friends, notifications, account emails, and Plus if you buy it.
To keep it secure and fair (our legitimate interests): limiting how often requests can be made, checking purchases with the store, and stopping one purchase from being used by several accounts.
To keep purchase records after an account closes (our legitimate interests): a store can present the same purchase again at any time, through a restore, a renewal or a refund, and the record is what stops it being claimed by another account, what lets us answer a billing question with the store, and what shows when an App Store subscription moved between accounts. You can object to this, as to any processing based on our legitimate interests, by contacting us.
To answer you (our legitimate interests): when you email us with a question, a request or a complaint.

Your phone asks before Duefree can show notifications or use the camera, and you can turn either off in your phone’s settings at any time. Turning notifications off stops your phone showing them, but your device stays registered while you are signed in, so notifications are still sent to it through the services above; signing out removes the registration. A photo from your library is read only when you pick it.

What other people can see

When you split a bill or share a group, the friends and group members involved see your display name and avatar, the bills you share with them, and who has paid what. Your display name and photo can also be seen by anyone who has sent you a friend request, or to whom you have sent one, before it is accepted. Nobody can see your email address, except where your display name was taken from it (see Account details above) and you have not changed it. Members of a group also see the group’s total spent, which can include bills they are not personally on, but never those bills’ titles or the people on them.

The on-device AI, in detail

The assistant, Duefree AI, uses Google’s Gemma model, which downloads once (about 2.6 GB) and then stays on your device. When you ask it something, the app assembles a summary of your finances from the same account data described above and runs the model locally to produce an answer. Nothing you ask, and nothing it reads, is sent anywhere for processing. Any action you approve (logging an expense, splitting a bill, recording a settlement) is saved to your account exactly as if you had entered it by hand. The conversation is never uploaded and is never written to storage: it is held in memory only, and is discarded when you sign out, switch account, or close the app.

The assistant can also read a photo of a receipt. You take or choose the photo, the app shrinks it, and the model reads it on your phone to suggest an entry for you to check. The photo is never uploaded and Duefree does not save it: it is held in memory with the conversation. Your phone’s camera and photo picker may leave a temporary copy in Duefree’s own cache on the device, which never leaves your phone.

The website

Duefree’s pages set no cookies and show no ads. If Cloudflare’s security checks challenge a visit, Cloudflare may set a short-lived security cookie, which is strictly necessary and is not used to track you.

Cloudflare hosts the website. Like any web host, Cloudflare handles your device’s IP address and the details of each request (the page asked for, the time, your browser and the page you came from) to deliver the page and to protect the site from attacks, and it may keep these in its logs for a short time. We do not use them to identify anyone.

Cloudflare also counts visits for us, in aggregate: for example, how many times each page was viewed and from which countries. The count uses no cookies, and we cannot tell from it who you are.

If you email us from the website, for example to hear when Duefree launches, we use your address only for what you asked, and we will remove it whenever you ask.

How long data is kept

Your data is kept while your account exists. When you delete your account, your personal expenses and income, your budgets, your friendships and your group memberships are removed, along with the reminders you sent or received and your devices’ registrations for notifications; your sign-in and email address are deleted, and your name is replaced with the placeholder “Deleted User” on any shared bills your friends keep, so their own records stay intact. Your profile photo is deleted from our storage at the same time; if that step fails, email us and we will remove it. A group you created passes to the member who joined it first; a group with no other members is deleted, unless it still holds bills.

When the person who paid a shared bill removes it, Duefree keeps a record of the removal (the bill’s title, its amount and the shares on it), which the people who were on it can ask us for. If you were on such a bill, or removed one you paid, that record stays for the other people on it after you delete your account, also under “Deleted User”.

A record of your purchases (the store’s purchase token or transaction identifier, the plan and the dates, the record the store returned about the subscription, and any move of an App Store subscription between accounts) is kept afterwards, for the reasons under Why we use your data above, and is no longer linked to your name or email address, with two exceptions: a record of a move names both accounts, and if Plus is later bought on the same Apple ID from another Duefree account, that subscription and its purchase record move to that account.

None of these kept records has a set end date. Shared bills stay while Duefree runs, because other people’s records depend on them. Records of removed bills are not shown in the app; we keep them as the only record that a removed bill existed, in case someone on it disputes it. We plan to delete them when an account closes. Purchase records stay for the reasons above.

Emails you send us are kept until they are no longer needed to answer you, or to show what was asked and done, such as a deletion request. Resend keeps its records of the account emails it sends for a limited period.

Deletion takes effect in Duefree’s live systems immediately, apart from short-lived operational logs. Our database provider may hold short-lived operational backups of the database, which are overwritten on the provider’s own schedule; Duefree does not use them to restore individual accounts.

Request account deletion

You can delete your Duefree account and its data yourself, in the app: open Profile → Close account, at the bottom of the Profile tab, and confirm with Delete Permanently. You do not need the app to make the request: email privacy@duefree.co.uk, ask for your account to be deleted, and we will confirm with you by email, at the address on your account, before deleting it. Step-by-step help is on Delete your Duefree account.

Two things must be true before an account can be closed, and Duefree says so if they are not:

Every shared bill between you and anyone else is settled, in a group or not. A bill that was never yours can be declined with Not mine instead.
Your Duefree Plus subscription has stopped billing. A subscription that is active, in its grace period, on hold or paused must first be cancelled in Google Play or the App Store, wherever you bought it. A subscription you have already cancelled does not block deletion, even if its paid period has not run out; the remainder of that period is lost when the account goes.

If an open shared bill stops the deletion, we will tell you which bills are open. If you still want your data erased, email us: we will delete what only you can see (your own entries and budgets) straight away, and close the account once the open bills are settled or removed.

What deletion removes, and the records it keeps, are described under How long data is kept above. If you signed in with Apple, you can also stop Duefree using your Apple ID: on an iPhone, open your Apple ID settings, find Sign in with Apple, choose Duefree and stop using it.

Your rights

Because Duefree is run from the UK, UK data protection law (the UK GDPR and the Data Protection Act 2018) applies, and if you are in the EU, the EU GDPR gives you the same rights. You have the right to:

Access the data Duefree holds about you.
Correct it: most of your data you can edit directly in the app.
Delete your account and data, from your Profile (subject to the conditions above), or by asking us.
Receive a copy of your data, or object to its processing, by contacting us.
Complain to your local data protection authority (in the UK, the Information Commissioner’s Office). See How to complain below.

To exercise any of these, email privacy@duefree.co.uk. If you use Duefree in India, the section For users in India also applies to you.

How to complain

If you are unhappy with how we have handled your data, or with an answer we gave you, email privacy@duefree.co.uk and tell us what your complaint is about. We will acknowledge it within 30 days, look into it, and tell you what we found and what we have done about it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint. The ICO usually expects you to have raised the matter with us first. If you live elsewhere, you can complain to the data protection authority where you live.

For users in India

This section is for people in India. It explains how the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 apply to the personal data Duefree handles. Under that law, Aman Jaiswal is the Data Fiduciary for your data, and you are the Data Principal. Everything else in this policy applies to you too.

What we use and why. The personal data we use, what we use it for and the services that receive it are described above, under What data Duefree handles, Why we use your data and Who else receives data, and why. We use it only to run Duefree for you, for the purposes you gave it to us for.
Stopping our use of your data. You can ask us to stop at any time by closing your account in the app (Profile → Close account) or by emailing privacy@duefree.co.uk. We then stop using your data, apart from the records described under How long data is kept, for the reasons given there. If something stops your account closing, such as a shared bill that is still open, email us and we will help.
Your rights. You can ask us for a summary of the personal data we hold about you and how we use it, and for the names of those we have shared it with; ask us to correct, complete, update or erase it; and nominate another person to use these rights for you if you die or become unable to. Email us from the address on your account.
Questions and grievances. Our contact for questions about your data and for grievances is Aman Jaiswal, at privacy@duefree.co.uk. We will reply within 90 days.
The Data Protection Board of India. If you are not satisfied with our reply, you can complain to the Data Protection Board of India once it accepts complaints. The law asks you to raise the matter with us first.
Where your data is kept. Your data is stored outside India, in the European Union, and some of it is handled in the United States and the other places described under Who else receives data, and why.
If something goes wrong. If a breach of personal data affects you, we will tell you, and the Data Protection Board of India, as the law requires.

What Duefree never does. Duefree never lends money, never runs checks on you or asks for your PAN, never reads your SMS or contacts, never asks for your bank login, and never moves money. Your UPI app or your bank moves the money; Duefree keeps the record of who has settled up.

Children and age

Duefree is for adults. You must be 18 or over to use it, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has given us their data, contact us and we will remove it.

Security

Data is encrypted in transit. Your bills, splits, settlements, budgets and personal transactions are readable only by you and the people who are on them, enforced by row-level security in the database. Your display name and profile photo are deliberately visible to your friends and group members, as described above, and a profile photo you upload is served from a public address. No system is perfectly secure, but we take reasonable measures to protect your information.

Changes to this policy

If this policy changes, we will update the date at the top and, for significant changes, note them here. Continued use of Duefree after a change means you accept the updated policy.

12 October 2026: published at duefree.co.uk. This version names the developer and lists our email addresses; adds Resend (account emails), Cloudflare (the website) and Google Workspace (the mailbox where your emails to us arrive); adds sections on the website, on how to complain and for users in India; raises the minimum age from 13 to 18; and says more about what deleting an account removes and keeps, and for how long.
8 October 2026: covers the iPhone app (the App Store, Sign in with Apple and Apple’s push service), receipt photos read by the assistant, how an App Store subscription moves between accounts, why we use your data, transfers outside the UK and EU, and what happens when notifications are turned off.

Contact

Questions, requests or complaints about privacy: privacy@duefree.co.uk. Help with the app: support@duefree.co.uk. Anything else: hello@duefree.co.uk.