Privacy policy

Information the app uses

When you sign in with Google, Cappih receives sign-in information such as your name, email address, and profile image, along with identifiers and credentials needed for authentication.

Cappih stores the information you enter into the app: Group names, Currency and timezone choices, Budgets, Payments, Expense amounts, Categories, and the people associated with those records. It also stores Membership and Invite records.

Session records can include an IP address, browser information, a sign-in token, and creation and expiry times. The app does not ask for your bank login or card number.

Why this information is used

Sign-in information identifies you and maintains your session. Budget and Membership records let the app calculate Spend and Remaining, assign Expenses to Groups, and determine which records each Member can access.

What other Members can see

Members of a Group can see information shared in that Group, including Member names, the Budget, current Remaining, and Expenses within their Membership. A new Member sees Expenses from the moment they join, rather than earlier entries.

The current Remaining can include spending from before a Member joined. Owners manage Membership and Invite links. Joining one Group does not give access to a Person's other Groups. Only send an Invite link to people you intend to let join.

Cookies and sign-in providers

Cappih uses authentication cookies to maintain signed-in sessions and support sign-in flows. Blocking these cookies can prevent sign-in from working. Signing out ends the session; clearing browser cookies does not delete stored budget records.

Google processes information when you choose Google sign-in under its own Privacy policy. The deployed hosting and database providers, their locations, and any operational logging need to be confirmed in the final notice.

Editing and removing information

You can edit or delete Payments you are allowed to manage. Owners can manage Categories, revoke Invite links, remove Members, and delete their Groups. A Member can leave a Group and lose access, but their Expenses stay in the Group.

The current interface does not provide deletion of your entire sign-in identity or a data export. A verified contact and process for these requests must be added before this notice is finalized.

Retention and data requests

Stored budget information is not removed merely because you close the browser or sign out. Leaving a Group also does not remove the Expenses you contributed.

Retention periods for identity, authentication records, backups, and operational logs have not yet been confirmed. The final notice must confirm applicable legal grounds, request process, and relevant privacy rights for the regions where the service is offered.

Contact and notice updates

The service is operated by cappih.com. A privacy contact is still to be confirmed. This draft should be completed with that contact, the retention schedule, provider information, and an effective date before it is used as a public privacy notice.