Privacy Policy

What we collect

• Your account: your name, email address, time zone and a scrambled (hashed) version of your password. We never store your password itself.
• What you enter: the information you add to Koin, such as companies, paychecks, expenses, accounts, debts and notes. In Bill Split: Parties, Events, participants, Expenses and who paid.
• Activity records: when you sign in and out and when you were last active, security events such as failed sign-in attempts and password changes, and a history of changes to your records.
• Email we send you: invitations, verification links, sign-in codes and Bill Split alerts. A copy of each message is kept for up to 180 days so administrators can confirm what was sent. Links and codes inside those copies are hidden.
• Feedback you send us: the message, plus your name, email, account number and the page you were on, so we can follow up.
• Technical logs: error reports that help us fix problems. They can include the page address and your account number.
• If you sign in with Google: your name and email address from Google. We never receive your Google password.

How we use it

We use your information only to run Koin: to sign you in, show you your own records, calculate your reports and Bill Split balances, send the emails described above, keep the service secure, and fix problems. We do not sell your information and we do not show advertising.

Who can see it

• Your household (Group): people you invite to your Group can see the household records of that Group. Nobody outside it can.
• Your Bill Split Parties: members of a Party can see that Party's Events, Expenses, participants and members. A Party invitation never gives access to anyone's household finances.
• Administrators: system administrators can see account details (name, email, sign-in times), the email log and error logs in order to run and secure the service.
• Service providers: your emails are delivered through an email provider, and the service is hosted on our own servers. They handle your information only to provide those services.
• Legal requests: we may disclose information if the law requires it.

Cookies

Koin uses only the cookies it needs to keep you signed in and secure. There are no advertising or tracking cookies. You are signed out automatically after 15 minutes of inactivity.

How we protect it

• Connections use HTTPS, passwords are hashed, and one-time links and sign-in codes are stored in scrambled form.
• Each household's records are kept separate from every other household's, and Bill Split Parties are separate again.
• Access to the servers and database is limited to what the service needs.

No system is perfectly secure, so please use a strong, unique password and consider adding a passkey.

How long we keep it

We keep your records for as long as your account is open. Sent-email copies are deleted after 180 days, sign-in activity records after 30 days. If you ask us to delete your account, we remove your personal information, except where we must keep something for security or legal reasons.

Your choices

• Update your name, email, time zone and password on the Profile page.
• Choose whether to receive Bill Split emails about changes you make yourself (Profile, or Email preferences in Bill Split).
• Ask to see a copy of your information, correct it, or delete your account by writing to [email protected].

Children

Koin is not meant for children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change this policy we will update the date at the top. If a change is significant we will tell you in the app or by email.

Contact

Questions about this policy or privacy? Email [email protected]. To see, correct or delete your information, email [email protected].