Qwitz Privacy Policy

Last updated: October 30, 2026

Qwitz ("the app", "we", "us") is an app that helps friends and groups keep track of shared expenses and settle up. Qwitz is developed and operated by Jonatan De Vooght, an individual developer based in Belgium, who is the data controller for the personal data described here.

Contact: supportqwitz@gmail.com

This policy explains what data Qwitz processes, why, with whom it is shared, how long it is kept, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Data we process

1.1 Account and sign-in

• Guest (anonymous) account. When you first open Qwitz, an anonymous account is created automatically so you can start right away. It gets a random user ID. No name or email address is needed.
• Sign in with Apple, Sign in with Google, or email and password. If you upgrade to a full account, we receive your email address and, where you provide it, your name. With Sign in with Apple you can choose to hide your email address. In that case we only receive an Apple relay address. Passwords are handled by our authentication provider and stored only in hashed form. We never see them in plain text.
• Profile. Your display name and email address are stored in your profile. Other users can find you by entering your exact email address, or the start of it, in the "add friend" search. Your full email address is not shown to other users in group or friend lists.

1.2 Expenses, groups, friends and settlements

• Groups you create or join: name, emoji, optional cover photo, currency and settings. Members and invite or join requests are stored too.
• Friend connections between you and other users.
• Expenses: description, amount, currency, date, who paid, how it is split, optional details, and exchange-rate information for foreign currencies.
• Settlements and payment requests between members.
• Bank account details (optional). If you choose to add an IBAN or account number and the account holder's name, it is stored in your profile. It is shown to the group members you send a payment request to, so they can pay you. Qwitz does not move money and does not connect to your bank.
• Members you add manually, for example someone without the app: the name, and the email address if you enter one. Please only add people who are fine with this.

1.3 AI receipt scanning

When you scan a receipt: 1. The photo you take or pick is uploaded to a private storage area that only your account can access. 2. Our server sends the image to OpenAI (OpenAI API, vision model) to read the merchant, items, amounts and totals. 3. The result is shown to you for review, and you decide what to save as an expense.

We count how many scans you use, so we can apply the free monthly limit (3 scans per month for free users). Please do not scan documents with sensitive information other than the purchase itself. Under OpenAI's API terms, data sent through the API is not used to train their models by default. OpenAI may keep it for a limited time for abuse monitoring.

1.4 Purchases and subscriptions (Qwitz Pro)

• Qwitz Pro (monthly or yearly) is bought and billed through Apple's App Store. Apple handles your payment details. We never receive your card number.
• We use RevenueCat to check and manage your subscription status, and Superwall to show the paywall screens. These services receive an app user identifier, purchase and subscription information, and basic device and app information (for example app version, OS, country or storefront and locale). They may also record how you interact with the paywall, such as whether it was shown, dismissed or led to a purchase.

1.5 Notifications

If you allow push notifications, we store your device's push token and send notifications, for example about payment requests and reminders. Notifications are delivered through Expo's push notification service and Apple Push Notification service. We also keep in-app notification records of these events. You can turn notifications off at any time in your device settings.

1.6 Device and technical data

• Language and region settings are used to show the right language and default currency.
• The camera and photo library are accessed only when you scan a receipt or set a group photo, and only with your permission.
• Exchange rates are fetched from a public exchange-rate service (Frankfurter, api.frankfurter.app). Only the currencies and date are sent, no personal data.
• Our infrastructure providers may record standard server logs (such as IP address and timestamps) for security and operation.

1.7 Analytics

Qwitz does not include a separate analytics or advertising SDK. We do not sell your data and do not use it for targeted advertising. RevenueCat and Superwall collect the subscription and paywall data described in section 1.4.

2. Why we process your data (legal bases)

• To provide the service (Art. 6(1)(b) GDPR, performance of a contract): accounts, groups, expenses, settlements, receipt scanning, subscriptions and notifications you enable.
• Legitimate interests (Art. 6(1)(f)): security, preventing abuse, applying the scan limits, fixing bugs.
• Consent (Art. 6(1)(a)): push notifications, camera and photo access. You can withdraw consent at any time in your device settings.
• Legal obligations (Art. 6(1)(c)), for example tax or accounting rules for purchases. These are mostly handled by Apple.

3. Service providers (processors)

We share data only with providers that help us run Qwitz:

Some of these providers may process data outside the European Economic Area, for example in the United States. Where they do, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Other users see the data you share with them in groups, such as your name, expenses and, if you send a payment request, your bank details.

4. Data retention

• Account, group and expense data is kept for as long as you keep your account.
• If you delete your account, your personal data is deleted or anonymised within 30 days. Data that is part of a shared group history may remain visible to the other members in anonymised form, so their balances stay correct. Backups are overwritten in the normal backup cycle.
• Receipt images are kept with the related receipt record until you delete it or your account.
• Unused anonymous guest accounts may be deleted after a period of inactivity.
• Purchase records are kept by Apple and RevenueCat as required by law.

5. Your rights

Under the GDPR you have the right to: - access your data and get a copy of it - correct inaccurate data - delete your data, which you can do with the delete-account option in the app or by emailing us - restrict or object to processing - data portability - withdraw consent at any time

To use any of these rights, contact supportqwitz@gmail.com. You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, www.dataprotectionauthority.be) or with your local supervisory authority.

6. Children

Qwitz is not directed at children under 16, and we do not knowingly collect data from them.

7. Security

Data is sent over encrypted connections (HTTPS). Database access is restricted per user with row-level security, and receipt storage is private. No system is ever 100% secure, but we take reasonable measures to protect your data.

8. Changes

We may update this policy. If we do, we will change the "Last updated" date. If the changes are significant, we will also tell you in the app.

9. Contact

Jonatan De Vooght, Belgium. Email: supportqwitz@gmail.com