Evenso privacy policy
Last updated: 12 November 2026
Evenso is made by WhiteLake Pty Ltd, Sydney, Australia (“we”). This policy explains what Evenso keeps, where, and why. Contact us at support@whitelake.com.au.
The short version
- Receipts are read on your phone. A receipt photo is only uploaded if you choose to share it with a group, and card numbers are covered first.
- No advertising and no tracking. We don’t sell data, show ads, or follow you across other apps and websites.
- Your group sees what you add to it, so everyone reads the same numbers. People outside the group don’t.
- Crash reports and usage data are only sent if you agree.
- Evenso never moves money. It shows how to pay someone and records what you mark as paid. The payment itself happens in your own bank or payment app.
What stays on your phone
- Receipt photos you don’t share.
- Your payment details, until you choose to share them with your groups.
- An expense you haven’t finished.
What we store so your groups work
When you use groups, the data below is stored on our servers in Sydney, Australia (Google Firebase, region australia-southeast1) and shared with the other members of that group.
| Data | Why |
|---|---|
| Group names and the names people go by | So everyone sees who’s in the group. A name picked from Contacts keeps only the name. |
| Expenses, including the items from a receipt, titles and notes | To work out who owes whom. |
| Payments you mark as paid | To keep balances right. |
| Receipt photos you share, with card numbers covered | So the group can check the receipt. |
| Payment details you choose to share (for example a PayID, bank account or PayPal handle) | So people know how to pay you back. |
| An account ID, an app installation ID, and a push notification token if you allow notifications | To sign you in, keep your devices in sync and send you notifications. |
Firebase’s sign-in, notification and diagnostics services run on Google’s global infrastructure, so your account ID, notification token and any diagnostics you agree to send may be processed outside Australia.
What we don’t collect
Evenso never reads your address book, and doesn’t ask for your email address, phone number or home address. Tagging where an expense happened is optional: when you tap to tag a place, Evenso uses your location to suggest nearby venues, and saves only the venue’s name and its Apple Maps reference — never your location.
Diagnostics, only with your consent
If you agree, Evenso sends crash reports and usage data (Firebase Crashlytics, Analytics and Performance Monitoring) to help us fix problems. Nothing is sent unless you agree, and it’s never used for advertising.
Purchases
Evenso Pro is sold through Apple. We receive a record of what you bought (through RevenueCat) so the app knows you have Pro, but never your card or Apple Account details.
Service providers
We use Google Firebase (storage, sign-in, notifications, diagnostics), RevenueCat (purchases) and Apple (Sign in with Apple, push notifications, the App Store). They process data only to provide these services to us.
Keeping and deleting your data
- Download your data: Me > Download your data gives you a copy of everything we hold for you.
- Delete your account: Me > Delete account.
- A guest account (not signed in with Apple) is deleted straight away.
- An account signed in with Apple is held for 30 days and then deleted. Signing back in with Apple before then cancels it.
- Deleting removes your name and your place in every group, the receipts you added, the titles and notes you wrote, groups where you’re the only person, and everything saved on your phone.
- Amounts other people need for their balances stay, shown as “Former member” with nothing linking them to you.
- Copies in our backups are gone within 8 weeks. Copies held by our service providers can take up to 180 days to clear.
- Deleting your account doesn’t cancel Evenso Pro. Cancel it in your Apple Account.
Children
Evenso isn’t directed at children.
Your rights
Depending on where you live (including under the Australian Privacy Act, the GDPR and US state laws) you can ask to see, correct or delete your data, or object to how it’s used. Most of this is in the app. For anything else, email support@whitelake.com.au. If you’re not happy with our answer you can complain to your privacy regulator — in Australia, the OAIC (oaic.gov.au).
Changes
If this policy changes in a way that matters, we’ll say so in the app before it takes effect.
This policy covers the Evenso app. Docusy has its own privacy policy.