Effective date: 16 October 2026
Published at: https://www.zappsco.com/i-owe/privacy
This Privacy Policy explains what information the I OWE app (“I OWE”, “the app”, “we”, “us”) collects, why, where it is stored, and the choices you have. I OWE is published by Zappsco.
I OWE is a private, personal ledger: you record money you owe other people and money other people owe you. It is built so that your ledger belongs to you alone. It does not move money, connect to your bank, or share your records with the people in them.
1. Summary
- Your ledger (the people, transactions, payments, notes, due dates and settings you enter) is stored in your own account in Google Firebase, so it syncs across your devices. No other user can read it.
- Your profile picture never leaves your device.
- We read your contacts only if you choose to add a person from them, and we save only the name and phone number of the person you pick.
- Voice entry turns your speech into a draft form. It never saves anything by itself.
- Reminders are scheduled on your device.
- We do not sell your data, and we do not use it for advertising.
2. Information we collect
2.1 Account information
When you create an account, we collect:
- Email address, and a password if you sign up with email. Firebase Authentication stores the password. We never see it.
- Name and profile photo URL, if you sign in with Google or Apple and those services share them. If you use Sign in with Apple and hide your email, we receive only Apple’s relay address.
- Display name, if you set or change it in Settings.
- A unique account identifier (user ID), which Firebase assigns.
2.2 Your ledger
This is the information you choose to enter:
- People: the name you give each person, and optionally a phone number.
- Transactions: amount, currency, direction (I OWE or OWED TO ME), date, optional due date and optional note.
- Payments: amount, currency, date and optional note.
- Status: whether a person or balance is active, cleared or archived.
- Reminders and preferences: due-date reminders and app settings such as your default currency.
Balances are calculated from your transactions and payments. I OWE does not convert currencies and does not contact any exchange-rate service.
The people in your ledger do not have accounts with us and are never contacted by I OWE. Only you should enter information about them, and you should enter only what you need to keep your own records.
2.3 Contacts (optional)
If you choose add from contacts, the app asks for permission to read your address book. If you grant it:
- The app reads only contact names and phone numbers, on your device, so you can pick someone.
- Only the contact you select is saved to your ledger, as a name and, if present, a phone number.
- Your address book is never uploaded, and I OWE never adds or changes a contact.
You can decline, or revoke this permission at any time in your device settings, and add people by typing their names instead.
2.4 Profile picture (optional)
If you set a profile picture, the app asks for access to your photos or camera. The picture is stored only on your device. It is not uploaded to our servers and does not sync to your other devices.
2.5 Voice entry (optional)
Voice entry lets you speak a transaction or payment instead of typing it. It needs microphone and speech-recognition permission.
- Speech to textis handled by your device’s operating system speech service (Apple on iOS, Google on Android). Depending on your device and settings, that provider may process the audio on its servers under its own privacy policy. I OWE does not record or keep audio.
- Filling in the form: the app reads the amount, currency, date and note from the resulting text so it can fill in the form. The text is used only for that and is not kept.
- Voice never saves anything. It fills in a form for you to review, and nothing is stored until you press Save.
You can always use the app without voice. Every voice action has a manual alternative.
2.6 Subscription and purchase information
Purchases are processed by the Apple App Store or Google Play. We never receive your card or payment details. We use RevenueCat to confirm your subscription status. It receives your user ID, and from the store it receives your purchase history for I OWE: plan, trial status, and renewal and expiry dates.
2.7 Diagnostics and usage
- Firebase Crashlytics collects crash reports and error logs: device model, operating system version, app version, and the state of the app when it crashed. These help us fix bugs. Crash reports are not meant to include the contents of your ledger.
- Firebase Analytics collects limited usage information, such as app opens, screens viewed, and device and app version, along with an app-instance identifier. It helps us understand how the app is used and where it can be improved. We do not use it for advertising.
2.8 Notifications
Due-date reminders are scheduled locally on your devicewith the operating system’s notification service. Scheduling a reminder does not send anything to us. You can turn notifications off at any time in your device settings, and your due dates will still show in the app.
2.9 Privacy lock
If you turn on the privacy lock, the app uses your device’s Face ID, Touch ID, fingerprint or passcode. Biometric data never leaves the operating system. I OWE only receives a yes or no answer. Whether the lock is on is stored on the device only.
3. How we use information
We use the information above only to:
- provide the app: sign you in, store and sync your ledger, calculate balances and show reminders;
- check your subscription and give you access to the features you paid for;
- fill in forms from your voice input, when you use it;
- keep the app secure, diagnose crashes and improve reliability;
- understand overall usage so we can improve the app;
- respond to you when you contact us;
- meet our legal obligations.
We do not sell your personal information, share it for advertising, build advertising profiles, or give financial advice based on it.
4. Where your data is stored and who can see it
- Google Firebase(Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics) stores and processes account and ledger data on Google’s infrastructure, which may be located outside your country.
- Access control: security rules on our database let an account read and write only its own documents. No other user can access your ledger.
- Offline use: the app keeps a local copy of your ledger so it works without a connection. Changes made offline are synced when you reconnect.
We share information only with the service providers who run the app for us, and only for that purpose:
| Provider | Purpose |
|---|---|
| Google Firebase | Authentication, database, cloud functions, analytics, crash reporting |
| RevenueCat | Subscription status |
| Apple / Google | Sign-in (if you choose it), in-app purchases, speech recognition |
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
5. Retention and deletion
- Your ledger and account are kept for as long as your account exists.
- Archiving a person hides them from your active list but keeps their history. Permanently deleting a person removes them and their records from your ledger.
You can delete your account at any time in Settings → Delete Account. After you confirm with your password, or by signing in with Google or Apple again, the app permanently deletes:
- every person, transaction and payment in your ledger, including cleared and archived ones;
- your sign-in account;
- the reminders and profile picture stored on that device.
Deletion needs an internet connection, and it cannot be undone. If you signed in with Apple, the app’s access to your Apple ID is also revoked. If you cannot use the app, contact us (section 10) and we will delete your account within 30 days.
- Crash and analytics data is kept for the periods set by Firebase and then deleted automatically.
- Subscription records are kept by Apple, Google and RevenueCat as required for billing and tax purposes. Deleting your I OWE account does not cancel a subscription. Cancel it in your App Store or Google Play settings.
6. Your rights and choices
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you may have the right to:
- access the personal information we hold about you;
- correct it (you can edit most of it directly in the app);
- delete it;
- receive a copy of it;
- object to or restrict certain processing;
- withdraw consent, for example by turning off contacts, microphone, photos or notification permissions in your device settings.
To use any of these rights, contact us (section 10). We will not treat you differently for exercising them. Where we rely on your consent, withdrawing it does not affect processing that already happened. You can also complain to your local data-protection authority.
Our legal bases for processing (GDPR) are: contract, to provide the app and your subscription; consent, for optional permissions such as contacts, microphone, photos and notifications; and legitimate interests, for security, crash diagnostics and product improvement.
7. Security
We use encrypted connections (HTTPS/TLS), Firebase’s encryption at rest, and per-account security rules. On your device you can turn on the privacy lock. No system is perfectly secure, so please use a strong password and keep your device protected.
8. Children
I OWE is not intended for children under 13 (or under 16 where local law requires). We do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.
9. Changes to this policy
We may update this policy as the app changes. We will post the new version at the address above and change the effective date. If a change is significant, we will also tell you in the app.