Privacy notice
Updated Monday 7 September 2026
Even collects the minimum it needs to work out who owes what, and keeps it only as long as the group needs it. Even never holds or moves money and has no access to any GCash account.
What is collected
Your name and email address when you create an account, and the password you choose, which is stored as a hash that nobody can read back.
What you enter about a group: its name, the display names of its members, expense amounts, what each expense was for, and the dates.
A GCash number and QR image for a member, if someone adds one, so the group knows where to send money. GCash numbers are encrypted where they are stored and are never written to logs or analytics.
Photos you upload: receipts attached to an expense, and payment screenshots attached to a payment, along with the amount, reference number and timestamp read out of them.
The address your requests come from, kept briefly to stop abuse of the public forms.
If someone added you to a group
You do not need an account to appear in Even. Someone who organises a group can add you by name, and can save a GCash number for you so the group knows where to send your share. If that happened and you would rather it had not, write to hello@cjjutba.dev and your details will be removed from that group.
If you later make an account and claim your spot, the history already recorded against your name becomes yours.
How it is used
To work out each member's balance, to show the exact amount a person should send and who to send it to, and to keep the proof that they sent it. Nothing is used for advertising and nothing is sold.
How long it is kept
Account data stays until you delete your account or ask for it to be removed.
Expenses and payments are never quietly erased. Deleting one hides it and records who deleted it, and it stays in the group's history, because a shared record that can be silently edited is worth less than no record at all. Everything in a group goes when the group is deleted or when its last member asks for it to be removed.
Receipt and payment images go when the expense or payment they belong to goes.
Sent messages are logged for thirty days and then purged. Abuse counters last an hour.
Who can see it
The other members of your group. There is no public directory and no way to search for a person across groups.
Anyone holding a share link for a member can see that one member's balance, the expenses behind it, and who they should pay. Share links are issued by the group, expire, and can be revoked.
The services that run the product: Neon for the database, Vercel for hosting and image storage, and Resend for email when email is switched on. Each processes data only to run the product.
Your rights
Under the Data Privacy Act of 2012 you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Use the deletion request form or write to hello@cjjutba.dev. Requests are answered within fifteen working days.