Privacy Policy
Last updated: April 2026
Draft — pending legal review
1. Who we are
Settled Up is operated by Au Courant Ltd, a company registered in England and Wales. When we say "we", "us", or "our" in this policy, we mean Au Courant Ltd.
Contact: contact form
2. What data we collect
We collect the minimum data needed to provide the service:
- Account information: Your email address, display name (optional).
- Tab and expense data: Tab names, expense descriptions, amounts, currencies, participant shares, and payment records you create.
- Usage data: Error reports and performance data sent to our error tracking service to help us fix issues.
- Waitlist and contact form submissions: Email address, name, message, and referral source.
We do not collect passwords — authentication is via magic link (one-time email codes).
3. How we use your data
- To provide the expense-splitting service and calculate balances.
- To send you magic link emails for authentication.
- To send transactional emails related to your account and tabs.
- To process payments via our payment provider.
- To monitor and fix errors in the service.
- To respond to contact form submissions.
We do not sell your data. We do not use your data for advertising.
4. Third-party services
We use the following third-party services to operate Settled Up:
- Google Cloud Platform: Hosting and database infrastructure (EU region).
- Stripe: Payment processing. Stripe handles all card details — we never see or store your card number.
- Resend: Transactional email delivery.
- Sentry: Error tracking and performance monitoring.
Each of these services has their own privacy policy governing their handling of your data.
5. Cookies
Settled Up does not use cookies for tracking or advertising. We use browser local storage to keep you logged in (storing your authentication token). No third-party tracking cookies are set.
6. Data retention
Your account and tab data is retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days. Anonymised, aggregated data may be retained for analytics purposes.
7. Your rights (GDPR)
If you are in the UK or EU, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Export your data in a portable format.
- Object to processing of your data.
To exercise any of these rights, use our contact form.
8. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on the service.
9. Contact
If you have questions about this privacy policy or your data, use our contact form.