PiviPay (also shown as "DajCa$h") is a shared-expense ledger: it records who paid for what inside a group of people and works out who owes whom. It never moves money. This page explains what data the app stores and why.
Who is responsible
The service is operated by Michal Buzek, Slovakia. Questions and requests about your data: mbuzek@gmail.com.
What we store
- Account. Every visitor gets an anonymous account automatically. If you choose to secure it, we store your e-mail address and/or the identity provided by a sign-in provider (Google): your name, e-mail and profile picture URL. Nothing else is read from your Google account, and the app never posts to it.
- Profile. A display name and, optionally, a photo you upload, plus preferences (language, theme).
- Groups and expenses. Group names, member names, expenses (description, amount, currency, date, who paid, how it is split), settlements, and optional receipt / cover photos. This is the content you and other members of your groups enter deliberately; it is visible to every member of that group.
- Friends. Friend requests and friendships between accounts, so you can add a friend to a group with their name and photo. Friends can see your name, photo, the groups you share and — unless you switch it off in Settings — how many groups you are in.
- Technical. Standard server logs (IP address, browser type, timestamps) kept briefly by our hosting providers for security and debugging.
What we do with it
Only to run the app: show your groups on your devices, keep balances up to date in real time and let members settle up. We do not sell data, do not show advertising and do not use the data for profiling. Data is processed on the basis of the contract with you (providing the service) and, for optional features such as friends, your consent.
Where it lives
Data is stored with Supabase (database, authentication, file storage) and the app is served by Vercel. Both act as processors under our instructions. Exchange rates are fetched from the European Central Bank via frankfurter.app without sending any personal data.
Cookies and local storage
The app uses a session cookie to keep you signed in and browser storage for your preferences and offline app shell. There are no tracking or advertising cookies.
How long
As long as your account exists. Group data is deleted when the group owner deletes the group; individual expenses and photos can be deleted by group members at any time. To delete your whole account and everything only you own, e-mail us — we remove it within 30 days.
Your rights
Under the GDPR you can ask for access, correction, deletion, restriction or portability of your data, withdraw consent, and complain to the Slovak Office for Personal Data Protection (dataprotection.gov.sk). Write to mbuzek@gmail.com.
Children
The service is not directed at children under 16.
Changes
If this policy changes, the date at the top is updated and material changes are announced in the app.
Ochrana osobných údajov (SK)
PiviPay je zdieľaný zápisník výdavkov — eviduje, kto za čo zaplatil, a počíta, kto komu dlží. Peniaze nepresúva. Ukladáme len to, čo potrebujeme na fungovanie aplikácie: účet (anonymný, alebo e-mail / prihlásenie cez Google — meno, e-mail a fotka profilu), profil (meno, fotka, jazyk, téma), skupiny a výdavky, ktoré do nich členovia zapíšu (viditeľné všetkým členom danej skupiny), priateľstvá medzi účtami a bežné technické záznamy servera.
Údaje nepredávame, nezobrazujeme reklamu a neprofilujeme. Dáta sú uložené u poskytovateľov Supabase a Vercel (sprostredkovatelia). Používame iba cookie na prihlásenie a lokálne úložisko prehliadača pre nastavenia. Údaje uchovávame, kým existuje váš účet; skupinu vymaže jej vlastník, celý účet na požiadanie vymažeme do 30 dní. Máte právo na prístup, opravu, vymazanie, obmedzenie a prenos údajov aj právo podať sťažnosť Úradu na ochranu osobných údajov SR. Kontakt: mbuzek@gmail.com. Prevádzkovateľ: Michal Buzek, Slovensko.
See also the terms of service.