DebtTracker ("the app") is a personal debt-tracking app built by Bohdan Dronov ("we", "us"). This policy explains what data the app handles, why, and how to have it deleted. If anything here is unclear, contact bobadronov@gmail.com.
DebtTracker works in one of two modes, and it's your choice which one you're in:
| Data | Why |
|---|---|
| Email address & password | Account sign-in (handled by our backend provider, Supabase — we never see your password in plain text) |
| Display name, phone number, profile photo (all optional) | Shown on your own account; used to auto-fill your name/photo for another DebtTracker user who adds you as a contact by your email or phone number; and used to link mirrored debts (see "Sharing a debt with the other person" below) |
| Names, phone numbers, emails of people you add as debtors/creditors | The core feature of the app — tracking who owes you and who you owe |
| Transaction records (amounts, dates, payment method, notes) | The core feature of the app |
| App preferences (theme, language, haptics on/off) | Restoring your settings across devices |
| Active-device list: a device name, platform (Android/iOS/Desktop/Web), app version, and first-seen / last-seen timestamps for each device you sign in on | Powering the "Active devices" screen in Settings, so you can see where you're signed in and remotely sign a device out |
| In-app notifications (who acted, amount, currency, which debt) generated when a mirrored debt is linked or updated | Telling you about activity on a debt you share with another DebtTracker user |
When you add a debtor or creditor and enter an email address or phone number that belongs to another registered DebtTracker account, the app can look up that account's public display name and photo to help you fill in the contact card faster. That lookup only ever returns a name and photo — never anyone's email, password, transactions, or balances.
This only happens in Account+Sync mode. If you add a debtor or creditor whose phone number or email address matches another registered DebtTracker user, the app automatically links that debt to their account. There is no separate confirmation step — adding a contact whose details match a registered user is what triggers it.
When a debt is linked:
In other words: for a debt that both people track in Account+Sync mode with matching contact details, both people can see that debt's transaction history. Local-only mode never participates in any of this. If you don't want a debt shared, don't enter the other person's registered email or phone number, or track that debt in Local-only mode.
Once data has been copied into the other person's account it belongs to their account. Deleting the debt, deleting all your data, or deleting your account does not remove copies already mirrored to them — the same way you can't take back information you've already shared with someone. The reverse is also true: mirrored copies you received stay in your account until you delete them.
When you're signed in, the app checks our notifications table
every 15 seconds and shows a system notification for anything new. It does
not use Firebase Cloud Messaging, Apple Push Notification
service, or any other third-party push provider — there is no push token,
and no third party is involved in delivering a notification to your device.
You can mark notifications read or delete them in the app; they're deleted
with your account.
The QR hub screen can show a QR code containing a small contact card (name, and optionally phone and email) for another DebtTracker user to scan, and can scan someone else's. This is entirely on-device: the code is generated and read locally, and scanning uses your device camera (or, on Desktop/Web, a local image file you pick). Nothing about the QR exchange is sent to our servers. If you're signed in, the card shown is your account profile; if you're not, it's whatever you typed into the "My card" fields, stored only on your device. Adding a scanned contact whose details match a registered user can then trigger a mirrored debt, as described above.
Account+Sync data is stored with our backend provider, Supabase, on servers in the EU. Access to your data is restricted to your own signed-in account by row-level security policies enforced by the database itself — not just by the app. The one exception is a mirrored debt: data you've shared that way is, by design, also readable by the account you shared it with.
The Android and Desktop builds are distributed through Google Play and GitHub Releases; the Android app uses Google Play's in-app update mechanism to tell you when a new version is available. These channels are subject to Google's and GitHub's own privacy policies.
In the app, go to Settings → Delete all data and confirm twice. This immediately and permanently deletes every debtor, creditor, and transaction you've synced to our servers. Your account (email/login) stays active so you can keep using the app afterward.
Email bobadronov@gmail.com from the address registered to your account with the subject "Delete my account", or simply state your request. We verify the request and delete your account, typically within a few business days, and confirm by reply once it's done.
| Data | Deleted? | When |
|---|---|---|
| Debtors, creditors, transaction records | Deleted | Immediately (Option 1 or 2) |
| Display name, phone, avatar photo | Deleted | Immediately on account deletion (Option 2) |
| Account/login (email, password hash) | Deleted | Immediately on account deletion (Option 2) |
| Active-device list, in-app notifications | Deleted | Immediately on account deletion (Option 2) |
| Data stored only locally on your device | Deleted | Whenever you uninstall the app — this is outside our servers entirely |
| Copies of a shared debt already mirrored into another DebtTracker user's account | Not deleted | They belong to that person's account; only the link back to you is cleared. They can delete them from their own app. |
| Residual copies in routine infrastructure backups | Purged | On our hosting provider's normal backup rotation, not immediately, but not kept indefinitely |
We don't retain any of your data beyond what's described above — no analytics, no marketing lists, no long-term archive.
DebtTracker is not directed at children under 13, and we do not knowingly collect data from them.
If this policy changes, the "Last updated" date above will change too. We won't reduce your rights over previously collected data without your consent.