Privacy policy

1. Who's responsible for your data

Divall by IN-ADS Corp. is a brand of IN-ADS Corp., located at 888 Biscayne Blvd, Miami, FL 33132, United States. IN-ADS Corp. is responsible for your account data and for what we store so Divall works. For any question about your data, write to us at hello@inads.ai.

This policy follows the California privacy law (CCPA, as amended by the CPRA) and the European General Data Protection Regulation (GDPR). What's specific to each is in section 6.

We use your data because:

• It's needed to provide the service you ask for: your account, your shared accounts, receipt reading, the email report and your plan.
• The law requires it, for example if an authority asks us for information.
• We have a legitimate interest in keeping Divall safe and stopping abuse (like the photo-reading limits), and in knowing how it's used so we can improve it (usage measurement), without overriding your rights.
• You authorize it, for example when you choose to send a photo or a PDF to be read.

2. What data we use and why

Your account

• Email. To sign in (we send you a code each time) and to send you what you ask for, like the monthly report. It's stored separately from your profile and other people don't see it. It can't be changed from the app.
• Name and @username. This is what the people you share accounts with see. With Let people find me by @username on (the default), anyone with the app can search for you and add you; if you turn it off, people can only add you with your QR code.
• Your plan. Whether it's Free or Divall Pro, whether you pay monthly or yearly, when it ends, who charges it (the App Store or Google Play) and whether you've already used the free trial.
• Profile photo. It stays on your device: we don't upload it to the server.

Shared accounts

Dinner, Party, Vacation, Family, Gifts and Events. When you sign in, your accounts are stored on our server so each member can see them and they stay up to date on all their devices. An account includes its name and currency; the participants with the name they were given (including people who don't have the app); the expenses with their items, amounts, categories and descriptions; who paid; tips, taxes and discounts; the splitting rules and any payments between you that get logged. In Family, also the recurring costs and budgets, and in Gifts and Events, the list of what to buy or bring.

• Who sees it: only its members. A unit's internal agreement (for example, 70/30 for a couple) is only visible to the members of that unit.
• How long: while the account is open. Once it's closed, it's deleted from the server when all its members have downloaded it to their phones, or after 48 hours, whichever comes first. In Family, if the account's admin has Divall Pro, the expenses and payments of each closed month are kept on the server for up to 5 years, so the account can be used as a history, and then deleted automatically. If the admin doesn't have Divall Pro, or leaves it, they're deleted from the server 48 hours after closing and from then on live only on the phones and browsers that already had them: the copy on your phone isn't deleted. At any time, with or without Divall Pro, you can download the Family's history as a PDF or Excel file, so you can keep it before it's deleted from the server and upload it again later with Divall Pro.
• Copy for reopening (Divall Pro): if the account's admin has Divall Pro, when it's closed the app keeps a text copy of the account on the server so it can be reopened for a month. The admin and the former members can download it. It's deleted 30 days after the first closing.
• Your devices: to know when everyone has downloaded a closed account, we keep an internal identifier for each device (a random code, not the phone's name) and the last time it connected to that account.
• Simultaneous edits: if two people change the same thing, the latest change wins and we keep the previous one to let them know. It's deleted with the account.

Divall doesn't move money: when you mark that someone paid, it's just a note.

DivMe, your personal month

• It's stored on your phone, in an encrypted database whose key lives in the system keychain (Keychain on iPhone, Keystore on Android).
• On the Free plan, it isn't uploaded to our server: the server doesn't accept it. It leaves your phone only when you ask: when reading a photo or a PDF, when sending you the report by email, or when exporting or backing up your month, and in those last two cases you choose where it goes.
• With Divall Pro, it's also stored on our server (Supabase, in the United States) so you see the same thing on your phone and on the web, and so it downloads in full when you sign in on another device. This includes your transactions, categories, accounts, recurring costs, cards and loans, goals, budgets, rules and settings. What you delete stays on the server as an empty marker so the deletion reaches your other devices. Settings that belong to each device aren't uploaded.
• Who can see it on the server: only your account can read and write it, and signing in requires the code sent to your email. It isn't end-to-end encrypted: whoever administers the server could see it (section 3).
• If you leave Divall Pro, the server copy is deleted within 10 minutes and your phone keeps everything. If you delete your account, it's deleted with it.
• No one in your shared accounts sees your DivMe. Your share of each account is calculated on your device (your phone or your browser) from the shared accounts; with Divall Pro, the server only keeps how you categorize your share and which accounts you hide in DivMe.
• Export: the CSV and PDF are put together on your phone.
• Encrypted backup: a file encrypted with a password you choose. The password never leaves your phone and we don't keep it: without it no one can open the backup, not even Divall. You save it wherever you want (iCloud Drive, Google Drive or another service), and that service's terms apply there.

Receipt photos and PDFs (Divall Pro)

When you read a receipt, a utility bill, a statement or, in the web history, a photo of a list of expenses, the image or PDF travels to our server and from there to Anthropic, which reads it with artificial intelligence.

• What's read: from a receipt, the products with their quantity and price, the subtotal, taxes, tip, service charge, discount, total and currency. From a utility bill, the type of service (electricity, water, gas, internet, mobile or other), the amount due and the due date. From a statement, each transaction with its day, description, amount and whether it's a charge or a credit.
• What isn't read: never the business's details (name, tax ID, address, phone, website) or yours (name, ID number, card, account number, email). Those fields don't even exist in what we ask for, and long numbers, cards, ID abbreviations, emails and web addresses are removed from each description. People's names don't have a fixed format: for those we rely on the instruction we give, so one could slip through.
• The image isn't stored: it lives in the server's memory while it's read and is released when done. It doesn't go to disk, the database or the logs, and neither does the text that was read. On the phone, the temporary copy is deleted as soon as it's read; the photos in your gallery aren't touched.
• You confirm: what was read comes back to your phone for you to review. Nothing is added without your confirmation.
• What we do keep from each reading: the date, whether it was in an account or in DivMe, technical data (size and cost of the reading) and whether it was the expected document. Without the image or its text. It's used to count your monthly allowance and to stop abuse.
• CSV files on the phone: they're read on your phone, without artificial intelligence and without going through the server. On the web, history files (CSV included) are read with artificial intelligence: see Your history from a file.

Anthropic receives the image only to read it. With us it has zero data retention: it doesn't keep the image or what was read after responding.

Your history from a file (Divall Pro, on the web)

On the web you can load your spending history from an Excel (.xlsx), CSV, text (.txt) or PDF file (up to 40 pages and 10 MB). All of them are read with artificial intelligence, by Anthropic.

• What's sent: Excel, CSV and text files are opened in your browser. The file name and its rows go to our server and from there to Anthropic: first a sample of each sheet, then all of them, in parts. A PDF goes whole to our server, which sends it to Anthropic 4 pages at a time. Your currency, your language and Divall's list of categories go along with the content.
• Other people's data: a history usually includes the names of who paid in your family or on a trip, and how much. They're sent to be read, and we use them to build the accounts you import, with those people added by name. Only upload it if you can share that data.
• The file isn't stored: it lives in the server's memory while it's read and is let go when done. It doesn't go to disk, to the database or to the logs. Anthropic has zero data retention with us.
• What we do keep from each reading: the date, the step it was on, how many rows or pages it read, technical data (tokens and cost) and whether it worked, without the file, its name or its content. It's used to count your quota and prevent abuse, and it's deleted after 30 days.
• A photo of a list: you can also upload a photo of a list of expenses. It's read just like a receipt (see Receipt photos and PDFs), counts as 1 reading, and each item becomes a DivMe expense.
• You confirm: before reading you see what each sheet contains and can remove the ones you don't want. Afterwards you see everything that was read to review it, and nothing is created until you confirm the import.
• What's created: what's read is stored like the rest of your data: DivMe transactions and new Family or Vacation accounts, open; Families with their past months closed, and trips settled. Family expenses from more than 5 years ago aren't imported.

Emails

• Sign-in codes: generated by our sign-in server (Supabase) and sent to your email by Resend.
• Monthly report (Divall Pro): your phone puts together the PDF and CSV; the server forwards them with Resend to your account's email, which is the only possible destination, and lets them go. We don't keep the report, the files or the email's text. We only note that it was sent (your account, the month and the time) for the limit of 5 sends a day, and delete that after 30 days.

Payments

• Divall Pro is charged only by the App Store (Apple) or Google Play (Google), with your store account, from the phone app. There are no charges on the web or on divall.app. We don't see your payment details: only whether your plan is active and until when.
• Gift codes: if you redeem one, we note who redeemed it and when. Failed attempts are logged to stop anyone trying codes at random.

Technical and security data

• Action log: for example, that an account was closed, reopened or handed over, or that a Divall account was deleted. Without the content of your expenses. Anything carrying your identifier is deleted at most 30 days after you delete your account or ask us to delete your data.
• Server logs: our database service (Supabase) logs data from each connection, like the IP address and time, for operation and security. They're kept for 30 days at most.

The web version, this site and usage measurement

• The app in your browser keeps your session and what it needs to show your accounts and your DivMe in the browser's storage, so you don't have to sign in every time. In the browser that data isn't encrypted, unlike on your phone: use the web on a computer you trust and sign out when you're done. Signing out from the menu deletes everything from that browser; with Divall Pro, anything pending is uploaded first, so your DivMe stays in your account and comes back when you sign in.
• Cookies: divall.app and the app in your browser use Divall's own cookies to remember your session and preferences and to measure usage. We don't use advertising, social media or other companies' cookies.
• Usage measurement: on divall.app, in the app and on the web we note which pages and screens are viewed, which actions are used and for how long, plus the system, its version, and the brand and model of the phone or the browser. Never amounts, names, descriptions or any text of yours, nor the name you gave your phone.
• Where it goes: to Divall's own dashboard, on Cloudflare, which only the Divall team can access. We don't use other companies' analytics tools or share it for advertising: it's only used to improve Divall with real usage.
• How to turn it off: in the app, in Profile → Usage data; when it's off, nothing is noted or sent. On divall.app, in Cookies, at the bottom of every page; you can also delete or block its cookies in your browser. In the European Union, the United Kingdom and Switzerland we don't measure anything on the site until you accept.
• divall.app is served by Cloudflare, which processes technical data from each visit (like the IP address) to deliver and protect it. Fonts and images come from the same domain.
• To show the cookie notice where it's required and prices in euros in Europe, divall.app looks at the country of your connection. It isn't stored.

3. Who sees your data

• You: everything that's yours.
• The members of a shared account: what's in that account, your name and your @username. Never your email or your DivMe.
• Anyone with the app: can find you by your @username if you have Let people find me by @username on.
• Divall: what's on the server isn't end-to-end encrypted, so whoever administers it could see it. We only use it to make the app work, to handle what you ask us and to comply with the law.
• The infrastructure services we use, only for the task we ask of them (next section).

We don't sell your data or share it for advertising. We'd only hand it over to an authority if the law requires us to.

4. Infrastructure services we use

Divall runs on these external services, which we use to store data, read receipts and history files, send emails, take payments and serve this site:

Supabase

Database, sign-in and server functions. Servers in the United States (Northern Virginia).

Anthropic

Reading photos, PDFs and history files with artificial intelligence (Divall Pro).

Resend

Sending sign-in codes and the monthly report.

Apple and Google

Charging the plan on the phone (App Store and Google Play).

Cloudflare

Serves this site (divall.app) and Divall's own dashboard with usage measurement.

Each one handles data under its own terms and privacy policy. IN-ADS Corp. is in the United States and these services belong to companies there, so your data is processed in the United States even if you live in another country.

5. How long we keep each thing

Email, name, @username and plan

Until you delete your account.

Open shared account

While it's open.

Closed shared account

Up to 48 hours after closing it, or sooner if all its members have already downloaded it.

Closed Family month, with Divall Pro

Up to 5 years after closing.

Closed Family month, without Divall Pro

48 hours after closing.

Copy for reopening (Pro)

30 days from the first closing.

DivMe on the server (Pro)

While you have Divall Pro. If you leave it, it's deleted within 10 minutes; if you delete your account, it's deleted with it.

Photos, PDFs and history files

Not stored: only while they're read.

Log of each reading

Until you delete your account; those made in shared accounts, 30 days at most (without the image or its text).

Log of each history reading

30 days (without the file or its content).

Report sends

30 days.

Usage measurement

Each event, 13 months; each session's summary (when it started and how long it lasted), 25 months. After that, only daily totals remain (how many visits and taps there were per page, system, browser and device type), which can't be linked to any person, and we keep them indefinitely.

Gift code attempts

Until you delete your account.

Action log

At most 30 days after you delete your account or ask us to delete your data.

Server logs

30 days at most.

What's on your phone

Until you delete your account, sign in with another account on that phone or uninstall the app.

6. Your rights

You have the right to know whether we process your data, to ask for a copy (including in a format you can take to another service), to correct it, to delete it, to object or ask us to limit its use, and to withdraw your consent.

• Correct: your name and @username can be changed in Profile. Your email can't be changed from the app: write to us.
• Delete: in Profile → Delete my account. We explain what's deleted and what isn't in Delete your account.
• Ask for a copy of what we keep about you on the server: write to us.
• Not be found: turn off Let people find me by @username in Profile.

For all of this, write to us at hello@inads.ai from your account's email: before replying we'll ask you to confirm it's you. We handle deletion requests in less than 48 hours; the rest, within the legal deadline (45 days under the CCPA and one month under the GDPR).

If you live in California (CCPA)

Under the California privacy law (CCPA, as amended by the CPRA), you have the right to know what data of yours we collect, where it comes from, what we use it for and who we give it to; to ask us to delete or correct it; and not to be treated differently for exercising these rights. You or someone you authorize can make the request.

What we collect

Identifiers (email, name, @username, internal account and device identifiers, and the IP address in server logs); commercial information (your plan and subscription); usage information (pages, screens and actions, and the type of phone or browser); what you log in Divall; and the photos or PDFs you send to be read, which aren't stored.

Where it comes from

From you, from your device and from the people who add you to a shared account, who can type your name.

What for

To provide the service, keep it safe and comply with the law (section 1).

Who we give it to

Only the infrastructure services in section 4, for the task we ask of them.

Sale and advertising

We don't sell or share personal data, including that of minors under 16, or use it for advertising.

Sensitive data

We don't collect ID numbers, card details, precise location or biometric data.

How long

What section 5 says.

If you live in the European Economic Area or the United Kingdom (GDPR)

IN-ADS Corp. is the controller of your data. We use it on the bases in section 1 (providing the service, complying with the law, our legitimate interest and your consent) and you have the rights above: access, a copy in a format you can take to another service, correction, deletion, objection, restriction and withdrawing your consent at any time. Your data is processed in the United States. If you believe we don't handle it properly, you can file a complaint with your country's data protection authority.

7. Security

• Everything travels encrypted (HTTPS).
• Each person can only read their own accounts: this is enforced by rules in the database, not just the app.
• The secret keys of the services we use (such as Anthropic and Resend) live only on the server. The app never sees them.
• On the phone, the database is encrypted and the session is stored in the system keychain.
• In the browser, what's stored isn't encrypted; it's deleted when you sign out from the menu.
• On the server, each person can only read and write their own data (per-person access rules in the database). What's there isn't end-to-end encrypted.
• Invitation links and gift codes are stored as a fingerprint (hash), not as they are.

No system is foolproof. If a security incident puts your data at risk, or if the law requires it, we'll do what's reasonable to let you know by email or with a notice in the app or on this site.

8. Minors

Divall isn't meant for anyone under 18 and we don't knowingly collect data from minors. If we learn that a minor gave us their data, we delete it and close their account. If you think this happened, write to us.

9. Changes to this policy

If we change this policy, we post the new version here with its date. If the change is important, we'll let you know as the law requires, by email or in the app. Without your consent, we'll never use your data in a way that's very different from what this policy says.

10. Contact

IN-ADS Corp. · 888 Biscayne Blvd, Miami, FL 33132, United States · hello@inads.ai

See also the Terms of use and how to delete your account.