Privacy Policy

Information handled

The app stores bill history, participant names, preferences, and tab access tokens on your device. The web viewer stores some participant details in browser local storage. Billington has no user accounts.

Bills and tabs you choose to share are sent to Billington's online service. This includes names, receipt items and amounts, participant shares, payment status, optional payment handles, and tab member names. People with a valid share link may view or update its content. Treat the link like a private key.

Receipt scans and service providers

If you use receipt scanning, the image is sent to Billington's API and Anthropic's Claude API to extract text and amounts. This code path does not save the image in Billington's database. Anthropic normally deletes API inputs and outputs within 30 days, subject to exceptions in its retention terms.

Currency conversion may send currency codes to Frankfurter or, when configured, ExchangeRate-API. The API logs IP address, request path, response status, and timing. Slow database query logs may include SQL statements and values. Infrastructure providers process technical data needed to host the service.

Billington uses Render for its API and Vercel for its web viewer. See Render's privacy policy and Vercel's privacy notice. Payment providers apply their own policies when you follow payment links.

Use, retention, and deletion

We use information to create and share bills and tabs, calculate splits, remember local preferences, prevent receipt-scanning abuse, and operate the service. We do not sell bill or tab content.

Shared bills and tabs remain online until removed by service operators. There is no in-app deletion control, and share tokens do not currently expire automatically. Clearing app data or uninstalling removes local data only; browser storage can be cleared in browser settings.

To ask about or request removal of shared information, email checkmateapp@duck.com with the bill or tab link. We may need to verify control before acting. Backups and provider logs may persist under their retention practices.

Changes and contact

We may update this policy as the service changes. The effective date above identifies the latest version. Privacy questions: checkmateapp@duck.com.