Privacy
Last updated 4 November 2026
Brokease keeps only what it takes to split a bill, deletes it on a schedule, and never sells it, shows ads, or touches your money.
The short version.
- Guests have no account. A bill and everything on it deletes itself 90 days after it is shared, or 30 days after the host closes it.
- A host’s account stays until they delete it, which they can do in the app at any time.
- No ads, no analytics, no selling or sharing your data. Money goes straight from guest to host, never through Brokease.
What we keep
If you open a link as a guest:
- The name you go by at the table: a seat the host named, or the name you type.
- What you picked, and which shared plates you joined.
- If you say you have paid: how, how much and when. If the host confirms it: how much arrived.
- A random code your phone or browser makes for that one bill, so the link remembers you. We store only a hashed form of it.
We don’t ask guests for a phone number, an email address or an account.
If you host:
- Your name and your CliQ alias. Your guests see both, so they can pay you.
- How you sign in: your email address and a password we store only as a slow hash, or your WhatsApp number, or the identifier Google or Apple gives us for your account.
- The currency of your last bill, so the next one starts in it.
- Your bills: the items, prices and totals, and everything listed above for your guests.
- Receipt photos you scan go to Google Cloud Vision to be read. We don’t keep the photo.
- To stop abuse: sign-in codes, kept only as a hash; a count of wrong passwords; and how many receipts you read today.
- On your phone, not our server: a summary of each bill you close — where, when, the total and your share, with nobody’s name in it — so your history and spending outlast the bill. Your groups stay there too. Deleting your account removes both.
Who sees what
- Everyone on a bill sees the names at the table and what each person picked.
- A payment — a guest’s "I sent it" and the host’s confirmation — is seen only by the host and that guest.
- Nobody else. A bill is reached only by its link, a 10-character code; there is no search and no public list.
Who handles it for us
| Service | What it does | What it sees |
|---|---|---|
| Cloudflare | Runs our server and stores the data | Everything above, and your device’s IP address when you connect |
| Google Cloud Vision | Reads receipt photos | The photo |
| Google, Apple | Sign in with Google or Apple | That you are signing in to Brokease |
| Meta (WhatsApp) | Sends sign-in codes by WhatsApp | Your number and the code |
| Resend | Sends sign-in codes by email | Your email address and the code |
Exchange rates are fetched by our server from ExchangeRate-API; nothing about you goes with the request.
How long we keep it
- A bill and everything in it: 90 days after it is shared, or 30 days after the host closes it, whichever comes first. Then it is gone, from the host’s list too.
- A host’s account: until you delete it. Deleting it deletes every bill you host, at once.
- Signed-in sessions: 180 days.
- Sign-in codes work for 10 minutes and are deleted soon after. Wrong-password counts reset after 15 minutes and receipt counts after the day they count; both are deleted within a day.
- Cloudflare’s request logs: a few days.
Money
Brokease never holds, moves or sees your money. Guests pay the host in their own bank or wallet app, or in cash. Brokease only records what people say they sent and what the host confirms arrived.
Your choices
- Delete your account at any time: in the app, under Your details, or as described on Delete your account.
- Ask for a copy of what we hold about you, or for a correction, by writing to hello@brokease.app.
- A guest who wants their name off a bill sooner can ask the host, or write to us with the bill’s link.
Children
Brokease isn’t made for children under 13, and we don’t knowingly keep their data.
Changes
If this policy changes, this page changes with it, and so does the date at the top.