MasrafoidPrivacy policy
The short version: we keep what's needed to split your bills and nothing else. No ads, no tracking, no selling data. Receipt photos are read by OpenAI and Microsoft Azure, and only after you agree to it in the app. You can delete your account and everything in it from the app at any time.
Who we are
Masrafoid is an iPhone app for splitting restaurant bills. “We” means the developer of Masrafoid. For anything about your data, write to support@masrafoid.com.
What we collect and why
| Data | Why |
|---|---|
| Name, email address, password (stored only as a hash) | To create your account, sign you in and let friends find you on a bill. |
| Preferred currency and app language | To show amounts and send notifications and emails in the right currency and language. |
| Bills you create: title, restaurant, items, prices, service fee, tip, participants and who had what | This is the app's main job. |
| Names and, if you add them, email addresses of people on your bills and in your groups | To split the bill between them and, if you choose, email them their share or a reminder. |
| Receipt photos | To read the items and prices for you. See “Receipt scanning” below. |
| Payment status and reminder history | To show who has paid and to limit how often reminders can be sent. |
| Device push token and your time zone | To deliver notifications, and to hold reminders back during the night. |
| Subscription status from Apple (transaction IDs, product, expiry date) | To unlock Masrafoid Pro. We never see your card or Apple ID details. |
| Technical logs (for example request time, errors, IP address) | To keep the service running and fix problems. Logs are kept for a limited time. |
We don't use advertising, analytics or tracking tools, and we don't sell or rent personal data to anyone.
Receipt scanning
When you scan a receipt, the photo is uploaded to our server and sent to two services that read it:
- OpenAI (USA) reads the dishes and prices from the photo. Data sent through OpenAI's API is not used to train their models by default.
- Microsoft Azure AI Vision recognises the printed text.
The app asks for your consent before the first scan and won't upload a photo without it. If you'd rather not use these services, you can type items in by hand. Photos that don't end up on a bill are deleted automatically within 24 hours. Photos attached to a bill are kept with that bill until it or your account is deleted.
Other services we use
- Apple — App Store purchases and push notifications (APNs).
- Brevo — sending emails: shared bills, payment reminders and password reset codes.
- Our hosting provider, which runs the server and database.
Each of them processes data only to provide its service to us. Some of them are outside your country, including in the United States; where required, transfers rely on standard contractual clauses or equivalent safeguards.
If someone added you to a bill
A friend may have added your name, and possibly your email, to a bill they created. We use it only for that bill: to show your share and, if they choose, to email you about it. If you'd like it removed, ask your friend or write to us.
How long we keep data
- Account data, bills and groups: until you delete them or your account.
- Unused receipt photos: up to 24 hours.
- Password reset codes: 15 minutes.
- Subscription records: as long as needed for accounting and legal duties.
Deleting your account
In the app go to Profile → Delete Account and confirm with your password. Your account, the bills and groups you created and their receipt photos are deleted. An active subscription is billed by Apple; cancel it in your Apple ID settings.
Your rights
Depending on where you live (for example under the GDPR in the EU, KVKK in Turkey or the Law on Personal Data in Azerbaijan), you can ask to see, correct, export or delete your data, object to or restrict its use, and withdraw consent at any time. Write to support@masrafoid.com and we'll answer within 30 days. You can also complain to your local data protection authority.
Security
Traffic between the app and our server is encrypted, passwords are stored as hashes, and access to the servers is limited. No system is perfectly secure, but we take reasonable care and will tell you if a breach affects your data.
Children
Masrafoid is not meant for children under 13 (under 16 in the EU), and we don't knowingly collect their data.
Changes
If this policy changes in a meaningful way, we'll update the date above and let you know in the app.