Privacy Policy

Fair Dome is operated by RONSTECH LLC ("we," "our," or "us"), a limited liability company registered in the State of Florida. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address, display name, and authentication credentials. If you sign in through Google or Apple, we receive your name and email address from those services.
• Household Data: Information about your household members, including names and monthly income (used solely for proportional expense calculations).
• Invitations: When you invite a partner by email, we store that person's email address with the invitation. They may not have an account. The invitation is cancelled if you close your account.
• Expense Data: Details of expenses you enter, including amounts, categories, descriptions, dates, and which household member paid. We do not collect or store credit card or bank account numbers.
• Receipt Images: If you use receipt scanning, we process the image you capture or choose to extract expense information. In some cases the image is sent to a third-party reading service (see Section 1.2). The App no longer stores that image: it is not uploaded to our storage and not attached to the expense. Receipt images uploaded by earlier versions of the App may still be held; see Section 7.
• Shopping Lists: Items and store preferences you enter when using the Smart Shopping Itinerary feature.
• Payment Links: If you send someone a payment link, they can open it without an account and say they have paid. They may type a name and a note, and we store both with the expense. Anything you type as payment instructions on the link is stored too.

1.2 Information Collected Automatically

• Crash and Diagnostic Data: If the App crashes or hits an error, Firebase Crashlytics (Google) receives a crash report with technical details about the device and the App. We do not give it your account ID, so these reports are not tied to your account. The App has no advertising or analytics tool of its own and does not record which screens you open.
• AI Feature Usage Counters: We count how often each household and each person uses the AI features, so we can enforce usage limits. The counts are tied to your account.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used to send you notifications about household activities. Each token is stored with your account ID. You can disable push notifications in your device settings at any time.
• Server Request Logs: Our servers keep request logs for security and diagnostics. A request log line records the time, the address requested, and the IP address the request came from, without your account ID. A few diagnostic entries (for example about a purchase or a shopping-list sync) include an account or household ID so we can fix problems. We do not use logs to follow what you do, and they are kept for a limited time.
• Location Data: With your explicit permission, we collect your device's precise geographic location when you plan a shopping trip, to provide Smart Shopping Route recommendations. The starting point you generated a route from is saved with that route in your household, so the route can be reopened and its distances still make sense; other members of your household can see the route. It is deleted when the route is deleted. The point is also sent to Google Places to find nearby stores. We do not track your location in the background. You can revoke location access at any time through your device settings.
• Camera and Photos: If you use the receipt scanning feature, we access your device camera, or the photo you choose from your photo library, to extract expense data. Text is first read on your device. The image is no longer stored by the App once the expense is created. If the on-device reading finds no text, the AI step fails, or the result is not reliable enough, the whole image is sent to our receipt-reading provider, Veryfi (see Section 5), for that one scan. Veryfi may keep the image under its own privacy policy. Once the photo has gone to Veryfi, we cannot delete it from there. Earlier versions of the App did store receipt images in Firebase Storage; see Section 7 for what that means for you.

1.3 People You Split a Bill With (Guests)

The split-with-friends feature lets a subscriber share one expense with people who have no Fair Dome account. A person who opens the link or scans the code is signed in to the App as an anonymous guest: no email address or password is asked for. For that, we collect:

• An anonymous session identifier created by Firebase Authentication, which lets the guest return to the same split on the same device.
• The name the guest types to join.
• Their monthly income, only when the split is by income. It is used to work out that guest's share and for nothing else. It is not shown to anyone, including the person who created the split. A guest sees only their own share and the total.
• Payment state: whether the guest has said they sent their share and whether that was confirmed.

Who sees it. The person who created the split sees each guest's name, share and payment state. Anyone holding the split link, before a seat is taken, sees a preview of the split: its name, total, how it is divided and how many people have joined. Other guests are not shown to each other.

How long it is kept. Guest data is kept for as long as the split exists, and is not used for anything else. A guest can ask us to delete their data from a split at roniel.sanchez@ronstechnologies.com, and the person who created the split can remove a guest from it. Guests are not part of any household and do not appear in anyone's balances.

1.4 No Tracking, No Ads

We do not track you. We do not show advertising, we do not use advertising identifiers, and we do not link your data with data from other companies for advertising.

The App Store privacy label for Fair Dome says the same. Data linked to your account: name, email address, financial information (incomes, expenses and payments), precise location, user content, user ID, device ID (push notification tokens), purchases, and other usage data (the AI feature counters). Data not linked to your account: photos (receipt images sent to Veryfi), crash data, performance and other diagnostic data, product interaction, and other technical data (IP addresses in server logs).

1.5 The Fair Dome Website

Our website, fairdome.vercel.app, asks you for nothing: it has no forms and no account. It is hosted by Vercel, which counts visits with Vercel Web Analytics. That sets no cookies and does not identify you; we see how many people visit each page, not who they are.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Fair Dome App
• Calculate proportional expense shares based on household member incomes
• Sync your data across devices in real time
• Send push notifications about expense updates, settlements, and task assignments
• Process subscription purchases through RevenueCat and the Apple App Store or Google Play Store
• Process receipt images to automatically extract expense data (AI-powered)
• Generate optimized shopping itineraries based on your location and shopping list
• Respond to your requests and provide customer support
• Detect and prevent fraud or abuse of the service

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal grounds under the General Data Protection Regulation (GDPR):

• Performance of Contract: Processing your account, household, expense, and settlement data is necessary to provide the Fair Dome service you signed up for.
• Consent: We process location data, camera/photo access, receipt images sent to third-party AI services, and push notifications based on your explicit consent. You may withdraw consent at any time through your device settings or by contacting us.
• Legitimate Interest: We process crash and diagnostic data, server logs and usage counters for fraud prevention, service security, error diagnosis, and enforcing usage limits, where our interests do not override your fundamental rights.

4. Data Storage, Processing, and Security

Your data is stored and processed using the following services:

• Neon (Postgres, hosted on Amazon Web Services in Ohio, United States): Stores your household, member, expense, share, settlement, task, shopping and subscription data, encrypted at rest and in transit. This is where the record of your money lives.
• Fly.io (Ashburn, Virginia, United States): Runs the application programming interface that every request from the App goes through. It is the only thing that reads or writes the database; the App itself has no direct access.
• Firebase Authentication (Google): Manages your account credentials securely, including Google Sign-In and Apple Sign-In integrations. Your account identifier from this service is what links you to your household data.
• Firebase Storage (Google): Holds receipt images uploaded by earlier versions of the App. Current versions of the App do not upload to it.
• Firebase Cloud Messaging (Google): Delivers push notifications to your device.

Until 1 September 2026 household, expense, settlement and task data were stored in Cloud Firestore (Google). That data was migrated to Neon and the Firestore copy is now a read-only historical archive that the App no longer writes to.

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal information to third parties, and we do not track you across other companies' apps or websites. We may share your data with the following parties:

• Household Members: Other members of your household can see shared expense data, balances, task assignments, and settlement information. Income data you provide is used for proportional calculations and the resulting share percentages are visible to household members.
• The person who created a split you joined as a guest: they see your name, your share and whether you have paid (Section 1.3). They do not see your income.
• Service Providers: Third-party services that help us operate the App:
  • Neon: The Postgres database that holds your household data.
  • Fly.io: Hosting for the interface between the App and that database.
  • Firebase / Google Cloud Platform: Authentication, push notifications, the receipt images held from earlier versions of the App, crash reporting, and the nightly job that creates recurring expenses.
  • RevenueCat: Subscription management. Identifies your purchases by your Fair Dome account ID, and receives your purchase information to manage your subscription status. We do not send it your name or email address.
  • Apple App Store / Google Play Store: App distribution and in-app purchase payment processing.
  • OpenAI: AI-powered receipt text extraction, shopping list optimization and monthly spending insights. Receives text from the AI features, for example receipt text and shopping list contents, and—for monthly insights only—the first names of your household members alongside what each of them spent. It does not receive your email address, your account identifier, or your bank or card details. Requests reach OpenAI from our own server; the App never holds a key to it. Under OpenAI's API policy, OpenAI may keep this data for up to 30 days, and it does not use it to train its models.
  • Veryfi: Receipt OCR fallback service. Receives the whole receipt image when on-device reading finds no text, the AI step fails, or the result is not reliable enough. Veryfi may keep the image under its own privacy policy. A receipt can show a name or part of a card number, so scan receipts with care.
  • Google Places API: Receives the point you plan a trip from, and returns store location and address data used to generate Smart Shopping Itinerary routes.
  • Google ML Kit: On-device text recognition from receipt images. The text on the receipt is read on your device. Google's ML Kit software may still send usage and diagnostic information to Google.
• People you send a payment link to: If you create a link to an expense, anyone holding that link sees that one expense — its name, date, amount, who paid, and the first names of the members who share it with what each still owes. No account is needed to open it, so treat the address itself as the key and send it only to the person concerned. You can revoke a link at any time from the expense it belongs to. No other expense, no email address, and no household identifier is shown on that page.
• Legal Requirements: We may disclose your information when required by law, subpoena, or court order, or to protect our rights, property, or safety.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate or incomplete data.
• Deletion: Close your account in the App (Settings, Delete Account), or ask us to delete data we hold about you, including a receipt image from an earlier version of the App or your data as a guest of a split. Section 7 sets out exactly what closing an account removes and what it cannot.
• Data Portability: Request a machine-readable copy of your data to transfer to another service.
• Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Object to Processing: Object to processing of your data based on legitimate interests.
• Withdraw Consent: Withdraw consent for location access, camera access, push notifications, or AI-based processing at any time through your device settings or by contacting us. Withdrawal does not affect the lawfulness of prior processing.
• Opt-out of Notifications: Disable push notifications in your device settings at any time.

To exercise any of these rights, contact us at roniel.sanchez@ronstechnologies.com. We will respond within 30 days. We may need to verify your identity before processing your request.

6.1 For EEA/UK Residents

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not adequately addressed your concerns.

6.2 For California Residents (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share data.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sale of Personal Information: We do not sell your personal information to third parties, and we have not done so in the preceding 12 months.

To submit a CCPA request, contact us at roniel.sanchez@ronstechnologies.com.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide you the service.

Leaving a household. Any member can leave a household from the household screen, at any time. If the member who created the household leaves, the household passes to the member who has been in it longest. After you leave you no longer see the household, and it no longer counts you in new expenses. The expenses, shares and payments you took part in stay in the household's records, because they are part of what the other members owe and are owed.

What closing your account does, exactly. This happens immediately, when you confirm in the App:

• You leave every household you belong to, and any invitations you sent are cancelled.
• Your devices are forgotten and stop receiving notifications.
• Your profile is cleared and your sign-in is deleted.
• Your email address is replaced by a placeholder that belongs to no mailbox, so it is no longer held against your name, and the same address can be used again to register a new account.
• Your name in every household you were ever in is replaced with “Former member” and your recorded monthly income is set to zero.

What it cannot do is remove you from the shared record. Every expense, share and payment in a household names who paid it, and those records belong to the other members as much as to you: deleting your half would change what everybody else is owed and leave amounts that no longer add up. So the expenses, shares and settlements of a household remain with that household, now attached to an anonymised member. A name you typed into an expense description, or a name copied onto a past share when it was created, is part of that record and may remain. You can ask us what remains.

If you want the shared record itself removed, every member of the household has to ask for it, and we will delete the household and everything in it. Write to us and we will confirm before anything is deleted.

Your subscription is held by the App Store or Google Play, not by us. Closing your account does not cancel it; cancel it in your device's subscription settings.

Receipt images. Current versions of the App do not store receipt images. Earlier versions uploaded them to Firebase Storage, attached to an expense, readable only by members of that household, and the images uploaded then may still be held: deleting an expense or closing an account did not remove them. We have not yet deleted them. To have yours deleted, contact roniel.sanchez@ronstechnologies.com from the email address of your account, and we will confirm once they are removed.

Server logs. Request logs, which include IP addresses, are kept for a limited time. We use them only for security and to fix problems, never to build a profile of you.

Guests of a split. Held for as long as the split exists, as set out in Section 1.3, and deleted on request.

8. Children's Privacy

Fair Dome is not intended for use by anyone under the age of 16 in the European Economic Area or under the age of 13 in the United States. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child below the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at roniel.sanchez@ronstechnologies.com.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers (including Neon, Amazon Web Services, Fly.io, Google, OpenAI, RevenueCat, and Veryfi) operate. These countries may have data protection laws that differ from those of your country. When we transfer data outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.

10. Automated Decision-Making

Fair Dome uses AI-powered features for receipt scanning (automatic text extraction) and smart shopping itinerary optimization. These automated processes extract data from receipt images and suggest shopping routes, but they do not make decisions that produce legal effects or similarly significant effects on you. You can always manually review and edit any AI-extracted data before it is saved.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your personal rights, we will also notify you directly via the email address associated with your account.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending a notification through the App. Your continued use of the App after the effective date of the revised policy constitutes your acceptance of the changes.

13. Contact Us