Privacy Policy

Last updated: 5 August 2026

1. What we store

Account data (name, email), household data you and your household members create (shopping lists, expenses, receipts and receipt photos, contracts and documents, chores, messages), and technical data needed to run the service. Receipt photos and uploaded documents are stored server-side together with your household's data.

Separately, and only if you ask for it, we store an email address for the iPhone waitlist. That is the one case where we hold data about someone who does not have an OctoFlat account, so it has its own section: see section 8.

2. What we use it for

To provide the service: syncing between your devices and household members, AI-assisted features (receipt scanning, the household assistant), notifications you enable, and anonymous product analytics that help us improve the app. We do not sell your personal data.

3. Subscriptions and payments

Payments are processed by Google Play or the Apple App Store — we never see your card details. We store the subscription state (plan, status, trial and billing period) needed to unlock Premium for your household.

4. Cookies and Google Analytics

The website uses Google Analytics to understand how visitors use OctoFlat, using cookies and similar technologies. This only runs after you accept it in the cookie banner - if you decline, no analytics cookies are set. You can change your choice at any time by clearing your browser's local storage for this site. IP addresses are anonymized before being sent to Google.

The app reports into the same Google Analytics property, and it is off until you turn on Settings → Share usage data. If you never turn it on, the app sends Google nothing. When it is on, Google receives how often and how long the app is used and which screen you are on - identified by the screen's type, such as the expense detail screen, never by which expense, household or invite link you opened. Your expenses, shopping lists, chores, messages and the names of the people in your household are never sent to Google. Turning the setting back off stops it again.

5. Advertising

Free households see ads, including optional rewarded ads. Premium households see no ads.

6. Sharing — and what we never do

We do not sell your personal data, and we do not share it for advertising, marketing or profiling. We do not disclose it for anyone else's own commercial purposes, and we do not engage in cross-context behavioural advertising. Ads shown to free households are requested as non-personalised. If that ever changes, it will be announced in the app before it takes effect, per section 10.

Household content is shared with the members of your household according to their roles, and with nobody outside it. Service providers process data only on our instructions and only to deliver a feature you are using — hosting, email delivery, push notifications, ad networks for free households, and Google Analytics for website visitors who accept cookies and for app users who turn on Share usage data. They are not permitted to use your data for their own purposes.

AI-assisted features send data to Google's Gemini API for processing. The household assistant sends it a snapshot of your household's data needed to answer your question (for example: member names, recent expenses with amounts, categories and who paid, balances, budgets, contract values, and chore assignees). Receipt scanning sends it the photo you take or upload. Google processes this data on our behalf to generate the assistant's response or read the receipt, under Google's API terms of service. AI-assisted features are optional; you do not have to use them to use the rest of the app.

7. Retention and deletion

You can delete items, leave a household, or delete your account at any time. Analytics events expire automatically after at most 180 days. Waitlist addresses expire automatically too — see section 8 for the exact periods.

8. The iPhone waitlist

There is no iPhone app yet. If you want to be told when there is, the download page lets you leave an email address. This is entirely optional and is not connected to having an account — you can use the rest of OctoFlat, or none of it, without ever giving us one.

What we store: your email address, the language the page was in, the page you submitted the form on, and the date. Nothing else — we do not ask for a name and do not keep one, and we do not record your IP address or your device against the signup.

What we use it for: one email, when the iPhone app is released. That is the entire purpose. We do not use waitlist addresses for a newsletter, for offers, for advertising or for profiling, we do not add them to any other list, and we never share or sell them. They are stored on the same servers as the rest of OctoFlat and are not sent to any third party other than the provider that delivers the email itself.

Confirmed opt-in: submitting the form does not put you on the list. We send one email asking you to confirm, and nothing else happens until you follow that link. If you do not, the address is deleted automatically after 7 days and you hear nothing further from us. This is deliberate: anyone can type someone else's address into a public form, and an unconfirmed address should never become a subscription.

How long we keep it: an unconfirmed address is deleted after 7 days. A confirmed address is deleted automatically 18 months after you confirmed it, whether or not the app has shipped by then. Both deletions happen on their own; neither depends on you asking.

How to get rid of it: every email we send about the waitlist, including the confirmation one, carries a link that deletes your address immediately. It works without signing in, because you have no account to sign in to. Removal deletes the record — we do not keep a suppression list of people who have unsubscribed. You can also email [email protected] and ask.

9. Your rights

You may request access to, correction of, or deletion of your personal data at any time via [email protected].

10. Changes

Material changes to this policy will be announced in the app.