Privacy
STLD stores the minimum needed to keep a shared ledger consistent across the devices of everyone in a group. This page says exactly what that is.
What is stored
On our servers:
- Who you are. Your name, email address and provider id from Google or Apple, whichever you signed in with, and your profile photo if you have one.
- Your ledger. Groups, the people in them, expenses, payments, comments and activity.
- Attachments — images and PDFs you add to an expense.
- A location, but only on an expense you deliberately attached one to.
- Push tokens for the devices you have signed in on, so notifications can reach them.
- Counters of how many AI extractions you have used and what they cost to run.
- Crash reports. When the app fails, we record the kind of failure and where in the code it happened. We deliberately do not send the error's message, because a message can contain the thing that broke it — an amount, or somebody's name.
What is not stored
- Your voice. When you speak an expense, the audio is used to extract the fields and then discarded. Only the transcript and the fields it produced are kept.
- Your contacts. The app never reads them. You add people by typing a name.
- Your location, unless you attach one to an expense yourself.
- Any bank or card details. STLD records who owes what. It never moves money and is never told how you moved it.
- A password. There isn't one to store.
Who can see it
Everything in a group is visible to every member of that group, including attachments. That is what a shared ledger is. Nothing is visible to anyone outside the group.
We do not sell anything to anyone, and there is no advertising network in the app.
AI
When you photograph a receipt, speak an expense or type one in a sentence, the content is sent to a third-party model provider to extract the fields. Your data, your attachments and your transcripts are not used to train models, and the providers are configured for no data retention.
Deleting your account
From the app under Account, or here on the web, with no need to open the app.
There is one thing we cannot delete. If you delete your account, a placeholder carrying your display name stays in every group you were part of, and the expenses and comments you wrote stay attached to it. This is not an oversight. An expense you paid for is part of other people's balances, and removing it would silently change what they owe each other. Your identity goes; your share of the arithmetic stays.
What is erased immediately: your account, your link to Google or Apple, your email address, phone, photo, settings, push tokens and AI counters. Your account stops working at once. Backup copies age out within 30 days.
Deletion is refused while you owe money or are owed money in any group. The app lists which ones, so you can settle up first. Settling is how a debt ends; deleting your account is not.
Children
STLD is not directed at children and is not intended for anyone under 13.
Changes
If this policy changes in a way that affects what is stored or who can see it, the app will say so rather than leaving it here to be discovered.