DUTCHEDDutched is an expense-splitting app for iPhone and Android, operated by its independent developer ("Dutched", "we", "us"). This policy explains what we collect when you use the Dutched apps and getdutched.com, why, who else sees it, how long we keep it, and the choices you have.
- We collect the minimum needed to split expenses.
- Your receipts never leave your phone.
- We never require your personal email address.
- We never sell data or show ads.
1. Information we collect
From Apple or Google when you sign in
- Account: you sign in with Apple or Google. We receive the provider's identifier for your account (Apple's anonymous app-specific ID, or your Google account ID) and, on first sign-in, the name you choose to share. Google also sends your account name, which we offer as your display name. There are no passwords. One account can have both sign-ins.
- Contact email: when you sign in, Apple asks whether to share your email with Dutched. We store whichever address you choose, including a Hide My Email relay; if you pick Hide My Email, we never see your personal address, and we never ask you to reveal it. With Google, we receive the verified address of the Google account you sign in with and store it the same way. The address is used only for account functionality and messages you request, never for marketing you didn't ask for, and you can see or remove it anytime in the app under Account → Privacy. Deleting your account does not remove it by itself; remove it there first if you want it gone.
What you add in the app
- Your expense data: the groups, expenses (amounts, descriptions, notes, dates, categories), settlements, recurring schedules, and comments you create. That's the product, and it's stored so your groups stay in sync. When you send a payment reminder, we record who nudged whom and when, to enforce the once-a-day limit.
- Names you add: if you add a group member who doesn't have the app, we store the name you typed or imported for them, and a claim code they can use to take over their place when they join.
- Payment usernames: if you add your Venmo, PayPal or Cash App username, or the email address or phone number you use for Zelle, so friends can pay you, we store it and show it to the people in your groups. It is optional, and you can change or remove it anytime in the app under Account → How people can pay you.
- Messages to support: if you email us, we keep your message and email address to answer you.
Collected automatically
- Usage signals: first-party analytics about how the app is used, such as which features you use and how the app performs, along with the app version and your phone's operating system version. They never include amounts, descriptions, or any content. We use no third-party analytics, no advertising SDKs, and no cross-app tracking.
- Push token: if you enable notifications, the device token needed to deliver them. On iPhone notifications travel through Apple; on Android through Google's Firebase Cloud Messaging. The token identifies the device, never you, and the notification text is the same short line you see on screen.
- Crash and performance data: when the app or server has an error, and for a sample of ordinary requests, technical data is processed by Sentry so we can fix bugs and slow spots. It includes device model, OS version and stack traces. For a sampled request to our server, it can include the request itself: the address asked for and what was sent, such as an expense's description and amount. Sign-in credentials are removed before anything is sent.
- Server logs: our server logs each request it answers: the address it came from, the address asked for, and the time. When something fails, the log also holds the operation that failed and the values it was working with.
- Security logs: the server keeps an audit trail of account and money-affecting actions, including IP address, to protect your account and your groups' ledgers.
On getdutched.com
- Website visits: when a page on getdutched.com is opened, we add one to that page's total for the day. With it we keep the name of the site that linked to the page, if your browser sends one, and the campaign tag in the link, if it has one. The count holds no cookie and no IP address, and nothing about your browser or device beyond whether the request looked like a person or an automated visit. Server logs, described above, are separate and are not part of the count.
What we don't collect. Receipt scanning runs entirely on your phone: the photo is never uploaded and we never see it; only the details you accept become expense data, the amount and merchant. We don't access your contacts or your location, we never ask for a password, and we never collect bank or card details, because no money moves through Dutched.
2. How we use it
- To run Dutched: your account, your groups and balances, and keeping them in sync across your devices and with your groupmates.
- To send the notifications you turn on, and the account messages you ask for.
- To keep accounts and ledgers safe: preventing abuse, investigating problems, and enforcing limits such as one reminder a day.
- To fix crashes and slow spots, and to understand which features are used so we can improve the app.
We don't use your information for advertising, we don't build marketing profiles, and we don't make automated decisions about you that have legal or similarly significant effects.
3. Legal bases
If you are in the European Economic Area or the United Kingdom, we rely on: contract, to provide the app you signed up for; legitimate interests, for security logs, crash reports, server logs and usage analytics that keep Dutched working and improving, in ways you would reasonably expect; and consent, for notifications and for keeping the contact email your sign-in shares, which you can withdraw at any time by turning notifications off or removing the email in the app.
4. Who sees it
People in your groups. Members of a group see that group's expenses, balances, and member names. That is what the app is for. A member can create a view-only web link for a group; anyone with that link can see the group's balances and recent expenses until a member turns the link off. Payment usernames you add are shown to the people in your groups.
Service providers. Dutched runs on a small set of service providers, all processing data only on our instructions: Fly.io (application hosting, USA), Neon (database, USA), Sentry (crash and performance data), Expo (app updates and push notification delivery), Apple (sign-in and push notification delivery on iPhone), Google (sign-in, and Firebase Cloud Messaging for push notification delivery on Android), and Cloudflare and Google (email, when you write to us). Apple's App Store and Google Play deliver the app to you under their own privacy policies.
Legal reasons. We may disclose information if the law requires it, or to protect the safety, rights or property of our users or Dutched.
If Dutched changes hands. If Dutched is ever sold or merged, your information would move with it and remain covered by this policy.
We do not sell or share personal data for advertising, with anyone, ever. We do not "sell" or "share" personal information as California law defines those terms.
5. How long we keep it
We keep your information for as long as your account exists. Server logs and crash reports are kept by our hosting and error-reporting providers for a limited time under their own retention settings. Website visit totals are kept as daily counts.
Deleting your account. In the app: Account → Delete account. This permanently removes your sign-in identity and push tokens and ends every session. Nobody can sign in as you again, and the same Apple ID or Google account can start fresh. We keep our records: the ended sessions, the usage signals described above, the contact email you shared unless you removed it first, and payment usernames (or the Zelle email or phone) you added stay visible to the groups you were in.
Because groups are shared ledgers, what you were part of stays with your groups under your name: the expenses, the comments you wrote, and, in any group where you still owed or were owed, your balance, which your groupmates can settle or write off as they would with any member who is no longer on the app. Removing those would corrupt other people's balances and conversations. Security logs are kept for their protective purpose.
Merging two accounts. If you merge another Dutched account of yours into this one, its groups, expenses, payments and sign-ins move into this account, its sessions end, and the other account is closed. Its records are kept the same way as a deleted account's.
6. Your choices and rights
- See and correct: your name, groups and expenses are in the app, where you can edit them; change your name under Account.
- Export: each group's Totals screen exports its expenses as a CSV file.
- Delete: Account → Delete account in the app, or the delete your account page if you no longer have the app.
- Your email and payment usernames: remove your contact email under Account → Privacy, and change or remove payment usernames under Account → How people can pay you.
- Notifications: turn them off at any time in your phone's settings.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict some uses, and to withdraw consent. To make a request, email support@getdutched.com from the address on your account, or say which account it is; we may ask you to confirm it is yours. We never treat you differently for using these rights. If you are in the EEA or the UK, you can also complain to your local data protection authority.
7. Security
Everything between the app and our server travels encrypted over HTTPS. Your sign-in is kept in your phone's secure storage. Our database checks every read and write against your account, so each person only reaches the groups they belong to, and account and money-affecting actions are recorded in security logs.
Access to account data is tightly limited: it happens only when needed to support you, fix a problem or keep the service safe, and every access is logged. No method of storing or sending data is perfectly secure, but we work hard to protect yours, and we never hold bank or card details.
8. Where data is stored
Dutched's servers and database are in the United States. If you use Dutched from elsewhere, your information is transferred to and processed in the United States.
9. Children
Dutched is meant for adults and is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete the account.
10. Changes to this policy
If this policy changes, the new version appears here with a new effective date.
11. Contact
Questions about this policy or your data: support@getdutched.com. You can delete your account at any time from the app's Account screen; the "Deleting your account" part of section 5 says exactly what is removed, and the delete your account page covers the case where you no longer have the app.