Privacy Policy

Last Updated: June 2026

1. Introduction

Divvum ("Divvum," "we," "us," or "our") provides a social payment and bill-splitting platform with expense tracking, receipt scanning, group management, reimbursement, and payment features. Divvum helps users create, split, collect, track, and reimburse shared expenses — including receipts, rent, trips, events, shared purchases, and manual expenses — and includes social features such as friends lists, groups, leaderboards, and rewards.

This Privacy Policy explains how we collect, use, disclose, and protect information when you access our mobile app, website, payment links, support channels, and related services (collectively, the "Services"). It applies to account holders, group hosts, and guests who interact through a secure link without creating a full account.

By accessing or using the Services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information you provide directly, information created as you use the Services, and information from third parties such as our payment, authentication, and infrastructure providers.

A. Account Information

• Name
• Email address
• Phone number
• Username and display name
• Profile details
• Login and authentication information
• User ID
• Communication preferences

B. Guest / Non-Account User Information

Guests may interact with Divvum through a secure payment link without creating a full account. In these cases we may collect:

• Name
• Email address or phone number, if provided
• Payment-related details
• Device and browser information
• Transaction metadata
• Support communications

C. Payment and Financial Information

Depending on how you use the Services, payment and bank details may be collected or processed in connection with payments, reimbursements, and withdrawals. This may include:

• Payment method details
• Bank account or payout information
• Card and payment metadata
• Payment status
• Refunds, disputes, failed payments, and chargeback information

Divvum does not generally store full payment card numbers or full bank account numbers. Payment and bank information is processed by third-party payment providers such as Stripe, Plaid, or other providers where applicable.

Divvum does not charge a subscription or paywall to use the core platform.

D. Identity Verification (KYC) Information

In some situations, we may collect identity verification information when required for regulatory compliance. This may include:

• Legal name
• Date of birth
• Address
• Social Security number

This information is collected only when required by applicable law or our payment and financial partners.

E. Receipt, Split, and Transaction Information

• Receipt images
• Uploaded screenshots or documents
• Merchant name
• Purchase date
• Receipt line items
• Tax, tip, discounts, and totals
• Split participants
• Amounts owed
• Amounts paid
• Cash reimbursement tracking
• Manual expense details
• Notes and descriptions added by users
• Supporting documents such as invoices, rental statements, leases, proof of purchase, or other verification documents
• Group, trip, event, rent, or recurring expense information

F. Social and Community Data

• Friends lists
• Group membership
• Chat content
• Leaderboard placement
• Points and VIP status
• Activity within groups and shared expenses

G. Device, Usage, and Technical Information

• IP address
• Device type and identifiers
• Operating system
• Browser type
• App version
• Log data
• Pages and screens viewed
• Session activity
• Crash reports
• Performance data
• Approximate location derived from IP address
• Biometric login handled by your device

H. Identity, Risk, and Security Information

In some situations we may collect or process information needed for security, fraud prevention, identity verification, payment review, dispute review, or compliance. This may include:

• Identity verification status
• Risk signals
• Payment history
• Device and login patterns
• Transaction behavior
• Dispute and chargeback data
• Documentation submitted for review
• Account restriction or enforcement records

I. Communications and Support Information

• Emails to support
• In-app support messages
• Attachments or screenshots you submit
• Responses from the support team
• Feedback, surveys, or user-submitted inquiries

3. How We Use Information

We use information to:

• Provide and operate Divvum
• Create, manage, and track shared expenses
• Process payments and reimbursements
• Send transaction updates, payment links, reminders, and support messages
• Provide customer support
• Operate social features including friends, groups, leaderboards, and rewards
• Verify receipts, invoices, and supporting documentation
• Review larger, manual, unusual, disputed, or high-risk transactions
• Detect and prevent fraud, abuse, unauthorized activity, chargebacks, and platform misuse
• Enforce our Terms of Service and related policies
• Protect users, Divvum, and our payment partners
• Improve app performance, design, product experience, and analytics
• Comply with legal, tax, regulatory, payment network, bank, and payment partner obligations
• Resolve disputes, refunds, chargebacks, failed payments, and account issues

We may review transaction activity, receipts, payment history, device information, and supporting documentation to help ensure proper use of the platform and protect users, Divvum, and our payment partners.

4. How We Share Information

We may share information in the following ways:

A. Payment and Financial Partners

We share information with payment and financial partners such as Stripe, Plaid, banks, card networks, payment processors, and fraud or risk vendors where applicable. This supports payment processing, payouts, refunds, disputes, identity verification, fraud prevention, compliance, and financial account connectivity.

B. Service Providers

We share information with service providers that help us operate the Services, including:

• Stripe (payment processing & compliance)
• Mindee (receipt processing and data extraction)
• Firebase (authentication)
• Vercel (hosting & infrastructure)
• Analytics, customer support tools, email and SMS providers, security tools, and other app infrastructure providers

These providers act on our behalf under contractual obligations.

C. Other Users or Guests Involved in a Split

Certain split-related information may be visible to other participants in the same expense, such as:

• Name
• Amount owed
• Payment status
• Expense title
• Receipt and item details
• Notes or group activity related to the shared expense

D. Document Processing Services

When you upload a receipt, the image may be transmitted securely to Mindee for automated data extraction. Mindee processes the document solely for the purpose of extracting structured transaction data. Receipt images and extracted data are retained only as long as necessary to provide the service and comply with legal obligations.

E. Legal, Compliance, and Safety

We may share information when reasonably necessary to comply with law, enforce our policies, respond to lawful requests, prevent fraud, protect rights, protect the safety of users or the public, resolve disputes, or cooperate with payment partners, banks, card networks, and regulators.

F. Business Transfers

If Divvum is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy.

G. No Sale of Personal Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless clearly disclosed and permitted by law.

5. Payment Providers and Third-Party Services

Divvum relies on third-party providers for payments, identity and risk review, bank connectivity, receipt processing, and authentication. These providers process information according to their own privacy policies.

Depending on the flow, you may be asked to provide information directly to providers such as Stripe, Plaid, Apple, Google, banks, or other payment providers. Where Apple or Google are involved, this is generally limited to platform services such as Apple Pay, Google Pay, or app distribution through their respective app stores.

Divvum does not control the privacy practices of these third-party providers. We encourage you to review their privacy policies to understand how they handle your information.

6. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business, legal, tax, accounting, security, dispute, fraud prevention, payment partner, bank, card network, and compliance purposes.

Because Divvum involves payments and financial activity, we may retain certain transaction, payout, refund, dispute, chargeback, security, and compliance records for longer periods when required or reasonably necessary.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit (TLS), secure cloud infrastructure, and role-based access controls. Payment data is handled by our payment providers using their own security controls.

No system or method of transmission is 100% secure, and we cannot guarantee absolute security. You should protect your account credentials and contact us at contact@divvum.app if you suspect unauthorized activity on your account.

8. User Choices and Rights

Depending on your location and the information involved, you may be able to:

• Access your information
• Correct your information
• Request deletion of your information
• Close your account
• Manage your communication preferences
• Opt out of marketing communications
• Disconnect linked services
• Request information about our data practices

Some information may be retained even after a deletion request if needed for legal, compliance, fraud prevention, dispute, payment, tax, or other legitimate business purposes. To make a request, contact us at contact@divvum.app.

9. California / U.S. State Privacy Rights

Depending on where you live, you may have additional rights under California or other applicable U.S. state privacy laws, including:

• The right to know and access your personal information
• The right to delete your personal information
• The right to correct your personal information
• The right to opt out of the sale or sharing of personal information, where applicable
• The right to limit the use of sensitive personal information, where applicable
• The right to non-discrimination for exercising your rights
• The right to use an authorized agent to submit requests

Divvum does not sell personal information. To exercise any of these rights, contact us at contact@divvum.app. We may need to verify your identity before fulfilling certain requests.

10. Children's Privacy

Divvum is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@divvum.app so we can take appropriate action.

11. International Users

Divvum is currently intended for use in the United States. If you access the Services from outside the United States, your information may be processed in the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Your continued use of the Services after an update means you accept the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Divvum
Email: contact@divvum.app
Website: https://divvum.app