Privacy Policy

NoBaaki is a bill-splitting app operated from India. Questions about this policy, or a request to delete your data, go to privacy@nobaaki.in.

• Photographs of bills. When you scan a receipt, the text is recognised on your device using the recognition built into Android and iOS. The image is never uploaded, and there is no upload endpoint in that path.
• The text of your payment notifications (Android only). If you turn on automatic confirmation, only notifications from Google Pay, PhonePe, Paytm and BHIM are inspected — that filter is applied in native code before anything reaches the app. The text is read and matched on your device and is never transmitted.
• The names of shops you pay (Android only). If you additionally turn on expense suggestions, the shop name in those same notifications is read on your device to work out whether a payment looks like a bill. It is held in memory for up to a day so we can show it to you when you next open the app, is never written to storage, and is discarded when the app is closed by the system. Payments to people are ignored entirely.
• Your contacts. Read only if you tap Find friends from my contacts in the app, and only on your phone. Each number is hashed there with a one-way function and only those digests are sent, to be checked against people who verified their own number. No name, number or list is ever transmitted, and the server keeps none of the digests. On the web, Add by phone number hashes the one number you type in the same way, in your browser.
• What you say. If you use Say it, the speech recognition built into your phone (Apple's or Google's) turns your words into text — on the device itself where the platform supports it. NoBaaki receives the text, never audio, and nothing is recorded or stored. Your phone maker's own privacy terms govern their speech service.
• Your location. Never requested and never read. The app has no reason to know it.
• Advertising identifiers. No advertising, analytics, attribution or crash-reporting code from any other company is in this app. Nothing follows you across other apps.

• Your expenses — descriptions, amounts, who paid and who owes. This is the shared list itself. The people in your group can see it, because that is what the product is.
• Your name, email and phone number — so people can find you and add you to a group.
• Your UPI ID, if you enter one — so people can pay you. It is encrypted where it is stored.
• Items from a receipt once you save it — the lines you reviewed and corrected. The text, never the photograph.
• When you confirm a payment — which settlement it was, and the UPI reference number, so a payment can be traced later if anybody disagrees about it. Not the notification it came from.
• A suggested expense, only once you accept it — the description and amount you confirmed, in the group you chose. Suggestions you ignore or dismiss are never sent.
• Basic product events — that an expense was added or a settlement confirmed, so we can tell whether the product works. These are recorded on our own servers, not by a third party.

On Android the app can ask for notification access. Android's own dialog says the app will be able to read all your notifications, because that is the only permission Android offers — there is no narrower one.

What the app actually does with it is narrower, and enforced in code: notifications from any package other than Google Pay, PhonePe, Paytm and BHIM are discarded before the app sees them. It is used for two things, each with its own switch, both off until you turn them on: confirming a payment you started in the app, and suggesting an expense when you pay a shop.

You can withdraw it at any time in Android Settings → Notification access. Everything else in the app keeps working.

• The people in your groups. That is the point of a shared ledger.
• Anybody you send a share link to. Guest balance links and collection rosters are readable by whoever holds the link. You choose whether to create one, and you can withdraw it.
• Our hosting and infrastructure providers, who process data on our instructions in order to run the service.
• Nobody else. We do not sell your data, and we do not share it for advertising.

Your expenses and groups are kept while your account exists, because a ledger that forgets is not a ledger. Deleted expenses are retained in a recoverable form so that a deletion can be explained later; edit history is append-only for the same reason.

You can delete your account yourself from Profile → Delete account in the app or on the web — see how to delete your account. We remove your personal details and disconnect you from your groups. Amounts that other people still owe or are owed remain in their ledgers under “Deleted user”, because deleting one side of a shared debt would silently change what somebody else is owed.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to privacy@nobaaki.in. Paid accounts can export their expenses as a CSV from the app at any time without asking us.

The app is not intended for anybody under 13, and we do not knowingly collect their data.

If what the app does changes, this page changes with it, and the date at the top changes too. It describes the current behaviour of the software — not our intentions for it.