Privacy policy

Last updated 3 October 2026

evenpup is an app for splitting shared costs in a group and settling up with PayNow. It is run by an independent developer in Singapore ("we"). This page explains what we keep, why, and what you can do about it. Singapore's Personal Data Protection Act 2012 applies to how we handle your personal data.

What we keep

• Your account: your email address, the name you choose, and your photo if you add one. If you sign in with Google, we receive your name and email address from Google.
• Your groups: the groups you're in, their members, and what's recorded in them: expenses, amounts, currencies, dates, who paid and who shares each cost, payments, and a history of changes.
• Your PayNow number, if you add one.
• Sign-in details: if you turn on Face ID, a passkey's public key (the private part never leaves your phone). If you turn on notifications, the address your phone gives us for sending them.
• Feedback you choose to send, with basic phone details (like the system and screen size) so we can fix problems.

How it's protected

• Expense descriptions, notes and categories are encrypted on your phone before they're sent, with a key only your group's members hold. We can't read them.
• Your PayNow number is encrypted, is never shown to other members in full, and only appears inside the QR codes people use to pay you.
• Amounts, currencies, dates and names are not hidden from us, because evenpup needs them to work out who owes who.
• Everything travels over encrypted connections, and the database only lets each person see the groups they belong to.

What we use it for

Only to run evenpup: signing you in, showing your groups, working out balances, making PayNow QR codes, sending the notifications and emails you'd expect, and fixing problems. There's no advertising and no tracking, and we never sell or share your data for anyone's marketing.

Who else handles it

We use a few services to run evenpup. They handle data only to provide their service to us:

• Supabase (database, sign-in, photo storage), with the database in Singapore.
• Cloudflare, which serves the app's web pages.
• Resend, which delivers sign-in code emails.
• Google, only if you choose to sign in with Google.
• Apple, Google or your browser's push service, to deliver notifications if you turn them on.
• GitHub, which stores our weekly database backups. Each backup is encrypted with a passphrase only we hold, and kept for 90 days.

Other members of your groups see what's recorded in those groups, including your name and photo. We'd only disclose data to anyone else if the law requires it.

How long we keep it

We keep your data while you have an account. When you delete your account, your sign-in account and email address, your photos, your PayNow number, your passkeys and your notification settings are removed. Expenses and payments you shared with a group stay with that group, under the name you used there and shown as someone who has left, so everyone else's balances still add up. Copies in backups are gone within 90 days.

Your choices

• Change your name, photo and PayNow number any time in the app's You tab.
• Delete your account any time in the app (You → Delete my account).
• Ask us for a copy of your data, or to correct it, by emailing hello@evenpup.com.

Children

evenpup isn't meant for children under 13.

Changes

If we change this policy, we'll update this page and the date at the top, and tell you in the app if the change matters.

Contact

Questions or requests: hello@evenpup.com