Beta

Privacy Policy

Last updated October 3, 2026

What TabbyCat collects

Account information

When you create an account we store your email address and, if you provide it, your name and mobile number. If you sign in with Google, we receive your name and email from Google.

Trip and tab content

We store the information you and your group enter: trip names, dates and destinations; expense amounts, merchants, categories and notes; receipt photos you upload; the names of people in your group; and payment details you choose to share (Venmo, Cash App, Zelle).

Quick Tab guests

Guests who join a Quick Tab through a shared link do not create an account. We store the first name and mobile number they enter, the items they tag, and a one-time code that keeps their spot on that tab on their own device.

Receipt photos and AI reading

When you scan a receipt, the photo is sent to an AI service that reads the merchant, line items, tax, tip and total. The photo is stored in your private TabbyCat storage so your group can view it. We do not use your receipts to train AI models, and the AI service does not retain your images after reading them.

Deletion records

When you ask us to delete your account, we keep a short record of that request: your account identifier, your email address, the network address (IP address) of the connection you used, whether the deletion finished successfully, and the date and time. This record exists so we can show a deletion actually happened and investigate abuse or disputes. See “What we keep after you delete your account.”

How we use it

  • To run the app: splitting expenses, showing balances, and keeping your trips and tabs in sync across your devices.
  • To send account emails (confirming your email, resetting your password). We do not send marketing email.
  • To let trip owners approve join requests, using the name and mobile number the requester provides.
  • To carry out account deletions and keep a record that a deletion was requested and completed.

Who can see your information

  • Your group. Members of a trip can see that trip's expenses, receipt photos, and the names and payment details of everyone in it. Quick Tab guests see only their own summary and the shared receipt.
  • Trip owners. Owners can see and approve requests to join their trip, including the requester's name, mobile number and account email.
  • Deletion records. Only the systems that run TabbyCat and the people who administer them can see these records. No signed-in user — including you — can view or edit them from inside the app, which is what makes them reliable as an audit trail.
  • Service providers. We use a small number of providers to run TabbyCat: cloud hosting and database (our backend provider), an AI service (to read receipts), and email delivery (for account emails). Each receives only what it needs to provide its service.
  • No selling, no ads. We do not sell your information, share it with advertisers, or use it for advertising.

Where data is stored and processed

Your data is stored on servers in the United States operated by our cloud backend provider. If you use TabbyCat from outside the United States (including the EU and UK), your information is transferred to and processed in the US under the standard contractual safeguards our providers offer for international transfers. Receipt images are processed by an AI service at the moment you scan them; the read results (merchant, items, totals) are stored with your trip or tab. Deletion records live in the same database, in a table that only the backend can read.

Your choices and rights

  • Edit or delete content. You can edit or delete expenses, trips and tabs you own at any time. Deleting a trip or tab removes its expense records, balances, guest details and uploaded receipt images.
  • Payment details. You can change or clear your Venmo, Cash App and Zelle details from your profile.
  • Delete your account yourself. You do not need to contact us. Open My preferences and choose Delete account, then type DELETE in capital letters to confirm — the button stays disabled until you do, so it can't happen by accident. Here is what happens:
  • Everything you started is deleted. Every trip you created and every Quick Tab you started is removed, together with its expenses, balances, receipt images and the details of people you invited. None of it stays available to the people you invited or to anyone else.
    • Trips other people started are kept, but de-identified. If you were added to a trip or group owned by someone else, that trip stays (so other people's records aren't destroyed), but your account link, email address, mobile number and payment details are removed from it. The name you were listed under stays, because balances in that trip still have to read correctly.
    • Requests you sent are removed. Any “ask to join” requests you filed are deleted.
    • You can no longer sign in. Your sign-in credentials are deleted, and the action cannot be undone.
  • Quick Tab guests. A guest's information disappears when the tab owner deletes the tab. Guests can ask the tab owner to remove them.

What we keep after you delete your account

  • A deletion record (your account identifier, email address, IP address, the date and time, and whether the deletion succeeded). We keep this to prove the deletion happened and to investigate abuse, fraud or disputes. It is not visible in the app and is not used for marketing.
  • Trips and tabs owned by other people. Their records stay, with your contact and payment details removed as described above. The name you were listed under remains in those trips.
  • Receipt photos on trips other people own. Those images stay with the trip, because the trip itself and its expense records remain.

Data retention

We keep your data while your account is active. Receipt images are kept so your group can view them; you can delete them with the expense, trip or tab they belong to, or delete your account as described above. After an account deletion, only the items listed in “What we keep after you delete your account” remain. Deletion records are kept for 24 months after a deletion completes and then erased.

Security

Access to trips and tabs is restricted to their members. Trip codes alone do not grant access — joining requires the trip owner's approval. Quick Tab links are protected by a code word that is stored only as a one-way hash. Account deletion requires a signed-in session and a typed confirmation in capital letters, and the deletion record cannot be read or changed from inside the app.

Children

TabbyCat is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date above and, for significant changes, notify you by email.

Contact

Questions and privacy requests: hello@tabbycat.app. You can ask us for a copy of the information we hold about you, and we will respond within 30 days. To delete your account, use My preferences → Delete account — you don't need to email us.