Privacy policy
JuntoCash · in force from 13 October 2026
Last updated: 13 October 2026
JuntoCash is a budgeting and bill-splitting app made by Teko Labs, an independent software studio in Ireland ("we"). We decide how the data below is used, which makes us its controller. Questions and requests: hello@tekolabs.dev.
In short
- Without an account, everything stays on your phone, with no backup. We never see it.
- With an account, everything you keep in the app is end-to-end encrypted. Our servers store it and pass it between your phones, and between the people in a group you share, but can't read it.
- No ads, no selling data, no tracking you across apps.
- Crash reports hold no amounts, names or emails. They can't be turned off.
Without an account
Your transactions, categories, limits, groups and the names in them are stored only on your phone. They aren't backed up to Google, so if you lose the phone or uninstall the app, they're gone. Profile → Erase all data deletes them.
App lock uses your phone's fingerprint, face or screen lock. The app only learns whether unlocking worked.
With an account
An account keeps what you have in the app and brings it to your other phones, and you need one to share a group. About you, we keep:
- your email address, and your password as a hash that can't be turned back into it;
- the name you give when you sign up;
- if you sign in with Google, the name, email address and profile picture link Google shares. We use the name and email;
- your sign-in sessions, with the IP address and device they started from.
We use them to sign you in, keep your account safe and send emails about it, such as confirming your address or resetting your password. We don't send marketing emails.
What your account keeps
With an account, your phone encrypts what you have in the app before sending it: your own expenses, income and savings, your categories, limits, repeating expenses and reminders, your home currency, and every group, with its name, the people in it, amounts, descriptions, who paid and who owes. Only your own phones hold the keys to what is yours alone. A group you share is also read by the phones of the people in it. Our servers store the encrypted data and pass it on, but can't read it.
Our servers can see:
- which of your phones use your account, and when one signed out or was removed;
- which accounts' phones are in which groups, and who added them;
- when things were sent, how many and how big, for what is yours alone as well as for shared groups;
- your phones' public keys and certificates, which let other members check that changes come from you;
- when invite links end and whether they're turned off, and when someone asked to join.
An invite link's secret is the part after "#", which phones never send to our servers, and the name someone asks to join as is encrypted too. Anyone let into a group sees its whole history, including expenses from before they joined.
Your recovery code gets your data back on a new phone. You save it when you make your account. It never leaves your hands; we store only backups encrypted with it. Without the code and a phone that is still signed in, nobody, including us, can open what your account keeps. A group you share is kept by its other members, who can invite you again.
Crash reports
When the app crashes or hits an error, it sends a crash report to Sentry, our crash-reporting service, so we can fix what broke. Nothing is sent while the app works normally. Crash reports can't be turned off in the app.
A crash report contains:
- the error, and where in the app's code it happened;
- details about your phone, such as its model, Android version, language and time zone, and the app's version;
- the screens you opened and the actions you took just before, such as "opened Spending" or "added an expense", without amounts or anything you typed;
- a random ID created when the app was installed, which isn't linked to your name, email or account.
It never contains your transactions, amounts, descriptions, category or group names, the people you split with, your email, your account or your IP address. Before a report leaves your phone, anything that looks like an email address, an amount or text you typed is masked.
Crash reports are sent with or without an account, and kept for 30 days.
Other people in your groups
When you add someone to a group, their name and the expenses you split with them are stored on your phone and, in a shared group, encrypted for its members. Add only what they'd expect you to note about shared bills.
Who else handles data
These service providers process data only on our instructions, under data processing agreements:
| Provider | For | Where |
|---|---|---|
| Supabase | Accounts, sign-in, and storing what accounts keep, encrypted, and passing it between phones | Ireland |
| Sentry | Crash reports | Frankfurt, Germany |
| Google (Firebase Cloud Messaging) | Waking your phone when a group you share has news, if "Group notifications" is on | Google’s data centres, in and outside the EU |
Supabase and Sentry are US companies. If their staff reach data from the US, the EU's standard contractual clauses protect it, and for Sentry the EU-US Data Privacy Framework too. Google can handle the identifier for group notifications outside the EU, under its data processing terms for Firebase, which rely on the EU-US Data Privacy Framework and the standard contractual clauses.
If "Group notifications" is on, Google's push service wakes your phone when someone else changes a group you share. The message it carries is a wake-up and nothing more: it holds no name, amount or text. Your phone then fetches the change and writes the notification itself. For this Google keeps an identifier for the app on your phone, until you turn group notifications off, sign out or delete your account.
Google runs Google Play and, if you use it, Sign in with Google, under Google's own privacy policy. Google Play gives us statistics and anonymous crash traces that don't identify you.
We don't sell your data or give it to anyone else, unless the law requires it, such as a valid court order.
This website
The pages at tekolabs.dev/juntocash, this one among them, are served by GitHub Pages. Like any web server, it sees the internet address of the device that asks for a page, and GitHub, a US company, logs that address for security under its own privacy statement. The pages set no cookies, count no visits and load nothing from other sites.
An invitation to a group is a link to one of these pages. On a phone with the app, the link opens the app and no page is asked for. On a phone without it, the page says where to get the app. The invitation itself is the part of the link after the "#", which a browser never sends to a server, so neither GitHub nor we receive it.
Why we're allowed to use it
- To provide JuntoCash (your account, what it keeps and emails about your account): it's necessary for our agreement with you. GDPR art. 6(1)(b); LGPD art. 7, V.
- To keep the service secure and fix crashes (sessions, request logs, crash reports): our legitimate interest in an app that's safe and works. GDPR art. 6(1)(f); LGPD art. 7, IX. You can object. A crash report carries nothing that says it is yours, so we can't stop or delete yours alone: if you object to them, stop using the app, and the reports it sent are gone within 30 days.
- To meet legal obligations, such as a valid court order. GDPR art. 6(1)(c); LGPD art. 7, II.
How long we keep it
- On your phone: until you erase it, sign out or uninstall the app. Signing out takes what your account keeps off that phone, once all of it has been sent.
- Your account, and what it alone keeps: until you delete it. Backup copies are gone within 7 days after that.
- Sign-in sessions: until you sign out or they expire. Request logs: up to 7 days.
- Shared groups: while the group exists, because new members and new phones download its history. If you delete your account, what you added stays with the other members, like a message you sent to a group chat. It stays encrypted and is no longer linked to your account.
- Crash reports: 30 days.
Deleting your account
In the app: Profile → Account → Delete account. It deletes your account, what your account alone kept on our servers, and the app's data on that phone. What you added to a group you share stays with its other members, as above. Without the app: https://tekolabs.dev/juntocash/delete-account.html.
Your rights
You can ask for a copy of your data, and ask us to correct it, delete it, limit how we use it, stop using it, or give it to you in a format you can move elsewhere. Write to hello@tekolabs.dev; we answer within 30 days. Data that stays on your phone never reaches us, so you manage it in the app.
You can also complain to Ireland's Data Protection Commission (dataprotection.ie) or to the data protection authority where you live.
In the UK, that's the Information Commissioner's Office (ico.org.uk).
In Brazil, the LGPD also gives you the right to confirm we process your data, to have unnecessary data anonymized, blocked or deleted, to know who we share it with, and to petition the ANPD (gov.br/anpd). Our contact channel for your data is hello@tekolabs.dev. Your data can be kept in the EU because the ANPD recognizes the EU's protection as adequate (Resolução CD/ANPD nº 32/2026).
Age
JuntoCash is for people 18 and older.
Security
What an account keeps is end-to-end encrypted, the keys stay in your phone's secure hardware, and every connection is encrypted. No system is perfectly safe: if a breach puts you at risk, we'll tell you.
Changes
We'll post changes here with a new date, and tell you in the app before a change that matters takes effect. Earlier versions: https://github.com/teko-labs/juntocash/commits/main/privacy.html.
Contact
Teko Labs, Ireland · hello@tekolabs.dev