Privacy Policy

• Account info you provide: name, email, password (stored only as a salted hash), and optional Venmo / Cash App handles you add for settling up.
• Household content you create: expenses, recurring bills, shopping lists, chores, weekly check-ins, and board posts (including any photos you upload).
• Billing info when you subscribe: handled by Stripe. We never see or store your full card number; we keep only a Stripe customer/subscription identifier.
• Basic technical data: a session cookie to keep you signed in, and standard server logs (such as IP address) used for security and rate limiting.

To provide the app: to run your household's shared ledger and features, sync your data across your devices, keep your account secure, and process subscription payments. We do not sell your personal data, and we do not use it for advertising.

Members of your household can see the shared content you add to that household. Beyond that, we share data only with the service providers (sub-processors) needed to run the app, listed below. We may also disclose information if required by law.

We use the following providers to operate coQuarters. Each receives only the data needed for its function:

• Railway: application hosting and the Postgres database where your account and household content are stored.
• Stripe: payment processing for subscriptions. We never see or store your full card number.
• Resend: sending transactional email (such as sign in and account messages).
• PostHog: product analytics (how features are used, so we can improve the app).
• Sentry: error monitoring, so we can detect and fix crashes.
• Google: only if you choose Sign in with Google, to verify your identity.
• Apple: only if you choose Sign in with Apple, to verify your identity.
• HaveIBeenPwned: when you set a password, we check it against known data breaches using k-anonymity. Only a short, one-way hash prefix is sent. Your password itself never leaves our server.
• Anthropic (Claude): to read receipt photos you choose to scan. The image is sent for reading only, not used to train models and not retained, per Anthropic's commercial terms.

The “settle up” buttons that open Venmo or Cash App are links you choose to tap. They simply hand you off to that app or website. We do not send those services any of your data.

We use PostHog to capture product-usage analytics (for example, which features are opened and how flows are completed) so we can understand what works and improve coQuarters. We do not sell this data or use it for advertising.

This includes automatically recorded interactions (which controls you tap and on which screen), aggregated tap positions, page performance, and session recordings: a masked replay of how the app was used. These are deliberately blind to content. Every piece of text and every input is masked before it leaves your device, so a recording shows layout, navigation and where you tapped, and never shows amounts, expense descriptions, roommate names, or anything you typed. We keep the household identifier (an opaque id) and the number of people in the household so we can tell whether a feature works for a household rather than one person. coQuarters does not currently show a separate analytics consent banner; we rely on our legitimate interest in running and improving the app, kept to what is necessary for that purpose. If you would prefer we exclude your usage from analytics, email us at coquarters@storme.dev and we will opt you out. You can also turn this off yourself at any time in Settings under “Share anonymous usage analytics”, which stops event capture and session recording together.

• Access / export:download a copy of your data any time from Settings → Privacy & data → Export my data.
• Deletion:delete your account from Settings → Privacy & data → Delete account. If you are the last person in a household, all of its data is permanently removed; otherwise your personal details are erased and the shared history remains for the other members.
• Correction: edit your profile and content directly in the app.

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never have, and we do not exchange your data with third parties for money or for targeted advertising.

As a California resident, you have the right to:

• Knowwhat personal information we hold about you. You can download a copy any time from Settings → Privacy & data → Export my data.
• Deleteyour personal information from Settings → Privacy & data → Delete account.
• Correct inaccurate personal information by editing your profile and content directly in the app.

We will not discriminate against you for exercising any of these rights.

Do Not Sell or Share My Personal Information. Because we do not sell or share your personal information, there is nothing to opt out of. If you have questions about how your data is handled, email us at coquarters@storme.dev.

We keep your data while your account is active. When you delete your account, data is removed or anonymized as described above. Backups, if any, are cycled out on a rolling basis.

coQuarters is not directed to anyone under 18.

We may update this policy; we will revise the date above when we do.

Questions or requests: coquarters@storme.dev.