Privacy Policy

What we collect

fenpay is built around "no sign-up": you can use every feature without providing your name, email, phone number, or any personal data.

When you use the service we create and store: an anonymous account identifier (auto-generated and not traceable to your real identity), the display name and payment details you enter in a group, and the group's expense records (expenses, splits, settlements).

If you choose to link a Google account (to recover your identity across devices), we additionally receive and store your Google email. It's the only piece of data that could identify you, and it's entirely your choice.

Cookies and browser storage

We use cookies and browser localStorage to keep you signed in (your session) — this is what makes "no sign-up, but we remember you" possible, and is strictly necessary for the service to work. We also remember your light/dark mode and language preferences in the browser.

We use Google Analytics to understand overall usage (such as page views and how often features like creating groups or adding expenses are used). It sets a cookie with an anonymous identifier. These statistics are analyzed in anonymous aggregate only — never linked to your account or expense data, never used to identify you, and never used for advertising. You can block it with browser settings, tracking protection, or the Google Analytics opt-out add-on without affecting the service at all.

If we ever introduce advertising, we will revise this policy, update the effective date, and disclose the ad cookies on this page before they go live.

Data retention and deletion

Group and expense data is kept so that all members can review it at any time.

Anonymous accounts inactive for more than 30 days are cleaned up automatically. Cleanup removes only the account itself: groups and expenses remain intact, and you can re-claim your name by opening the shared link again. Accounts linked to Google are never cleaned up.

Third-party services

Data storage and authentication are provided by Supabase (the database runs on its cloud infrastructure); the site is served by Cloudflare Workers. Both act purely as infrastructure and don't use your data for anything else.

When you link a Google account, the authorization flow is handled by Google; we only receive your email and never access your contacts, Drive, or other Google services. Traffic statistics are provided by Google Analytics (see the Cookies section).

We never sell or trade any of your data.

Policy updates

When this policy changes, we update this page and the effective date at the top. Significant changes (such as introducing analytics or advertising services) are disclosed on this page before they take effect.