Privacy Policy

1. Information we collect

Account information

You need an account to use Qelzoro. When you sign up we collect your email address and the password you choose, and we assign your account a unique account ID. Passwords are handled by our authentication provider and stored only in hashed form, so we cannot read them. We use your email address to sign you in, verify your account, and send password-reset emails you request.

Profile information

Your profile has a display name, a unique handle, and a profile colour. By default, your handle is based on the part of your email address before the “@”. Other people use your handle to invite you to a group.

Content you add

Qelzoro stores the information you and other members enter, including:

• groups (name, emoji, currency, and settings), group memberships, and each member’s role;
• expenses (title, amount, date, category, who paid) and each person’s share;
• comments on expenses;
• settlement records, which note that one member paid another outside the app;
• group invitations you send or receive (the recipient’s handle, the role offered, status, and expiry date); and
• the names and handles of friends you add in the app.

Group photos and profile photos

Photos are optional. An owner or editor of a group can add a group photo, and you can add a profile photo to your own profile. Qelzoro uses your camera or photo library only when you choose to take or pick a photo, and iOS asks your permission first. The app crops the photo you choose and uploads only that cropped, resized copy (a square JPEG); it does not access the rest of your library, and it does not upload location or other details stored with the original photo. Photos are stored privately with our provider (see Where information is stored), never in a public folder, and we record who set or changed a group photo so reports can be reviewed.

Reports and blocks

If you report a comment, expense, person, group photo, or profile photo, we store the report: who sent it, what was reported, the group it belongs to, the reason you chose, and when. Only Qelzoro can read reports; the person you report is not told who reported them. We use reports only to review and remove content that breaks our Terms. If you block someone, we store that you blocked them so we can hide their comments from you, stop them inviting you, and stop either of you seeing the other’s profile photo. Only you can see your blocks, and you can remove one at any time in Account › Blocked people. Comments, expense titles, and group names are checked automatically for offensive language before they are saved.

Importing from Splitwise

If you import a group from a Splitwise export, the app reads the file on your iPhone and saves only the resulting group, expenses, and shares, like the ones you add yourself; the file itself is not uploaded. People in the file who are not on Qelzoro are saved by name only, inside that group: only its members can see them, and the name is deleted with the group, replaced by the person’s own profile when they join and claim it, or removed once nobody with an account is left in the group. To recognise a file imported before, we keep one-way fingerprints (hashes) of the file, of each row, and of each column name combined with the group, not the names or rows themselves.

The group’s owner can share an invite link so those people can join and claim their name. Anyone the owner shares the link with can, after signing in, see the names in that group that nobody has claimed yet, with each one’s balance and number of expenses, until everyone has joined, the link expires after 14 days, or the owner turns the link off.

Information kept only on your device

App preferences such as appearance and notification settings, and a queue of changes waiting to sync, are kept on your iPhone and are not sent to us.

Crash and diagnostic information

Qelzoro does not include any analytics, advertising, or crash-reporting software. If you have chosen to share analytics with app developers in your device settings, Apple may provide us with crash reports and usage statistics. Apple shares these in a form that does not directly identify you, and you can turn this off at any time in Settings › Privacy & Security › Analytics & Improvements.

What we do not collect

Qelzoro does not access your location or contacts. It uses your camera or photo library only when you choose to add a group or profile photo, and only the photo you pick. It does not collect payment card or bank details, and it does not use advertising identifiers or track you across other companies’ apps or websites.

2. How we use information

• to create and secure your account, sign you in, and help you reset your password;
• to sync shared groups so every member sees the same expenses, balances, and history;
• to show group members who paid, who owes what, and who made each change;
• to deliver invitations to the people you invite;
• to answer your questions when you contact us; and
• to keep Qelzoro secure, prevent misuse, and meet legal obligations.

We do not use your information for advertising or profiling, and we do not sell it. Where data-protection laws such as the GDPR apply, we rely on the need to provide the service you asked for (performing our contract with you), our legitimate interests in keeping Qelzoro secure and supporting you, and compliance with legal obligations.

3. Where information is stored

On your device

The app keeps a copy of your groups, expenses, friends, comments, and activity on your iPhone so it works quickly and offline. This copy stays on your device; Qelzoro does not sync it to iCloud.

On our servers

To share groups between members, we store your account, profile, and shared-group content with Supabase, our database and authentication provider, on servers in the United States. If you use Qelzoro from outside the United States, your information will be transferred to and processed there.

4. Who can see your information

• Members of your groups. Everyone in a shared group can see that group’s name, the members’ display names and handles and their roles, and all of the group’s expenses, shares, comments, and settlement records, including entries added by former members.
• Photos. A group photo is visible only to that group’s current members. Your profile photo is visible to you and to people who currently share a group with you, and never to someone you have blocked or who has blocked you. It is not shown to strangers, to people who only have your handle, or on the website.
• People you invite, and people who invite you. An invitation shows the group’s name and the name of the person who sent it. Someone you invite can see the group only after they accept.
• Service providers. Supabase stores and processes data on our behalf to run accounts and shared groups. Apple provides the App Store and, if you opted in, crash reports.
• When the law requires it. We may disclose information if we are legally required to, or where it is necessary to protect the safety, rights, or property of our users, the public, or Qelzoro.

We do not sell your personal information, share it for cross-context behavioural advertising, or give it to data brokers.

5. Keeping and deleting information

We keep your account and content while your account is active. Group content is shared, so it works a little differently from personal data:

• Leaving a group. If you leave or are removed from a group, you lose access to it, but the expenses, shares, and records you were part of stay in that group’s history so the other members’ balances remain correct.
• Deleting a group or an expense. When a group’s owner deletes the group, or an owner or editor deletes an expense, it is removed from our servers for every member.
• Photos. When a photo is removed or replaced, the old file is deleted. When a group is deleted, its photo files are deleted too. When your account is deleted, your profile photo files are deleted, and the photo of any group that is archived because no one else remains is deleted as well. A photo can also be removed after a report if it breaks our Terms. Copies the app keeps on a device to show photos quickly are cleared when you sign out.

Deleting your account

1. In the app, open the Account tab and tap Delete account. Your account is scheduled for deletion 30 days later, and the scheduled date is shown on the Account tab.
2. Until processing begins, you can tap Cancel scheduled deletion. Your account then stays active and nothing is deleted.
3. After the scheduled date, an automated process (which runs at least daily) permanently deletes your login (email address and password), your profile (display name, handle, colour, and profile photo), and any notification settings or device registrations stored with your account.
4. To keep other people’s balances correct, records in groups you belonged to are kept but de-identified: your place in each group is renamed “Former member”, given a random placeholder handle, and disconnected from your account. Expenses, shares, settlement records, and comments you added remain visible to the remaining members as written. If you owned a group, ownership passes to the longest-standing remaining member; if no one else remains, the group is archived.
5. Invitation records that were sent to your handle may still show that handle to the group that sent them.
6. We keep a minimal record that a deletion was requested and completed, containing the dates and a one-way hash of your account ID (not your email address or name).
7. Deleting your account does not remove the copy stored on your device. Delete the app to remove it.

Deleted information may remain in our provider’s backups for a limited period before it is overwritten. If you cannot access the app, email hello@qelzoro.com from the address on your account and we will help.

6. Your choices and rights

• See your profile: open the Account tab in the app.
• Export your data: Account › Export & privacy › Export ledger CSV saves a spreadsheet-friendly copy of the ledger stored on your device.
• Delete your account: see Deleting your account above.
• Other requests: depending on where you live (for example, the EU, the UK, or California), you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and not to be discriminated against for using these rights. Email hello@qelzoro.com and we will respond within the time required by law. We may need to confirm that the request comes from the account holder. You can also contact your local data-protection authority.

7. Security

Data travels between the app and our servers over encrypted connections. Server-side access rules limit each group’s data to its members, and passwords are stored only in hashed form. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been misused.

8. Children

Qelzoro is not directed to children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it. If the law where you live requires a higher age to consent to data processing, use Qelzoro only with permission from a parent or guardian.

9. This website

qelzoro.com does not use advertising or analytics cookies and has no sign-up forms. If you email us, we use your email address and message only to reply. The services that host and deliver this website may process standard technical information, such as your IP address and browser type, to deliver pages and keep the site secure.

10. Changes and contact

If we change this policy, we will update this page and the “Last updated” date. If a change materially affects how we handle your information, we will also tell you in the app or by email before it takes effect.

Qelzoro is operated by Harish Naidu Gaddam, an individual developer based in Texas, USA. Questions or requests about privacy: hello@qelzoro.com. See also our Terms of Use and Support page.