This Privacy Policy describes what data we process when you use Slyce and any related backend/web services.
Account (Supabase): User ID; email if you register with email/password; Google sign-in uses Google’s identity service. Anonymous (guest) sessions also get an ID for API access and limits.
App content: Bills, line items, splits, participants, groups, invites, friend connections, balances, notification-related activity. Stored on your device and, when you use online features, on our servers.
Device / technical: A device ID may be sent with API requests (guest limits). Play purchase tokens for subscription checks. FCM token if you enable push on Android. Optional Sentry crash/error reports in builds where it is configured.
Receipt scan: You send an image to our backend; we run Google Cloud Vision for OCR. We store scan records and extracted text on our servers to enforce tier limits and run the feature.
Ads: Google AdMob may use device/ad identifiers and related data under Google’s policies.
To run the app (sync, sharing, OCR, subscriptions, push), to secure our systems, and to show ads or apply a paid tier where you subscribe. We do not sell your bill content to data brokers. Ad targeting follows Google, not your bill text.
Local storage on your device for offline and performance; server database for synced and account data. Connections use HTTPS. Providers may keep routine logs and backups for their own retention periods.
| Provider | Role |
|---|---|
| Supabase | Authentication and sessions |
| Our API / database | Synced data, OCR limits, purchases, notifications |
| Google Cloud Vision | OCR (via our servers) |
| Google AdMob | Ads |
| Google Play | Subscriptions |
| Firebase Cloud Messaging | Push (Android) |
| Sentry (if enabled) | Crash and error reports |
Also see Google Privacy Policy and Supabase Privacy.
Ads may be personalized or non-personalized depending on Google and your device. To limit ad personalization on Android: Settings → Google → Ads (wording varies by version). A Play subscription may remove ads where offered. We do not knowingly serve personalized ads to children under 13 in violation of applicable rules.
We do not require contacts, microphone, SMS, or continuous precise location for core features.
You can delete a registered Slyce account and ask us to remove associated service data as below. Guests: clear local data in the app or uninstall; for server-side data tied to a guest session, contact us.
In the app (recommended)
On the web
Step-by-step instructions and context: https://slyce-bills.vercel.app/delete-account (same flow summary as above, plus email alternative).
By email
If the app is unavailable or deletion fails, email slyce.app@outlook.com with subject Delete my Slyce account and include:
We may ask for reasonable verification before deleting or disabling access.
For a completed registered-account deletion we remove or irreversibly anonymize, where applicable:
Deleting your Slyce account removes our link to that identity; data held only by Google or other third parties may require their own account tools.
Unless the law requires longer, we aim to finish deletion of active account data within 30 days of a verified request. Backups can take additional time before all copies expire.
Some data may exist only on your phone until you clear it or uninstall. Deleting your server account does not remove a shared bill from someone else’s device.
Slyce is not directed at children under 13. If you believe we have personal data from a child improperly, contact our privacy email below.
We share data with the providers above, with other users as needed for bills/groups you share, and when required by law or to protect users and the service. OS Share sends content to the app you choose; we do not control that app.
Data may be processed in the U.S. and other countries where our providers operate, using appropriate safeguards where required (e.g. standard contractual clauses).
Where the law applies, you may have rights to access, correct, delete, export, or restrict processing, or to object. Use Profile (including deletion), in-app settings, and Clear all data where available. You can also email us. For California, use the same contact; AdMob may use data as described in Google’s disclosures for advertising. For EEA/UK, Lilawa Co. is the controller for the processing described here (providers have their own notices for their accounts). You may complain to your supervisory authority.
We may update this policy and change the Last updated date. Important changes may be noted in the Play listing or release notes.
If we must notify you or a regulator about a breach affecting personal data we hold, we will do so as required by applicable law.
The app does not respond to browser DNT signals. Use Android Google → Ads settings for ad-related choices.
Links inside the app may open third-party sites or apps. Their terms and privacy policies apply there.
Privacy and data requests: slyce.app@outlook.com
For privacy questions, deletion help, or rights requests, use this address. We cannot remotely wipe data that exists only on your device—use in-app clearing or uninstall.
Developer: Lilawa Co.