Privacy Policy

1. What we collect

We collect only what we need to run the service:

• Account information. Your email address, display name, and (if you sign in with Google) the basic profile your provider returns.
• Content you create. Trips, families, participants, expenses, meals, packing lists, and the other records you enter while planning a trip.
• Organization membership. Which organization(s) you belong to and your role inside each (admin, author, member).
• Technical data. Server logs containing IP address, user agent, and request paths, retained for operational and security purposes.

We do not collect payment-card numbers directly. If we add paid plans in the future, payment information will be handled by our payment processor (Stripe).

2. How we use it

• To provide the planning, splitting, and reporting features of the service.
• To authenticate you and keep your account secure.
• To respond to support requests you send to us.
• To detect abuse, debug issues, and maintain the service.

We do not sell your personal information. We do not use your trip content to train machine-learning models. We do not show advertising.

3. Who we share it with

We share data only with the third-party service providers that make Divvy the Cost possible. Each handles data under its own terms and privacy policy:

• Google Firebase (Authentication, Firestore database, Hosting) — infrastructure that stores your account and trip data.
• WeatherAPI.com and similar weather providers — when you view the weather tab, we request forecast data for the trip's location. No personal data is sent.
• Stripe (if and when paid plans launch) — payment processing.
• Resend (if and when transactional email launches) — to send invite and notification emails on your behalf.

We also share trip data with the people you explicitly invite to a trip or organization. Their access is governed by the role you assign them.

We may disclose information if required by law, valid legal process, or to protect the rights and safety of users or the service.

4. How long we keep it

We keep your account and trip data for as long as your account is active. Server logs are retained for up to 90 days. If you delete your account, we will delete the records you own within 30 days, except where we are required to keep them for legal or accounting reasons.

5. Your choices

• Access and correction. You can view and edit your account profile and trip data inside the app at any time.
• Export. Email us at troy@burdett.us and we will provide a JSON export of the data you own.
• Deletion. Email us at troy@burdett.us to request deletion of your account and the trips you own. Trips you only participate in (but do not own) belong to the trip's owner; ask them to delete that data.

6. Security

All traffic to Divvy the Cost is encrypted in transit via HTTPS. Authentication is handled by Firebase Authentication, and access to your trip data is gated by server-side Firestore security rules. No system is perfectly secure; if we discover a breach that materially affects you, we will notify you.

7. Children

Divvy the Cost is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International users

Divvy the Cost is operated from the United States and stores data on Google Cloud infrastructure. By using the service you understand that your information will be processed in the United States, which may have data-protection laws that differ from those in your country.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced inside the app or by email. Continued use of Divvy the Cost after a change means you accept the updated policy.

10. Contact

Questions about this Privacy Policy? Email troy@burdett.us.