Privacy Policy

Last updated: 14 June 2026

Tabby ("Tabby", "we", "us") is a shared-expense app that lets groups of people track who paid for what and settle up. This policy explains what we collect, why, and your choices. It applies to the Tabby mobile apps (iOS and Android) and the web app at tabby.pixboxlabs.com.

Information we collect

• Account info — your email address, display name, and (optionally) a profile photo. You sign in with an email magic link or with Google.
• Group & expense data — the groups you create or join, expenses, amounts, how they’re split, balances, settlements, notes, and dates.
• Uploads — images you add, such as payment-proof screenshots and receipt photos.
• Device & notifications — a push-notification token for your device, your platform (iOS/Android), and app version, so we can deliver notifications.
• Technical data — basic log and session data (e.g., IP address, session cookies on the web) needed to operate and secure the service.

How we use your information

• To provide the core service: tracking shared expenses, balances, and settlements.
• To send notifications you’ve enabled (e.g., new expenses, reminders, payments).
• To read totals from receipt photos. Receipt images you choose to scan are sent to a third-party AI vision provider solely to extract the amount, merchant, and date; they are not used to train that provider’s models.
• To secure the service, prevent abuse, and meet legal obligations.

How information is shared

• With your groups — expense details you add are visible to the other members of that group, by design.
• Service providers — we use a small number of processors to run Tabby: our hosting infrastructure, an AI vision provider for optional receipt scanning, the Firebase Cloud Messaging (Google) and Apple Push Notification services for notifications, and an email provider for sign-in and notification emails.
• We do not sell your personal data, and we don’t share it for advertising.

Data retention

We keep your data for as long as your account is active. When you delete your account, we delete your personal data and uploads, except where we must retain limited records to comply with law.

Security

Data is encrypted in transit. Access is restricted, and uploads are served only to authorized group members. No system is perfectly secure, but we work to protect your information.

Your rights

You can access, correct, export, or delete your data. You can delete your account and personal data yourself at any time — in the app under You → Privacy & security, or on the web under Settings. See Account deletion for exactly what is removed and retained. For any other request, contact us at the address below and we’ll respond within a reasonable time.

Children

Tabby is not directed to children under 13, and we don’t knowingly collect their data.

Changes

We may update this policy; we’ll revise the “Last updated” date above and, for material changes, notify you in the app.

Contact

Questions or requests: privacy@pixboxlabs.com.