plain language · updated 2026-05-23
PRIVACY
What we collect
When you create a bill, Divvio stores:
- The receipt photo you uploaded
- The parsed line items, prices, tax, tip, subtotal, total
- Restaurant info from the receipt (name, address, phone, date & time, table number, check number)
- Payment metadata if printed (cash / credit / debit / mobile, the card brand, and the last 4 digits of the card — never the full number)
- Server name if printed on the receipt
- The names of diners who joined the bill
- Who claimed which items, and who's been marked paid
- The organizer's display name and Interac contact (if filled in)
- Inferred attributes we compute from the above — cuisine type, price tier, province
No accounts. No login required.
What we do with it
To make the app work for you— render your bill, compute everyone's share, sync claims across phones, generate Interac mailto links.
To build product features— we use bill data (especially restaurant + cuisine + item prices) to power features like “similar restaurants nearby,” menu pricing comparisons, and search-friendly restaurant pages.
For aggregated insights — we may compute and share aggregated, anonymizedstatistics (e.g., “average pizza price in downtown Toronto,” “typical tip percentage on dinner bills”) with partners or publish them publicly. These never include your name, your bill, or anyone's individual data.
For advertising— the app may show contextual ads or affiliate links (e.g., “book this restaurant on OpenTable” or “order from a similar spot via DoorDash”). Ad targeting uses non-identifying signals like cuisine type and city. We do not share your individual bill data with advertisers.
What we don't do
- Sell or share your individual bills with anyone (full bills are yours alone)
- Store full credit card numbers (we keep at most the last 4 digits + card brand)
Third parties
Three services see Divvio data:
- Supabase hosts the database and receipt photos in Canada (region
ca-central-1). They process data on our behalf. - Anthropicsees the receipt photo when we ask Claude (the AI) to extract line items + restaurant details. Anthropic's API policy: inputs are not used to train models.
- Vercelhosts the website itself. They see the standard HTTP request logs (IP, user-agent) but not bill content beyond what's served from the database.
If we add advertising partners, they'll be disclosed here. We don't share with Interac or your bank — payments happen entirely inside your banking app.
How long we keep it
Receipt photos:deleted 30 days after the bill's last activity, regardless of whether the bill is locked.
Bill data (items, claims, diner names): deleted 30 days after the bill is locked, or 90 days after the last activity if never locked.
Aggregated statistics(e.g., menu price data points) may be retained indefinitely — they don't include identifying info.
Cookies & local storage
Today, Divvio itself doesn't set first-party cookies. We usesessionStorageto remember you're the organizer of a bill (per browser tab) and localStorage to remember which diner you are on a given bill (per browser). Both wipe when you clear your browser data.
Third-party advertising and measurement partners (when added) may set their own cookies. We'll keep this section updated as that evolves.
Your rights
Depending on where you live, you may have privacy rights under your local law. Regardless of jurisdiction, you can email us to:
- Get a copy of bill data we hold (you'll need to identify the specific bill ID)
- Have a specific bill deleted before its auto-expiry
- Opt out of future bill data being used in aggregated stats (past contributions to aggregates can't reliably be attributed back)
Divvio is operated from Canada. Your bill data is stored on Supabase servers in Canada (ca-central-1); the website itself is served from Vercel's global edge network. If you're using Divvio from outside Canada, you're consenting to your data being processed in these locations.
Questions
Email hello@divvio.app. We generally reply within a few days.
Changes
If we materially change this policy, we'll bump the “updated” date at the top and post a notice on the landing page for at least 7 days.