Privacy policy

Your account: email, display name, a short name if you set one, and the language you use. Signing in with Google gives us only your email and name.

Group books: group names, members and guests, expenses, how they are split, transfers and their confirmations.

A receiving bank account if you add one: bank, account number and holder name. Account numbers are encrypted at rest.

Technical data: IP address and time of access to stop abuse (for example, limiting sign-in codes), error logs, and page-speed measurements not tied to who you are.

Feedback and bug reports you send: the message, its kind, a screenshot if you attach one (stored as a new image, without location or camera details), the page you were on, your browser and device name, and the app version. If you send it signed out, we also keep the email address you type, so we can reply.

That you agreed to the Terms of use and this Policy: the version you agreed to and when.

To run the app: signing in, working out who pays whom, in-app and email notifications about things that involve you.

To keep it safe and fix it: spotting unusual sign-ins and finding out why something broke.

We do not sell data, use it for advertising, or run ad trackers.

Members of a group see that group's book, balances and each other's names.

Your receiving account number is there for other members to pay you, so members of a group where you are being paid can see it, and it only counts inside that group. If the group owner turns on public sharing, anyone with the shared link can see it, even if the link is forwarded. We say this plainly when you add an account.

Someone holding an invite link can see the group's name before joining.

To help when you ask, an administrator of Chia Hóa Đơn can see a group's name, its lead, how many people and expenses it has, and totals for the whole system. An administrator cannot see what is in a book (expenses, balances). Every time a book is reopened or a group deleted, it is written to a log.

Google, when you choose to sign in with Google.

An email provider, to send sign-in codes, notifications, and the thank-you when you send feedback.

An error-tracking service, which receives technical details when the app fails. Sensitive fields such as account numbers are stripped first.

Firebase Cloud Messaging, by Google, only if you turn on notifications on a device: it receives an identifier for that browser or app, so it knows where to deliver, and the title and text of each notification sent to you.

Google Analytics, only on the pages anyone can open (home, help, privacy, terms) and only if you agree in the notice, to count visits: it receives the page address without anything after a ?, the page or website that sent you there, the page title, the browser and device type, an approximate location (down to the city), whether you press a sign-up button on the home page, and a random identifier kept in a cookie. It is not used on sign-in, inside a group or on a shared link, and advertising features are off.

The hosting provider where the data is stored. These parties process data only to provide their service to us.

One session cookie keeps you signed in and one remembers your language. Light or dark mode and a few small choices are stored in your own browser. No advertising cookies. On the public pages, Google Analytics sets a cookie to count visits only if you agree in the notice; if you decline, no cookie is set. Your choice is remembered in your browser, and you can change it at any time under "Cookie settings" at the foot of the page.

Data is kept while your account is active. Deleted groups are hidden from everyone and not used again.

When your account is deleted at your request, your email, account name, receiving account, friends and notifications are erased, and you are signed out everywhere. In your old groups' books your place stays as a member who has left, under the name you used in that group, so nobody else's balance goes wrong. Groups where you are the only person with an account are deleted with it.

Feedback is kept so we can read it, act on it and reply; screenshots are visible only to administrators. Feedback marked as spam is deleted after 30 days, screenshot included; screenshots of any feedback are deleted after 180 days, while the text is kept. When your account is deleted, feedback you sent while signed in is no longer linked to you. To have a message deleted, including one sent while signed out, email [email protected].

View and edit your name, short name and receiving account in Profile at any time.

To have your account deleted, to get a copy of your data, to withdraw consent or to complain, email [email protected] from the address you sign in with; we will act and reply within the legal time limit.

This policy follows Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP, which details it.

Connections are encrypted (HTTPS), account numbers are encrypted at rest, and sign-in uses no passwords. No system is perfectly secure; if an incident affects your data, we will tell you.

Chia Hóa Đơn is not for people under 16 to sign up on their own. Guests in a group are names typed by members, not accounts.

We update the date at the top. For a significant change you are asked to agree again before you carry on, and we tell you in the app if a change affects how your data is used.