Wallyt privacy policy
On this page
Wallyt is an app for splitting shared costs. It is made by Leeman Software, the product studio of Leeman Group LLC (“we”, “us”). This policy covers the Wallyt apps for Android and iPhone and Wallyt on the web. It explains what we collect, why, who can see it, and how you can delete it.
In short: we collect what Wallyt needs to work: your name, email, the groups you’re in and the expenses you record. The people in your groups can see what you share with them. We don’t show ads, we don’t use analytics or tracking tools, and we never sell your data.
What we collect#
Your account
- Email address, used to sign you in and to match you to groups you’ve been added to.
- Name, as you want it shown to the people in your groups.
- Photo, if you choose to add one. We crop it to a square and resize it before it is uploaded.
- Sign-in details. If you sign in with Google, we receive your name, email address, Google account ID and profile photo from Google. If you sign in with Apple, we receive your name and email address from Apple. We never receive or store a password.
Your groups and expenses
- Group names and group photos.
- Expenses and payments: descriptions, notes, amounts, currencies, dates, who paid and how each one is split.
- A history of changes to each expense: who changed it, when, and what changed.
- For repeating expenses, your time zone offset, so each copy is added on the right day where you live.
- If you import a Splitwise export, the file name and the expenses in it. The file is read on your device and only the expenses are sent to us.
People you add
When you add someone to a group, we store the name you give them and, if you add them from your contacts, their email address. If you are the group’s owner or an admin, the contact’s photo is saved as their photo in that group. When that person later joins Wallyt with the same email address, they take over their place in the group and can change their own name and photo.
Contacts on your phone
Wallyt asks for access to your contacts only when you choose to add people from them, and it only ever reads them. The list is shown on your phone. Nothing is uploaded except the people you pick, as described above. Phone numbers are never sent to us: when you text someone an invite, the number goes straight to your phone’s messaging app.
Photos on your phone
Wallyt can open your photo library so you can choose a picture for yourself, someone in a group, or a group. Only the photo you choose is uploaded. Wallyt does not use your camera.
What we don’t collect
We don’t collect your location, your bank or card details, your device’s advertising ID, or information about other apps. Wallyt doesn’t move money: it records what people owe each other, and you settle up however you like.
How we use it#
- To run Wallyt: show your groups, work out balances, add repeating expenses and keep the history.
- To sign you in, including emailing you sign-in codes.
- To convert between currencies at the right day’s exchange rate.
- To keep Wallyt secure, for example by limiting repeated attempts to guess invite links.
- To answer you when you contact us.
We don’t use your data for advertising, we don’t build profiles of you, and we don’t use it to train AI models.
Who can see your information#
- People in your groups can see your name, email address and photo, and every expense, payment, note and change in the groups you share.
- Anyone with a group’s invite link can see a preview of that group before joining: its name, photo and currency, and the names and photos of people in it. Email addresses are never shown in the preview. Only share an invite link with people you want in the group.
- Photos are stored at addresses that can’t be guessed, but anyone who has the address of a photo can open it.
- Us, when we need to: to keep Wallyt running, to fix a problem you’ve asked us about, or when the law requires it.
Who we share it with#
We never sell or rent your personal information. We use a small number of service providers:
| Provider | Why | What they receive |
|---|---|---|
| Our hosting provider | Runs the servers Wallyt’s data is stored on | Everything described in this policy, stored on our behalf |
| Our email delivery provider | Sends your sign-in codes | Your email address and the code |
| Sign in with Google, if you use it | A sign-in token, which we check with Google | |
| Apple | Sign in with Apple, if you use it | Your sign-in request |
| Frankfurter and Currency API | Daily exchange rates | Only currency codes and dates, never anything about you |
We may also disclose information if the law requires it, or to protect the safety of our users or the public. If Leeman Group LLC is ever sold or merged, Wallyt’s data would move with it, and this policy would keep applying until you’re told otherwise.
What’s stored on your device#
Wallyt keeps your sign-in session in your phone’s secure storage, and a few preferences in the app’s own storage: the last email you typed, the group you last opened, your appearance setting, a pending invite, and recent exchange rates. On the web, these are kept in your browser’s local storage. Wallyt doesn’t use advertising or tracking cookies.
How long we keep it#
We keep your account for as long as you have it. Groups, expenses and their history are kept until the group is deleted. When someone leaves or is removed from a group, their name and email address stay with that group’s past expenses, so everyone else’s balances remain correct.
When you delete your account, we delete it within 30 days. See Delete your Wallyt account for exactly what is removed and what stays with your groups.
Security#
Everything between Wallyt and our servers is encrypted in transit. Wallyt has no passwords to leak: you sign in with a one-time code that expires after 10 minutes, or with Google or Apple. Groups are visible only to their members. Only a group’s owner and admins can remove people, and only its owner can delete it. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.
Children#
Wallyt is not meant for children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has given us information, email hello@leemansoftware.com and we will delete it.
Your choices and rights#
- You can change your name and photo in Wallyt at any time, from Account.
- You can leave a group at any time.
- You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing hello@leemansoftware.com from the email address you sign in with.
- You can delete your account. See Delete your Wallyt account.
Depending on where you live, privacy laws such as the California Consumer Privacy Act or the GDPR may give you further rights, including the right to object to how we use your data and to complain to a regulator. We honor these requests wherever you live, and we will never treat you differently for making one. We reply within 30 days.
Changes to this policy#
If we change this policy, we’ll update the date at the top. If a change affects how we use your information in a meaningful way, we’ll let you know by email or in Wallyt before it takes effect.
Contact#
Leeman Software, the product studio of Leeman Group LLC
hello@leemansoftware.com