Privacy Policy

Last updated: July 30, 2026

ehsebly ("ehsebly", "we", "us") is a small, personal-project app for splitting restaurant bills, built and operated by Eslam Radi. This policy explains what information ehsebly collects, why, and what we do (and don't do) with it. It's currently a private test build shared with friends and family, not a public product — this policy will be revisited before any wider release.

1. The two ways ehsebly handles your data

ehsebly has two separate modes, and they handle data differently — using one never sends data to the other.

Casual Splitting requires no sign-up and no account. When you photograph a receipt, the photo is sent to our backend, which forwards it to our vision-AI provider (Anthropic) purely to read the items and prices off it, and returns the result to your device. We do not store your receipt photos or the resulting split on our servers. Your split history is saved only locally, on your own device.
Groups requires signing in with your phone number, because a group's expense ledger needs to sync across everyone in it. When you use Groups, we store: your phone number, the display name you (or whoever invited you) provide, which groups you belong to, and the expenses and settlements logged in those groups (item names, prices, who paid, who owes whom). This data is stored on our servers (via Cloudflare) so every group member sees the same, current ledger.

2. How sign-in works

Groups sign-in uses a one-time code sent to your phone number via SMS (through Twilio, our SMS provider) — no password. We store a hashed version of that code and of your session token, not the plain values, so a leaked database row on its own can't be used to sign in as you.

3. Who we share data with

Only the service providers needed to run ehsebly itself see any of your data, and only for that purpose:

Anthropic — reads the text and prices off a receipt photo you submit in Casual Splitting. It does not receive your phone number, name, or any Groups data.
Twilio — delivers the SMS one-time code when you sign in to Groups.
Cloudflare — hosts our backend and database (Groups data only; Casual Splitting never touches this database).

We do not sell your data, and we do not use it for advertising — ehsebly has no ads and no analytics/tracking SDKs.

4. What ehsebly never does

ehsebly never moves, holds, or has access to your money. It only computes and displays a number — settling up happens outside the app (InstaPay, Vodafone Cash, cash, or however you already do it).
ehsebly does not request access to your contacts list broadly — inviting someone to a group uses your device's native contact picker, which only shares the one contact you explicitly select, and ehsebly never sees your full address book.

5. Your choices

You can stop using Casual Splitting at any time with nothing to delete server-side, since nothing is stored there. For Groups, email us (below) to request that your account and associated data be deleted — we'll remove your phone number, name, and membership records; a group's shared expense history may be retained for the other members unless the whole group is deleted.

6. Children

ehsebly is not directed at children under 16, and we do not knowingly collect data from them.

7. Changes to this policy

If this policy changes in a way that matters — especially before any wider release than friends and family — we'll update the date above and, where practical, tell existing Groups users directly.

8. Contact

Questions, requests, or concerns about your data: hi@eslamradi.com.