Tabb — Privacy Policy

Last updated: June 14, 2026

Overview

Tabb is built with privacy as a core principle. We do not sell your data, show ads, or track you across other apps and websites. This policy explains exactly what data we collect and how we use it.

Information We Collect

Account Information: When you create an account, we store your email address and display name. This is used for authentication and to display your name to group members.

Expense Data: Receipts, expenses, splits, and settlement records you create within groups. This data is visible only to members of the groups you belong to.

UPI ID (Optional): If you add a UPI ID to your profile, it is shared with group members so they can send you payments. This is optional — the app works without it.

Receipt Images: When you scan a receipt, the image is processed by our AI service (OpenRouter / Gemini) to extract text data. The image is not permanently stored on our servers.

How We Use Your Data

To authenticate your account and maintain sessions
To store and sync your expense data across your devices
To calculate balances and debt simplifications within groups
To generate UPI payment links for settlements
To send crash/bug logs (anonymized) for debugging purposes

What We Don't Do

No advertising. We don't show ads. Ever.
No data selling. We never sell your data to third parties.
No cross-app tracking. We don't track you across other apps or websites.
No contact list uploads. We don't access or upload your contacts.
No location tracking. We don't collect or use your location.

Data Security

Your data is stored using Supabase, a secure PostgreSQL database with Row-Level Security (RLS) enabled. This means:

You can only access data in groups you belong to
Group creators can manage their own group's members
All data is transmitted over HTTPS/TLS encryption
Authentication is handled via secure JWT tokens

The app supports Face ID / Touch ID app lock for additional device-level privacy.

Third-Party Services

Supabase: Backend database and authentication. Data is stored in Supabase's Mumbai (ap-south-1) region. Privacy Policy

OpenRouter / Google Gemini: AI-powered receipt text extraction (OCR). Only receipt images are sent for processing — no personal data. Privacy Policy

Data Retention

Your data is retained as long as your account is active. If you delete your account or leave a group, your expense records in that group may be retained for other members' balance accuracy, but will be anonymized.

Your Rights

Access: You can view all your data within the app at any time
Edit: You can update your display name, UPI ID, and profile info anytime
Deletion: You can delete expenses and groups you created
Account deletion: Contact us to permanently delete your account and associated data

Children's Privacy

Tabb is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us for immediate deletion.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Questions about privacy?
Email: support@tabb.money