Privacy Policy

Last updated: August 3, 2026

Ceru ("we", "our", or "the app") is a mobile application for splitting expenses among groups of people, developed by Av Studio Devs. This policy explains what data the app collects, where it goes, and what you can do about it.

1. Data we collect

• Account information: your email address and display name, from registration or from Sign in with Apple / Google, and an optional profile photo you upload.
• Expense data: group names, expense descriptions, amounts, currencies, categories, how each expense is split, settlements, comments, budgets, and the activity history of your groups.
• People who do not use the app: if you add a "guest" to a group, the name you type for that person is stored as part of the group. Please only add names other people are comfortable with.
• Receipt images: photos you attach to an expense. See section 3 — these are both sent to an AI provider and stored by us.
• Voice recordings: when you use voice input, the recording is sent to a speech-to-text provider. See section 3.
• Push notification tokens: a device token, if you enable notifications.
• Diagnostics: crash reports containing an opaque account identifier — never your email address or name. Email addresses and URL parameters are removed from reports before they are sent.
• Subscription status: whether your account has an active subscription, handled by RevenueCat. We never see your payment details; those stay with Apple or Google.

The app contains no advertising and no analytics or tracking SDKs. It does not look up your location, from your IP address or otherwise; currency suggestions come from your device's own language and region settings.

2. How we use it

• To run the app: recording expenses, calculating balances, and managing groups.
• To sync your data between your devices and the people in your groups.
• To send push notifications about group activity, if you turn them on.
• To find and fix crashes.

We do not sell or rent your data, and we do not use it for advertising or profiling.

3. Artificial intelligence features

Three optional features send your content to AI providers outside our systems. The app asks for your permission before the first time this happens, and you can withdraw it at any time in Profile. Declining leaves the rest of the app working — expenses can always be entered by hand.

• Voice input. The audio recording is sent to OpenAI and transcribed by its Whisper service. The recording leaves your device. We do not keep the audio after transcription.
• Understanding what you said. The resulting text, together with the names of the members of the group and its currency, is sent to Google Gemini via OpenRouter so the app can work out who paid, how much, and for what. The names are needed to match "Anna paid" to the right person.
• Receipt scanning. The photo is sent to Google Gemini via OpenRouter to extract the merchant, the items and the total.

These providers process the data under their own terms (OpenAI, OpenRouter, Google). We do not control their retention or whether they use data for improving their own systems, and we make no promise on their behalf — please read their policies if that matters to you.

4. Where your data is stored

Data is stored with Supabase (hosted on AWS) and transmitted over HTTPS. Access is enforced by row-level security, so you can only read data from groups you belong to.

Receipt photos and profile photos are stored in private buckets. They are not publicly reachable: the app requests a short-lived link each time it needs to display one, and only members of the relevant group can obtain one. Group cover images are an exception — they are decorative and stored in a public bucket, so treat them as public.

A copy of your data is also kept on your device in a local database, so the app works offline. That copy is erased when you log out and when you delete your account.

5. Who else can see your data

Everything you add to a group is visible to the other members of that group — that is the purpose of the app. Expenses, amounts, comments, receipt images and your display name and photo are all visible to them.

Beyond that, data goes only to the service providers listed here, and only to make the app work:

• Supabase — accounts, database, file storage.
• OpenAI — speech-to-text for voice input.
• OpenRouter and Google — extracting expenses from text and receipts.
• Sentry — crash reports.
• RevenueCat — subscription status.
• Expo — delivering push notifications.
• Apple and Google — if you use their sign-in.

6. Deleting your account

You can delete your account in the app: Profile → Delete Account. Your account, profile, photos, receipt images, comments, activity entries, budgets and notification settings are permanently removed.

Expenses and settlements in your groups are kept, attributed to an anonymous "Deleted user" placeholder. They record money owed between people, so deleting them outright would silently change what everyone else in the group owes. The placeholder carries no name, email or photo, and a separate one is created for each group, so nothing links your former groups to each other or back to you. If you want your expenses gone as well, delete them or leave the group before deleting your account.

Full details are on the account deletion page. Personal data is removed immediately for in-app deletion, or within 30 days for a request by email; backups are purged within 90 days.

7. Your choices

• See your data: everything the app holds about you is visible inside it.
• Export it: group expenses can be exported as PDF or Excel from the group screen.
• Refuse the AI features: decline the permission, or withdraw it later in Profile. Nothing is sent to an AI provider without it.
• Turn off notifications: in Profile, or in your device settings.
• Delete your account: see section 6, or write to us.

8. Children

Ceru is not intended for children under 13, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this policy. The date at the top changes when we do.

10. Contact

Questions, or a request about your data: av.studio.devs@gmail.com.