Privacy Policy

• Bilog keeps the payment records you enter. It never moves money and never connects to your bank.
• We don't sell your data, we don't show ads, and we don't use advertising trackers.
• You can see, download, correct and delete your data. Deleting your account deletes it.

About you, from you:

• Account details: your name, nickname, handle, email address, password (stored only as a secure hash by our authentication provider) and profile photo. If you sign in with Google or Apple, we receive your name and email from them.
• If you create a passkey, our authentication provider stores its public key, credential identifier and registration/use metadata. Your device or password manager keeps the private key. We never receive your fingerprint, facial scan or device PIN.
• Your payment accounts: bank or e-wallet name, account number, account holder name, QR code images and notes you add.
• Your records: payments you log (amount, date, purpose, notes, the contact or group involved, receipt images), Bilogs (groups) and their shared expenses and settlements, and your personal finance records in Nukleo (accounts, categories, budgets, loans, installment plans, investments, savings goals).
• Feedback and bug reports you send, including any screenshot you attach.

About other people, from you:

When you save a contact, you record that person's name and the payment details you have for them, and the payments between you. These people may never have used Bilog. We keep this information only so you can keep your own records; we never contact them because you saved them, and we never combine it across users. If they later join Bilog and link with you, they see the shared records between you.

Automatically:

• Sign-in sessions (a secure cookie that keeps you signed in).
• If you turn on notifications, a push subscription for your device.
• Technical error reports (the page, the error and the time) so we can fix problems.
• Account-linked daily markers of signed-in app opens and saved records, used internally to understand onboarding and returning use. These contain no financial amounts, record contents, page URLs or device identifiers. Daily markers are kept for 90 days and removed when you delete your account.
• Your IP address when you sign in with your handle, used only to limit repeated attempts.
• Anonymous, cookieless usage and performance statistics (page views and load times) through Vercel Analytics and Speed Insights. These don't identify you and aren't used for advertising.

We do not collect your device contact list, your location, biometrics, government IDs, or your bank or e-wallet login details.

• To provide Bilog: store your records, show them to the people you choose to share with, send the notifications and emails you've turned on, and keep your account secure (our contract with you).
• To keep Bilog safe: prevent abuse, fraud and spam, and fix errors (our legitimate interest, and our legal obligations).
• To keep a record of what you've agreed to, such as these terms (legal obligation).

We don't use your data for advertising, credit scoring, or lending decisions, and we don't sell or rent it to anyone.

• People you share with: a linked contact sees the payments between you; Bilog members see that group's shared expenses; anyone you send a proof link to sees that one payment.
• The public: your profile page (name, nickname, handle, photo) is visible to anyone with its link. A payment account is visible publicly only while you are sharing its link, and only for as long as that link is active.
• Our service providers, who process data for us under contract and only on our instructions: Supabase (database, sign-in and file storage), Vercel (hosting, anonymous analytics), Resend (sending email), and the push service built into your browser or phone (Apple, Google or Mozilla) for notifications. Google and Apple handle sign-in if you choose them.
• Authorities, when the law requires it, or to protect someone's safety or rights.

Your data is stored and processed in Singapore, by the providers above. When we transfer data outside the Philippines, we stay responsible for it and require our providers to protect it to the standard the Data Privacy Act requires.

• Your account data stays until you delete it or your account.
• When you delete your account, your profile, accounts, contacts, records and files are deleted. Shared records that also belong to someone else (for example, their own copy of a payment with you) stay in their account, but are no longer linked to you. A Bilog you own that still has members passes to its longest-standing member, with your past entries in it kept under your name.
• Technical logs and sign-in attempt records are kept only as long as needed for security and troubleshooting.
• Backups held by our database provider are overwritten on their regular schedule.

All traffic is encrypted (HTTPS), and data is encrypted at rest by our providers. Every record is protected so that only its owner, and the people it's shared with, can read it. Account numbers are masked in the app until you choose to show them. No system is perfectly secure; if a breach affects your data, we will notify you and the National Privacy Commission as the law requires.

Under the Data Privacy Act, you have the right to:

• be informed about how your data is processed (this policy);
• access your data, and get a copy of it (Settings → Download my data);
• correct inaccurate data (edit it in the app);
• object to processing, and withdraw consent where processing relies on it;
• have your data erased or blocked (Settings → Delete my account, or see account deletion);
• data portability;
• claim damages, and complain to the National Privacy Commission (privacy.gov.ph).

If someone saved your details in their Bilog without your agreement, email us and we'll help. To exercise any right, email hello@getbilog.app. We reply within 30 days.

Bilog is for people 18 and over. We don't knowingly collect data from children; if you believe a child has an account, tell us and we'll delete it.

If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.

Data protection questions and requests: hello@getbilog.app. See also our Terms of Service.