Privacy policy

Version 1.0 · effective from 25 September 2026

In short

Evenly is free. There are no ads, we don’t sell data and we don’t track you outside the app. Our server is in the European Union. We don’t store receipt photos on our side: we send them to an artificial intelligence provider only to read the items on the bill, and we ask for your consent before doing so for the first time. You can delete your account yourself, from inside the app.

Who is responsible for your data

The controller is DLMT Tomasz Dołmat, Polish tax ID (NIP) 5273237554. Evenly is made under the Tomil brand; the brand is not a separate entity, and responsibility lies with the business named above. Contact for data matters: tomasz@dolm.at. We have not appointed a data protection officer, as one is not required at this scale.

What data we collect

Account: your email address and the username you choose yourself. We store your password only as a hash, so it cannot be read. Optionally a colour, default currency and gender, which is used only to inflect interface texts.

Sign in with Google or Apple: if you choose this option, we store from Google or Apple only your email address, the information that it is verified, your first name and a permanent account identifier that lets us recognise you the next time you sign in. We don’t receive your password or access to your email, contacts or files. Apple lets you hide your real address: in that case we only see Apple’s relay address. We use data from Google solely to sign you in and create your account, in line with the Google API Services User Data Policy, including the Limited Use requirements. We don’t share it with anyone and don’t use it for advertising or to train artificial intelligence models.

Expenses: what you enter in a group: titles, amounts, dates, the split between people and the names of participants.

Receipt photos: only when you use the scan. Details below.

Technical data: your IP address, to enforce limits and protect against abuse (password guessing, mass account creation), and a scan log: who ran the scan, how long it took, how much it cost, whether it succeeded and whether the result needed corrections. The content of the receipt itself does not go into the log.

Device storage: we keep your sign-in token and your settings (theme, recent groups) in the browser’s or the app’s storage. We don’t use cookies for tracking or advertising.

Why and on what legal basis

We process your account, groups and expenses to provide the service you ask for (Art. 6(1)(b) GDPR, performance of a contract). Scan limits, the technical log and protection against abuse are based on our legitimate interest in keeping the service running and financially sustainable (Art. 6(1)(f)). We don’t collect consent within the meaning of the GDPR; a separate matter is the consent to send a photo to the artificial intelligence provider, described below, and the system camera permission, which you can revoke in your phone settings.

An email address and a name are required to create an account, and a password when you don’t sign in with Google or Apple: without them you can’t use the app. Gender, colour and default currency are optional, and leaving them out blocks nothing.

Receipt scan step by step

The photo you choose is first downsized on your device, then sent to our server and on to OpenAI Ireland Ltd. to read the items on the bill. Before we do this for the first time, we ask for your consent. You can refuse and enter the items manually; you can also withdraw it later in your account settings.

After reading it, we don’t store the photo on our server. All that remains are the items and amounts you see in the app, plus a cryptographic hash of the photo that lets us recognise when the same file is sent again; the image cannot be reconstructed from this hash.

The artificial intelligence provider may retain submitted content for up to 30 days for abuse monitoring, in line with the data processing agreement we have with it. We do not allow your data to be used to train models.

Don’t send photos that reveal health information or other special categories of data (for example a pharmacy receipt showing a medicine name). We don’t knowingly process such data and don’t build any profiles based on it.

If someone added you to a group

Settling up requires the names of all participants, including those without an account. They are entered by the person who creates the group, and the legal basis is that person’s legitimate interest in settling shared expenses (Art. 6(1)(f) GDPR). In that case we store only the name and the assigned amounts. If you don’t want your name there, write to tomasz@dolm.at.

A group link works like a key: anyone who has it can see the participants’ names and amounts. Don’t publish it anywhere strangers can see it.

Who processes data on our behalf

OpenAI Ireland Ltd. reads the items from the receipt photo. OVH SAS provides the server that runs the app and the database (data centre in Gravelines, France). We have a data processing agreement with each of them. These entities protect data at a level equal to the one described in this policy. The list will change along with the app and will always be up to date on this page.

Transfers outside the European Economic Area

The app’s server is in the European Union. Content sent for receipt reading may be processed outside the European Economic Area; the basis for this is the standard contractual clauses approved by the European Commission, included in the data processing agreement with the provider. We will provide a copy of the safeguards on request sent to tomasz@dolm.at.

How long we keep data

We keep account data, groups and expenses until the account is deleted. Receipt photos are not stored. We keep the scan log for 12 months. The IP address and the photo hash are used only to count limits and are gone within a day at the latest. Backups are overwritten after 30 days, so deleted data disappears from them within that period at the latest.

How we protect data

Connections to the app are encrypted (HTTPS). Passwords are stored only as hashes. Only the administrator has access to the database, and backups are secured.

Your rights

You have the right to access your data, to rectify it, to have it erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. You can withdraw your consent to the scan at any time, without affecting what happened before. Write to tomasz@dolm.at; we reply within 30 days at the latest.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

Deleting your account

In the app: Account, then Delete account. Without the app, you can do it in a browser: sign in at evenly.me and go to https://evenly.me/account/delete. If you don’t remember your password, write to tomasz@dolm.at from the address linked to your account and we will delete it for you.

Deleting your account erases your sign-in data, settings and quick receipt history. Shared expenses in groups remain, together with your name, amounts and dates, because they are also other participants’ data and without them their settlement would no longer add up. They are no longer linked to your account. If you also want your name removed from past expenses, write to tomasz@dolm.at.

What we don’t do

We don’t show ads. We don’t sell or share data for marketing purposes. We don’t track you across apps and websites. We don’t profile you or make automated decisions about you that have legal effects: the model that reads receipts copies numbers and names, doesn’t assess anything about you, and you correct the result manually anyway.

App permissions

Camera and photo library: only to take or choose a receipt photo. You can revoke the permission in your phone settings and replace the scan by entering items manually.

Children

The app is not intended for people under 16 and we don’t knowingly collect their data. If you believe a child has created an account, write to tomasz@dolm.at and we will delete it.

Changes

We will announce significant changes in the app before they take effect. The version and effective date are at the top of this page; previous versions are available on request.