Privacy
Last updated 5 October 2026.
Cleaver splits bills between friends. To do that it has to keep a record of who paid for what and who owes whom. This page says what it stores, where, who else touches it, and how to get it deleted. It is written plainly on purpose.
What it stores about you
- Your account: the email address you sign in with, or the one Google gives us when you sign in with Google, and a display name you choose. If you upload a profile picture, that too.
- Your groups: which groups you are in, and who else is in them.
- Receipts: the merchant, date, items and amounts of bills you or your group members add, who paid, and which items each person claimed. If a receipt was added from a photo, the photo.
- What was on the receipt: for each item, the dish behind its name, whether it has meat or fish in it, and which course it was, as read off the receipt. The claim screen uses what you have claimed before to suggest which unclaimed items were probably yours; a suggestion is only ever a faded face you can tap or ignore, and any group can turn suggestions off in its settings.
- People who aren't on Cleaver, when somebody adds them to a receipt as a guest: the name typed for them, what they claimed, and which member of the group covers their share. A guest has no account here, so we hold no email, phone number or anything else about them, and send them nothing. Taking a guest off a receipt deletes their name and claims.
- Payments between people: amounts, dates and notes of settlements recorded in your groups.
- A history of changes: each time a receipt, a claim, a payment or a group's membership changes, who changed it, when, and what it was before and after. The people who can see the receipt can see its history, so a change that moves money onto somebody is never invisible to them. It is kept as long as the group is.
- Payment handles, only if you enter them: a Monzo.me, Revolut.me or PayPal.me name, so friends can pay you with one tap. We never hold a card number, a sort code or a bank balance.
- History imported from Splitwise, only if somebody imports it: the expenses and payments from a Splitwise group's export, with each person's name as Splitwise had it and their share of each. People in that export who aren't on Clever Cleaver appear as a name and nothing else. A balance carried over from it becomes money here only once everybody named on it has agreed.
- How many receipt photos you have had read this month, and what each read cost to run, so the monthly allowance of free reads can be counted.
- Contributions, only if you support Cleaver: the amount, the date and the payment provider's reference. Never a card number. If you delete your account the record of the payment is kept, without your name, because it is income we have to account for.
- Settle-up reminders, in a group that turns them on: which reminders we have sent you and when, a date you said you'll pay by, and when you last chose “Not now”. Others in the group can see a date you set; the record of reminders sent is seen by nobody.
- Notification settings and, if you turn notifications on, a token that lets us send them to your browser or phone.
It does not read your contacts, your location, your calendar or your clipboard, and it does not track you across other sites or apps. There is no advertising and no analytics service.
Who else sees it
- The people in your groups. That is the point: a receipt you add is visible to the members of the group it is in, and so are the balances it produces. A receipt shared by link is visible to anyone holding the link — on a group's receipt, that receipt and the names on it, and nothing else of the group. A history imported from Splitwise is visible to whoever imported it and to the people they matched in it.
- Supabase hosts the database, the sign-in service and the photo storage, in the European Union.
- Vercel runs the app, in Dublin.
- Google reads receipt photos you upload, through its Gemini service, to turn them into a list of items. The photo is sent for that purpose only. Google also handles sign-in if you choose “Continue with Google”.
- Stripe takes the payment if you support Cleaver on the web, and holds your card details for it. We never see them.
- Resend sends the occasional email, such as a reminder a friend has asked us to send you.
- Expo, Apple and Google deliver notifications to the phone app, if you use it and turn them on.
- Frankfurter (the European Central Bank’s published rates) is asked for an exchange rate when a receipt is in another currency. Only the currency and date are sent.
Nobody else. Your data is never sold or shared for marketing.
Why it is kept
A balance is a record of money people owe each other, so receipts and settlements are kept for as long as the group exists — deleting them would change what other people owe. Your own profile is yours to change at any time from the profile page.
Deleting your account
You can delete your account from the profile page. Your name, email, picture, payment handles and notification tokens are removed and you can no longer sign in. Receipts, payments and the history of changes you were part of stay in your groups, against an anonymised entry, because they are also a record of what other people owe — the same way a bank statement does not un-happen when an account closes.
Your rights
Under UK data protection law you can ask to see the data held about you, have it corrected, or have it deleted. Most of that you can do yourself in the app; for anything else, or any question about this page, get in touch with the person who runs the app.