Privacy Policy

Last updated: August 10, 2026

ehsebly ("ehsebly", "we", "us") is a small, personal-project app for breaking down restaurant bills, built and operated by Eslam Radi. This policy explains what information ehsebly collects, why, and what we do (and don't do) with it. It's currently a private test build shared with friends and family, not a public product, and this policy will be revisited before any wider release.

1. The two ways ehsebly handles your data

ehsebly has two separate modes, and they handle data differently. Using one never sends data to the other.

Casual Breakdown requires no sign-up and no account. When you photograph a receipt, the photo is sent to our backend, which forwards it to a vision-AI provider purely to read the items and prices off it, then returns the result to your device. Every receipt goes to Google (Gemini) first. If that reading isn't confident enough, the same photo is also sent to Anthropic (Claude) for a second attempt. Neither provider receives your email address, your name, or any Groups data. We do not store your receipt photos or the resulting breakdown on our servers. Your breakdown history is saved only locally, on your own device.
Groups requires signing in with your email address, because a group's expense ledger needs to sync across everyone in it. When you use Groups, we store: your email address, the display name you (or whoever invited you) provide, which groups you belong to, and the expenses and settlements logged in those groups (item names, prices, who paid, who owes whom). This data is stored on our servers (via Cloudflare) so every group member sees the same, current ledger.

2. How sign-in works

Groups sign-in uses a one-time code sent to your email address through Brevo, our email provider. There is no password. We store a hashed version of that code and of your session token, not the plain values, so a leaked database row on its own can't be used to sign in as you.

3. Who we share data with

Only the service providers needed to run ehsebly itself see any of your data, and only for that purpose:

Google reads the text and prices off a receipt photo you submit in Casual Breakdown. This is the first and usually the only reading.
Anthropic reads the same photo when Google's result isn't confident enough to use. Neither provider receives your email address, name, or any Groups data.
Brevo delivers the one-time sign-in code by email when you sign in to Groups.
Cloudflare hosts our backend and database (Groups data only; Casual Breakdown never touches this database).

We do not sell your data, and we do not use it for advertising. ehsebly has no ads and no analytics or tracking SDKs.

4. What ehsebly never does

ehsebly never moves, holds, or has access to your money. It only computes and displays a number. Settling up happens outside the app, via InstaPay, Vodafone Cash, cash, or however you already do it.
ehsebly does not request broad access to your contacts list. Inviting someone to a group uses your device's native contact picker, which shares only the one contact you explicitly select, so ehsebly never sees your full address book.

5. Your choices

You can stop using Casual Breakdown at any time with nothing to delete server-side, since nothing is stored there. For Groups, email us (below) to request that your account and associated data be deleted. We'll remove your email address, name, and membership records; a group's shared expense history may be retained for the other members unless the whole group is deleted.

6. Children

ehsebly is not directed at children under 16, and we do not knowingly collect data from them.

7. Changes to this policy

If this policy changes in a way that matters, especially before any wider release than friends and family, we'll update the date above and, where practical, tell existing Groups users directly.

8. Contact

Questions, requests, or concerns about your data: hi@eslamradi.com.