Trezzit Privacy Policy

Effective: October 14, 2026 · Version 2026-10

Trezzit helps you track what you actually spend, on your own and with others, down to each item, and split and settle up shared bills. This policy explains what we collect, why, who helps us run the service, how long we keep things and what you can do about it. A one-page summary is at Your data at Trezzit.

Who we are. Trezzit is run by Trezzit LLC, an Arizona limited liability company in Tempe, Arizona, United States ("Trezzit", "we"). Questions about privacy: privacy@trezzit.com. Everything else: support@trezzit.com.

The short version #

• We never sell your data, show you ads, or track you across other apps and sites.
• AI reads your receipts and sorts your expenses only if you turn on AI features. The AI providers that work for us process data on our behalf and don't use it to train their models.
• People in your groups see what they need to split with you. They see your email address masked, not in full.
• You can delete your account from the app at any time. Your personal data is deleted, shared bills stay for the other people in them under "Removed User", and backups roll off within 93 days.

1. What we collect #

Account. Your name, email address, a password (stored only as a one-way hash), and optionally a phone number, profile photo, time zone and default currency. If you sign in with Google or Apple, we receive your name, email address, profile picture link and a stable account ID from them; we never receive your Google or Apple password.

What you put into Trezzit. Bills, items and prices, who paid and who owes what, settlements you record, groups, group notes and checklists, recurring expenses, categories and tags, messages you add to invitations, and receipt images or PDFs you upload, scan or share to Trezzit from another app (including an email you share as a receipt).

People who aren't Trezzit users. When you add someone to a bill or group who doesn't have an account, we store the name you type for them (and an email address if you invite them). We use it only to show the bill to you and the people you share it with, and to send the invitation you asked us to send. That person can ask us to remove it at privacy@trezzit.com.

Split a bill without an account. If you use the public "Split a bill" page, we store the bill you create, the names typed into it, receipt images you scan, the IP address it was created from, and any feedback you send (with an email address only if you give one).

Connected AI apps. If you connect an AI assistant such as Claude or ChatGPT to Trezzit, we store the app's name, when it was connected and last used, and a log of each action it took on your behalf, so you can see what it did. Access tokens are stored only in hashed form.

Notifications. Your notification settings, the activity feed of what happened in your groups, and, if you turn on push notifications, a push token or subscription for each device along with the device's browser or app description.

Technical data. When you use Trezzit our servers record technical logs: the address requested, time, response, your IP address and browser or app description. We use them to keep the service working and secure. When you join a group through an invite link we record when, and the IP address and browser used, to protect invite links from abuse; other members can't see the IP address. If something breaks, an error report goes to our error tracker with email addresses and credentials removed. On our web app we use Vercel Web Analytics, which counts page views without cookies and without identifying you (we remove share and invite codes from addresses before they are counted), and Vercel Speed Insights, which measures how fast pages load. Announcement emails we send about Trezzit record whether they were opened or a link was clicked; you can unsubscribe from them at any time.

On your device. We use first-party cookies only to keep you signed in. The app keeps your settings (such as your theme) and a copy of recently loaded data on your device so it opens quickly; the copy is cleared when you sign out. We use no advertising or cross-site tracking cookies.

In our iPhone and Android apps. The app uses your camera or photo library only when you choose to scan or attach a receipt, and only the photos you pick leave your phone. If you turn on the app lock, Face ID, Touch ID or your fingerprint is checked by your phone's operating system; Trezzit only learns whether the check passed and never receives biometric data. Links to other websites open in an in-app browser, where that website's own privacy policy applies.

We don't ask for or store bank account or card numbers. Trezzit doesn't move money: a settlement records a payment you made somewhere else.

2. How we use it #

• To run Trezzit: show your bills and balances, split costs, keep group members' shared bills in sync, send the notifications and emails you've chosen, and let you sign in. (Legal basis in the EU and UK: performing our contract with you.)
• AI features, only if you turn them on: reading receipt images into items and prices, and sorting expenses into categories. Sorting sends the bill's title, date, total, item names and prices. (Basis: your consent, which you can withdraw at any time in Profile → Privacy & data.) If someone you share bills with turns on AI features or connects an AI app, the bills you share with them can be included when it works for them.
• To improve receipt reading: we review a small sample of recent receipt scans, only from people who turned on AI features, to find and fix reading errors. The sample isn't linked to your name, email or account, though a receipt photo shows whatever is printed on it. (Basis: our legitimate interest in making scanning accurate; you can object at privacy@trezzit.com or by turning AI features off.)
• To keep Trezzit secure and working: detecting abuse, preventing fraud, fixing bugs. (Basis: legitimate interests.)
• To tell you about Trezzit: occasional announcement emails, which you can turn off. (Basis: legitimate interests.)
• To meet legal obligations.

We don't use your data for advertising, we don't sell or rent it, and we don't build profiles of you for anyone else.

3. What other people see #

• People in your groups see your name and photo, the bills and settlements you share with them, and your balances with them. They see your email address masked (for example n***n@gmail.com), not in full.
• A bill shared by public link (Split a bill) shows its items, amounts, receipt images and the names typed into it to anyone with the link, including in the link previews chat apps show. Don't put anything in a shared link you wouldn't want its recipients to see.
• An invite link shows the group's name, description and icon, and who invited you, to anyone with the link.
• AI apps you connect receive the Trezzit data their actions need, including other members' names on bills you share, under that app's own privacy policy and settings. You can disconnect them any time in Profile → Connected AI apps.

4. Who helps us run Trezzit #

These companies process data on our behalf, under terms that limit them to doing so for us. None of them may use your data for their own purposes, including training AI models. The AI services that read receipts and sort expenses can change as we improve Trezzit; this table always lists the ones we use now, and each one works under paid API terms that don't allow training on your data.

We may also disclose data if the law requires it, to protect someone's safety, or as part of a merger or sale of the business (and we'd tell you first).

5. Where your data is #

Trezzit is run from the United States and our data is stored mainly there. Some providers (for example AI and content-delivery services) may process data in other countries under the same safeguards. If you use Trezzit from elsewhere, your data is transferred to the United States. Where the law requires it (for example from the EU or UK), we rely on our providers' standard contractual clauses for these transfers.

6. How long we keep it #

7. Security #

All traffic to Trezzit is encrypted (HTTPS only, with HSTS). Receipt images are kept in private storage and shown through links that expire within an hour. Passwords and AI-app tokens are stored only as hashes. Backups are encrypted. Profile photos and group icons are stored as public files at unguessable addresses, so anyone given the address can see them.

Our test environment uses a pseudonymised copy of the database: everyone's name and contact details are replaced with made-up ones, except the owner's own account. Bills and notes in groups the owner belongs to stay as they are; other bills lose their titles, notes and receipts.

No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.

8. Your choices and rights #

• See and change your profile and data in the app at any time.
• Turn AI features on or off in Profile → Privacy & data. Turning them off stops new receipt reading and sorting; everything else keeps working.
• Notifications and emails: choose what you get in Profile, under Notifications, and unsubscribe from announcement emails from any of them.
• Get a copy of your data: export a group's transactions from the app, or email privacy@trezzit.com for everything we hold about you.
• Delete your account in Profile → Delete account, or see trezzit.com/delete-account. Deletion is scheduled for 14 days later so you can change your mind; sign in before then and choose "Keep my account".
• Depending on where you live (for example the EU, UK, India or California), you may also have rights to access, correct, delete, restrict or object to our use of your data, to data portability, and to complain to your data protection authority. We'll answer any request within 30 days; email privacy@trezzit.com. We don't sell or "share" personal information as California law defines those terms, and we don't discriminate against anyone for using their rights.

What deleting your account does. Before your account is deleted, any balance you still have with someone is closed with a note: (for example "Closed when Alex deleted their account. No money moved.") The people affected are told. Bills you shared with others stay for them, with their receipts, shown as "Removed User". Your personal bills, the bills only you were part of, their receipts, your profile, sign-ins, connected AI apps and their action log, notifications and settings are deleted. Other members' own activity history may still show your name as it was when the activity happened. We keep a minimal record that the deletion happened (no name or email), and, if you had unsubscribed from emails, your address on our do-not-email list. Your email address is otherwise kept only until we've sent you a confirmation that the account is deleted, and never more than 7 days. Backups roll off within 93 days, and our test copy at its next refresh. You can sign up again later with the same email as a new account.

9. Children #

Trezzit is not for children under 13, and we don't knowingly collect data from them. If you think a child under 13 has an account, email privacy@trezzit.com and we'll delete it.

10. Changes #

We'll post any change here with a new effective date. If a change is significant (for example using AI for something new), we'll tell you in the app first, and ask for your consent again where it's needed.

11. Contact #

Trezzit LLC, Tempe, Arizona, United States · privacy@trezzit.com