Privacy Policy

Last updated: June 2025

Hilut ("the app") is a personal expense-splitting tool. This policy explains what personal data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

Data controller

Timo Halonen (independent developer)
Contact: support@hilut.app

What we collect

• Email address — required to create an account and identify you.
• Display name — the name shown to your room members.
• Phone number — optional, used only to show your MobilePay number to room members for settling debts.
• Expense data — descriptions, amounts, payers, and participants that you enter manually or via receipt scanning.
• Room membership — which rooms you belong to and your role in them.

Why we collect it

All data is collected solely to provide the expense-splitting functionality of the app. There is no advertising, no behavioural profiling, and no sale of your data to third parties.

Where it is stored

Your data is stored in Google Firebase / Firestore, located in the EU (europe-west1, Belgium). Firebase is operated by Google LLC under the EU–US Data Privacy Framework. See Google's privacy policy at firebase.google.com/support/privacy.

Who can see your data

• Room members can see your display name, phone number, and the expenses you are part of.
• Nobody outside your rooms can access your data.
• We do not share data with any third party beyond Firebase (Google) as the infrastructure provider.

Receipt scanning

When you scan a receipt, the image is sent to Google Gemini (a Google AI service) to extract the merchant name and item amounts. The image is not stored after scanning. Google's AI usage policies apply: ai.google.dev/terms.

How long we keep it

Your data is kept for as long as your account exists or as long as you are a member of a room. You can delete individual expenses at any time. To request full deletion of your account and all associated data, contact us at support@hilut.app.

Your rights (GDPR)

Under GDPR you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data (you can do this directly in the app).
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing in certain circumstances.

To exercise any of these rights, email support@hilut.app. We will respond within 30 days.

Cookies and tracking

The app does not use cookies or any third-party tracking or analytics SDKs. This website uses no cookies or trackers either.

Changes to this policy

We may update this policy. The "last updated" date above will change when we do. Continued use of the app after changes means you accept the updated policy.