No passwords
You sign in with Google or Apple. Fetti Up never sees or stores a password.
Legal
Fetti Up Privacy Policy
Last updated: July 13, 2026
Fetti Up helps you split a bill and get paid back. We try to collect as little as possible, and we never touch your money or your payment logins. This page explains, in plain language, what we store and why.
The short version
No payment credentials
Fetti Up never stores card numbers, bank details, or a Venmo or Cash App login. Payments are completed with the provider or method you choose, and Fetti Up never moves the money.
Your data is yours
You can permanently delete your account and the data tied to it from inside the app at any time. The deletion section below explains the scope.
What we collect
Account info
We receive your name, email address, and, from Google only, profile photo when you sign in. If you use Apple's Hide My Email, we receive only the relay address, and Apple does not provide a profile photo. We assign an internal account ID so your bills can sync across devices.
Your payment handles
We store the Venmo handle, Cash App $cashtag, and/or Zelle alias, such as an email address or phone number, that you choose to save so they can be included on bills. These are payment identifiers you choose to provide for repayment, not login credentials.
Bills you create
We store item names and amounts, the names of people on the bill, tax, tip, fees, notes you add, and, if you add it, the merchant name and address.
Receipt photos you scan
The image you choose to scan is sent to our AI provider to read the line items. A downscaled image may be stored with that bill so you can view it later.
Auto-detect repayments, optional and off by default
If you set up Gmail forwarding to your Fetti Up address, we read forwarded Venmo receipt emails to suggest marking someone paid. We store the parsed amount and sender name for that suggestion, and we do not store the raw email.
Email-forwarded receipts, optional and off by default
If you forward a grocery, hotel, flight, or event receipt email to your Fetti Up address, we extract the merchant, amounts, tax, date, and category and keep them as a draft for you to review. The draft remains until you confirm or dismiss it and expires automatically after 30 days either way. We discard the email itself right away, do not store the message body or attachments, keep the draft private to you, and delete it with your account.
Phone number, optional
If you add a phone number, or the organizer adds it for you, we store it only so the organizer can text you what you owe from their own phone. It is not shown to other people on the bill, and you can remove it.
Contact info you add for others
A bill creator can attach a person's email address or mobile number to their spot. We use it to recognize that person when they sign in and to prefill a reminder the creator sends from their own Messages app. It does not appear to other guests, and it is deleted with the bill or when the creator clears it.
Your Recent people list
When you add someone to a tab or trip, we save their name and any email address or phone number you attach to a private list on your account so they can be suggested next time. This list is separate from any one bill and is visible only to you. You can view and delete entries in Settings, and the full list is removed when you delete your account.
Friends & Circles
If you become friends with someone or create or join a named Circle, we store that connection's display name and sign-in email so you can add each other to bills. Friends and Circles are private. They do not appear on public bill pages, and a connection's display name and sign-in email are visible only to people directly connected to them. You can remove a friend or leave a circle at any time; a circle's organizer deletes it instead. Deleting your account removes you from friend lists and from any circle you organized or joined.
Notifications, optional
If you allow notifications, we store a device push token so we can send money-moment alerts, such as a suggestion to mark someone paid, and live settling-up updates. Notifications are delivered through Apple's Push Notification service and may include the bill name, a payer's name, and an amount. Notification tokens are removed when you delete your account.
Profile photo you upload, optional
If you add an account avatar, your device downscales it and strips EXIF and GPS location data before upload. We store the resulting image and serve it through an unguessable link. It appears only in your account view and the app navigation, not on a shared bill page. Removing the photo deletes it right away, and deleting your account deletes it permanently.
Usage metrics
We keep simple counts of how the app is used, such as how many receipt scans happen each month and whether people return, so we can size allowances and cover costs. These are internal aggregate analytics. They are not used to track you across other apps or websites and are never sold.
What we do not collect
- Passwords. Sign-in is handled by Google or Apple.
- Credit or debit card numbers, bank account details, or any payment-app login.
- Your location in the background, your contacts, or any tracking for advertising. We do not sell your data or use it to track you across other apps or websites.
How we use it
We use this data only to run the app: split bills, show each person's share, let people settle up through a payment handoff, sync tabs across devices, scan receipts, and, if you turn it on, suggest when someone may have paid you back.
How it is stored and protected
Your data is stored on Cloudflare infrastructure, encrypted at rest, and all traffic uses HTTPS.
When you share a bill by link, anyone with that link can see the bill's items and amounts. Each person's email address and profile photo are stripped from the shared response, so co-diners cannot see one another's private account details.
Who we share it with: service providers
Cloudflare
Hosting, request processing, and encrypted storage.
Google and Apple
Sign-in and identity verification.
Apple Push Notification service
Notification and Live Activity delivery if you turn notifications on. A payload may include the bill name, a payer's name, and an amount.
Anthropic
Receipt-image processing to extract line items. Anthropic says API inputs and outputs are not used to train its models by default.
Venmo and Cash App
Fetti Up opens a payment link on your device with the supported bill details. We do not provide payment credentials because we never collect them.
Deleting your account and data
In Fetti Up, open Account, then choose Delete account. This permanently and irreversibly deletes your profile, saved payment handles, notification tokens, and every bill you created, including any stored receipt images.
Bills that other people created and shared with you are not deleted because they are the creator's data. Your name's link to your identity, including email and photo, is removed from them. You can also email us to request deletion.
Children
Fetti Up is not directed to children under 13, and we do not knowingly collect their information.
Changes
If we change this policy, we will update the date above and post the new version here.
Contact
Questions or deletion requests can be sent to hello@fettiup.com.