Your data, handled with care.

BalanceUp (“BalanceUp”, “we”, “us”) is a personal and group expense-tracking app for Android and iOS, with this website at balanceup.subhaprasad.com. BalanceUp is developed and operated by Subha Prasad in India, who is responsible for the personal data described in this policy.

This policy explains what we collect when you use the BalanceUp app and website, why we collect it, who it is shared with and the choices you have. For anything about your data, contact us at [email protected].

• We collect what the app needs to work: your login details, the expenses and groups you create, and basic device and security information.
• BalanceUp never processes payments and never asks for card, bank or UPI details.
• Your Accounts (personal ledgers) are visible only to you. Group data is visible to that group’s members.
• We don’t sell your personal data, and there is no advertising or ad tracking in BalanceUp.
• We use a small number of trusted service providers to host and run BalanceUp, listed below.
• You can delete your BalanceUp account from the app at any time — see Delete account.

Information you give us

• Login and profile: email address, full name, mobile number, a 6-digit login PIN (we store only a secure one-way hash of it, never the PIN itself), and an optional profile photo. You can also choose a global currency.
• Accounts (personal ledgers): account names, cover images, currency, and the entries and payments you record — amounts, categories, notes, dates, payment type (Full, Advance, Full Pay, Part Pay) and the Due that results.
• Groups: group names, dates, budgets, currencies, cover images and permissions; the expenses you add (amount, category, note, date, who paid, participants and their shares); invitations you send or receive; and guests you add — a name and, only if you choose, an email address or mobile number.
• Messages to us: what you send when you contact support, including any screenshots.

Information from sign-in providers

If you continue with Google or Facebook, we receive the basic profile information you allow that provider to share — typically your name, email address, profile photo and an account identifier — and use it to create or sign in to your BalanceUp account. You then add a mobile number and PIN yourself.

Information collected automatically

• Device and login information: device name or model, operating system and version, app version, IP address, sign-in method, sign-in time, last activity and session status. We use this to keep your account secure and to show you your signed-in devices.
• Push notification token: an identifier from Firebase Cloud Messaging that lets us deliver notifications to your device.
• Security and integrity records: records needed to rate-limit sign-in and one-time-code attempts, and an audit trail of important actions (for example, a group expense added, edited or deleted, or a group closed) so shared records stay trustworthy.

Information stored on your phone

To work offline, the app keeps a copy of your accounts, groups and categories in a local database on your device, and keeps your sign-in tokens in the phone’s secure storage (Keychain on iOS, Keystore-backed storage on Android). Signing out removes this local data. Your PIN and one-time codes are never stored on the device.

Device permissions

• Photos / camera: only when you choose to add a profile photo or a cover image.
• Notifications: to send the alerts you’ve enabled. You can turn them off at any time.
• Network state: to know when you are offline and when to sync.

What we don’t collect

We don’t collect your precise location, your contacts, your card, bank or UPI details, or any payment credentials, and we don’t use advertising identifiers.

• To provide BalanceUp: create your login, keep your ledgers and groups, calculate Due, splits and balances, sync your devices and show your data back to you.
• To connect you with the people you split with: let group members see shared expenses and let you find registered users to invite.
• To communicate with you: send one-time codes and account emails, deliver the notifications you’ve enabled, and reply to your messages.
• To keep BalanceUp secure: verify sign-ins, rate-limit attempts, detect misuse, alert you to new-device sign-ins and keep an audit trail.
• To improve and fix BalanceUp: investigate problems you report and make the service more reliable.
• To meet legal obligations: respond to lawful requests and enforce our Terms.

• Your Accounts (personal ledgers) are visible only to you.
• In a group, other members can see your name and profile photo, your role, when you joined, and the group’s expenses — including the ones you paid for or share. Guests’ names (and any contact details you added) are visible to the group’s members.
• When someone searches for people to invite, they see your name with a partly hidden email address and mobile number, so they can recognise you without learning your full details.
• Invitations show the invited person your name and the group’s name.

We don’t sell or rent personal data, and we don’t share it with advertisers or data brokers.

We use the following providers to run BalanceUp. They process data on our behalf, only for the purposes below, under their own security and privacy commitments:

Some of these providers may process data on servers outside India. Where that happens, we rely on the provider’s safeguards and applicable law to protect it. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a business transfer, in which case this policy will continue to apply.

• We keep your login, profile, ledgers and group data for as long as your BalanceUp account is active.
• One-time codes expire after a short time and are then deleted automatically.
• Sign-in session records are kept while your account is active so you can review your devices and so we can protect your account.
• When you delete your BalanceUp account, we remove or anonymise your personal data straight away as described on our Delete account page. Group expenses you were part of stay — without your name — so the other members’ balances remain correct, and audit records are kept to protect the integrity of shared records.
• We may keep information longer where the law requires it, or to resolve disputes and enforce our terms.
• Residual copies may remain in encrypted backups for a limited time until they are overwritten.

• Data travels between the app and our servers over encrypted HTTPS connections.
• PINs and one-time codes are stored only as secure one-way hashes; they are never logged or shown to anyone.
• Sign-in tokens on your phone are kept in the operating system’s secure storage.
• Every request is checked on our server: you can only reach your own Accounts and the groups you belong to, and group permissions are enforced there — not just in the app.
• Sign-in, one-time-code and PIN attempts are rate-limited, and sessions can be revoked.

No system is perfectly secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by law. You can help by keeping your PIN private and your phone locked.

Subject to applicable law — including India’s Digital Personal Data Protection Act, 2023 — you can:

• Access a summary of the personal data we hold about you and how we use it.
• Correct or update it — most of it directly in the app (name, photo, mobile number, PIN, currency).
• Erase it by deleting your BalanceUp account in the app, or by asking us.
• Withdraw consent for optional processing, such as notifications or Google/Facebook sign-in (you can also remove BalanceUp’s access in your Google or Facebook settings).
• Nominate someone to exercise your rights if you die or become unable to do so.
• Raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.

To exercise any of these rights, email [email protected] from the address registered with your BalanceUp account. We may ask you to confirm your identity before acting, and we will respond within the time required by law.

For any concern or complaint about how your personal data is handled, contact our grievance officer: Subha Prasad, BalanceUp — [email protected], +91 90623 58189.

BalanceUp is not intended for anyone under 18. We don’t knowingly collect personal data from children. If you believe a child has created a BalanceUp account, contact us and we will delete it.

We may update this policy as BalanceUp changes. We will post the new version here with a new “last updated” date, and if the changes are significant we will also let you know in the app or by email before they take effect.

Questions about privacy? Email [email protected] or see our contact page.