Privacy Policy

1. Scope and data controller

This Privacy Policy applies to the Dibz: Split Bills mobile application, related authentication and invitation links, account-deletion tools, support communications, and the Dibz pages hosted at quantamloopinfotech.com/dibz/.

QuantamLoop Infotech is the controller responsible for personal information processed through Dibz. QuantamLoop Infotech operates from Salford, Manchester, United Kingdom, and Surat, Gujarat, India. You can contact us at contact@quantamloopinfotech.com.

2. Information we collect and handle

Account and profile information

• Email address, email-verification status, account identifier, and secure authentication/session information.
• Profile name, chosen avatar or avatar image, initials color, base currency, and profile preferences.
• Your acceptance timestamp and policy version for the Terms and Privacy Policy.

Shared expense and ledger information

• Groups, group members, invitations, expenses, descriptions, amounts, currencies, exchange-rate snapshots, categories, dates, payers, shares, and settlement records.
• Budgets, recurring expense rules, saved split preferences, comments, edit history, and related synchronization metadata.
• Receipts and group cover images that you choose to upload.

Purchase and entitlement information

Apple App Store or Google Play processes your payment details. Dibz and RevenueCat receive limited transaction and entitlement information such as product identifier, purchase status, renewal status, country/storefront, and an app-specific customer identifier. We do not receive your full card or bank-account details.

Advertising, consent, and device information

• Consent choices, privacy-region signals, limited device/app information, ad impressions, interactions, and diagnostics used by Google AdMob and Google User Messaging Platform.
• On iOS, App Tracking Transparency status and an advertising identifier only when the operating system permits it.
• Approximate location may be inferred by providers from your IP address. Dibz does not request precise location access.

Support and technical information

If you contact us, we process your email address, message, screenshots, device/app version, and information you choose to provide. Supabase, hosting, app stores, and advertising providers may generate security and delivery logs such as IP address, timestamp, request status, and device or browser characteristics.

3. How we use information

We use information to:

• Create, verify, secure, recover, and delete your account.
• Provide expense splitting, balances, settlements, categories, budgets, recurring rules, exports, and other requested app features.
• Synchronize authorized shared ledger records across your devices and participating group members.
• Process invitation links and show only groups you are authorized to access.
• Manage Dibz Premium entitlements, purchases, and purchase restoration.
• Display, measure, limit, and troubleshoot ads for eligible free users according to consent and platform settings.
• Schedule local reminders when you enable notifications.
• Prevent fraud, protect accounts, enforce access controls, diagnose failures, and improve reliability.
• Respond to support, privacy, legal, and safety requests.

Dibz is a record-keeping tool. We do not use your data to access bank accounts, transfer money, determine creditworthiness, or make automated decisions that produce legal or similarly significant effects.

4. Legal bases for processing

Where the GDPR, UK GDPR, or similar law applies, we rely on:

• Contract: to create your account and provide the features, synchronization, purchases, invitations, and support you request.
• Consent: for personalized advertising or tracking where required, optional photos/camera access, optional notifications, and other choices you can withdraw.
• Legitimate interests: to secure Dibz, prevent abuse, maintain service reliability, understand failures, and protect users, provided those interests do not override your rights.
• Legal obligations: to comply with tax, accounting, consumer-protection, law-enforcement, and regulatory duties.
• Legal claims and vital interests: where necessary to establish or defend rights or protect someone from serious harm.

5. When information is shared

Other Dibz users

Members of a shared group can see ledger information required for that group, including member names, expense and settlement records, shares, comments, and edit history. They cannot see your unrelated private groups or personal ledger.

Service providers

We may also disclose information when legally required, to protect users or the service, in connection with a corporate transaction subject to appropriate safeguards, or with your direction. We require processors to use information only for authorized purposes.

We do not sell your expense ledger or personal information for money.

6. Advertising, tracking, and consent

Eligible free users may see banner, interstitial, rewarded, or rewarded-interstitial ads supplied by Google AdMob. Dibz Premium is intended to provide an ad-free app experience.

• Where required, Google UMP asks for advertising consent before ads are requested.
• On iOS, the system App Tracking Transparency prompt is used before accessing data used to track you across other companies' apps or websites.
• If you decline tracking, Dibz may still display contextual or non-personalized ads where legally permitted.
• You can revisit available consent choices from the app or device settings when the provider makes those controls available.

Although we do not sell personal information, disclosures to advertising providers for cross-context behavioral advertising may be considered a "sale," "sharing," or targeted advertising under some US state laws. You can opt out through the consent choices presented in Dibz or applicable device controls.

7. In-app purchases and subscriptions

Dibz may offer an annual auto-renewing subscription and lifetime access as a one-time purchase. Apple or Google determines localized pricing, handles payment, and applies its refund rules. RevenueCat helps Dibz recognize your entitlement across supported devices.

Purchase and subscription management is governed by the applicable store. Deleting your Dibz account does not automatically cancel an Apple App Store or Google Play subscription. Cancel or manage subscriptions in your Apple or Google account settings.

8. Local storage, cloud sync, and international transfers

Dibz keeps an account-scoped local ledger on your device using SQLite/Drift so available records can be used during temporary connection loss. Authentication, signup, email verification, password recovery, account deletion, invitation acceptance, initial synchronization, and other server actions require internet access.

Authorized records are synchronized through Supabase. Changes from group members may update your local ledger when connectivity returns. Conflict and tombstone records may be used to converge devices safely and remove records you no longer have permission to access.

Information may be processed in countries outside your place of residence, including locations used by our providers. Where required, transfers rely on adequacy decisions, contractual safeguards, provider data-protection terms, or another lawful mechanism.

9. Retention and account deletion

We retain account and service data for as long as your account is active or as needed to provide Dibz, comply with law, resolve disputes, prevent abuse, and enforce agreements. Support records and security logs are retained for a reasonable period appropriate to their purpose.

Delete your account

You can start permanent deletion inside Dibz at Settings > Account > Delete account, or use our web deletion page. The in-app flow requires an internet connection, password reauthentication, and explicit confirmation.

• Your Auth account, profile, private groups, personal records, invitations, private media, synchronization records, and account-scoped local data are deleted.
• When other authenticated members still require shared ledger facts for balances and history, the minimum necessary financial record may remain and your identity is replaced with Deleted member. Email, avatar, account link, personal notes, comments, and personal metadata are removed.
• A shared group is deleted when no eligible active member remains.
• Provider backup copies may persist for a limited backup cycle but are isolated from ordinary use and deleted or overwritten according to provider schedules.

Deletion is irreversible. It does not cancel an active store subscription.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; opt out of targeted advertising or certain sharing; and lodge a complaint with a supervisory authority.

To exercise a right, email contact@quantamloopinfotech.com from your account email when possible. We may verify identity and may retain information where law or the rights of other group members require it. You may appeal a denied privacy request by replying to our decision.

UK and EEA users may complain to their local data protection authority. We encourage you to contact us first so we can try to resolve the issue.

11. Security

We use measures designed to protect data, including HTTPS/TLS in transit, account-scoped access controls, Supabase Row Level Security, secure platform storage for authentication sessions, restricted backend credentials, database authorization checks, and local App Lock for eligible Premium users.

No app, network, or storage system is completely secure. Protect your password and device, avoid sharing sensitive receipt/comment content, install updates, and contact us if you suspect unauthorized access.

12. Children's privacy

Dibz is a general-audience financial utility and is not directed to children under 13, or a higher minimum age required in their country. We do not knowingly collect personal information from a child who cannot lawfully consent. Contact us if you believe a child has created an account without appropriate authorization.

13. Permissions and your choices

• Notifications: optional permission for local recurring and settle-up reminders. Change it in Dibz or device settings.
• Photos and camera: requested only when you choose to attach a receipt or image.
• Tracking: controlled through iOS App Tracking Transparency and available consent choices.
• Contacts and precise location: Dibz does not request access to your contacts or precise location.
• Advertising: available privacy options depend on your region, consent state, and platform controls.

14. Policy changes and contact

We may update this policy when Dibz, providers, laws, or data practices change. We will update the date above and provide additional notice in the app or by email when required. If a material change requires consent, we will request it before applying that processing.