Privacy Policy

Last updated: 15/08/2026

Triply is built to collect as little as possible. This page spells out what the app stores, where, and who can see it.

What we do NOT collect

• No account, email address, or phone number
• No access to contacts, location, photos, or calendar
• No analytics or advertising SDKs (the only third-party service is Firebase Cloud Messaging, used solely to deliver notifications — see below)
• We never sell or share your data with third parties

Data stored on your device

Everything about your trips lives in the app's private storage on your phone:

• Display name — you choose it the first time you open the app so your group recognises you. A nickname is fine.
• Device identifier — a random string the app generates itself, unrelated to any manufacturer ID.
• Trip contents — group name, members, and the contributions and expenses you record.

Uninstalling the app wipes all of this from your device.

Data that passes through the server

So everyone in a group sees the same numbers, what you record is sent to the server and relayed to the other phones in that group. The server keeps a copy so people who join later can still see the history.

The server stores the group code, member display names, recorded transactions, and — if you enabled notifications — your notification device token. It stores nothing that identifies you beyond the name you chose.

Only people who have a group's invite code can see that group's data.

Push notifications

If you allow notifications, the app registers a device token issued by Firebase Cloud Messaging (Google) with our server, along with the list of groups you are in, so we know which phones to notify. The notification text only says something needs your attention (for example "A new transaction is awaiting approval"); it carries no amounts or names. Decline the permission and the token is never created — the app works fine without it. Uninstalling or leaving a group removes the token from our server.

Camera

The app asks for camera access only to scan invite QR codes. Frames are processed on-device and are never stored or transmitted. You can decline and type the code instead.

Device verification

To stop automated abuse, the app may verify with Apple or Google that it is a genuine build running on a real device. This sends no personal information and does not let us track you across apps.

Children

Triply is not directed at children under 13 and does not knowingly collect data from them.

Deleting your data

You can delete your data yourself — no need to contact anyone:

• Delete a whole group: the group owner opens the group, goes to the Members tab and taps Delete group. It disappears for everyone at once and nobody can add anything further. The owner has 7 days to change their mind and restore it; after that the server erases the group and all its transactions for good, and the app clears it from your phone too.
• Remove from your phone: uninstall the app. Everything it stored on the device goes with it.
• Need help: if you are no longer the owner (new phone, lost access), email us at the address below with the group invite code.

Changes to this policy

If this policy changes, the date at the top changes with it. Significant changes will be announced in the app.

Contact

Questions about this policy, or want your data deleted? [email protected]