HalvePrivacy Policy
Halve is an app for splitting shared costs and keeping a group budget. It is made and run by Timothy Leong, an individual developer in Singapore (“I”, “me”). This policy explains what data Halve collects, why, who it is shared with, and the choices you have. It is written to meet Singapore’s Personal Data Protection Act 2012 (PDPA).
The short version. Halve collects only what it needs to run: your email, your name, and the groups and expenses you and your friends enter. There are no ads, no analytics and no tracking, and your data is never sold. You can delete your account in the app at any time.
What Halve collects
| Data | What it is | Why |
|---|---|---|
| Account details | Your email address, your password (stored only as a secure hash, never readable) and the display name you choose. | To create your account, sign you in, send sign-in and reset codes, and show your name to people in your groups. |
| Group content | Group names, currency, budget and invite code; expenses (title, amount, date, category, optional notes, who paid and how it was split); repayments; and the group’s activity log. | This is what the app does: it works out who owes whom and tracks spending against a budget. |
| Names of other people | Group owners can add people who are not on the app yet, by name only (“placeholders”). | So a group can include everyone before they join. A placeholder is just a name: no email or contact details. |
| Technical data | Sign-in records kept by the server, such as IP address, device type and time of sign-in. | To keep accounts secure and prevent abuse, for example by limiting repeated sign-in attempts. |
| Crash reports | If the app crashes, a report of the error, the app version and the device model and operating system. | To find and fix bugs. Crash reports do not include your name, email, or any group or expense content. |
Halve does not collect your contacts, location, photos, or bank or card details, and it does not connect to your bank. Amounts in Halve are only what people type in; no money moves through the app.
On your phone, Halve keeps your sign-in session encrypted, so you stay signed in. Nothing else is stored on the device beyond what the app needs to display.
Who can see your data
- People in your groups see your display name and everything entered in that group: its expenses, repayments, balances, budget and activity log. Only members of a group can see it; this is enforced on the server.
- Nobody else in the app can see your email address.
- Me, as the operator, only when needed to run the service, fix a problem you report, or meet a legal obligation.
Service providers
Halve uses a small number of providers to run. They process data only on my instructions and only to provide their service:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and daily backups: stores your account and group data. | Singapore |
| Resend | Sends sign-in, confirmation and password reset emails. | United States |
| Sentry | Receives crash reports. | United States |
| Apple and Google | Distribute the app through their stores, under their own privacy policies. | Global |
Where data goes outside Singapore, I rely on these providers’ contractual commitments to protect it to a standard comparable to the PDPA.
Halve never sells or rents personal data, and never shares it for advertising. I would only disclose data if required by law.
How long data is kept
- While you have an account, your data is kept so the app works.
- Deleted expenses are hidden from balances but remain in the group’s activity log for as long as the group exists, so everyone can see what changed.
- When a group is deleted by its owner, all of its content is deleted.
- When you delete your account, see below.
- Backups. Supabase takes a copy of the database once a day for disaster recovery and deletes each copy automatically after 7 days, so deleted data is gone from backups within 7 days.
Deleting your account
You can delete your account in the app: Profile → Delete account. When you do:
- Your email address, password and name are permanently deleted.
- Groups where you are the only person on the app are deleted, with all their content.
- In groups that carry on, you are shown as “Deleted user”. The expenses and repayments you were part of stay, because they are part of other people’s records and balances. They are no longer linked to anything that identifies you.
Before deleting, the app asks you to settle any outstanding balance and to hand over ownership of groups that others still use. If you can’t use the app, you can ask me to delete your account instead; see Delete your Halve account.
Your rights
Under the PDPA you can:
- Access the personal data Halve holds about you, and ask how it has been used or disclosed in the past year.
- Correct it. You can change your name in the app at any time.
- Withdraw consent, which in practice means deleting your account, as Halve can’t work without the data above.
To make a request, email [email protected] from the address on your account. I’ll reply within 30 days. If I can’t meet that, I’ll tell you when I can.
Security
All data travels over encrypted connections (HTTPS). Passwords are stored only as secure hashes. Access to group data is checked on the server for every request, so one group’s members can never read another group’s data. If a data breach occurs that is likely to harm you, I will notify you and the Personal Data Protection Commission as the PDPA requires.
Children
Halve is not intended for children under 13, and I don’t knowingly collect their data. If you believe a child has created an account, email [email protected] and I’ll delete it.
Changes to this policy
If this policy changes, the new version will be posted here with a new effective date. If the change is significant, the app will tell you before it takes effect.
Contact
Timothy Leong, the developer of Halve, is responsible for your data and acts as its data protection officer. Email [email protected] with any question about your data.