Privacy Policy

Last updated 8 October 2026

Chiipin is made by C1 Tech in Ontario, Canada. It helps people split bills and share household costs. This page describes what the app collects, why, and who else can see it.

What we never receive

Photos of receipts are never uploaded to us. When you scan a receipt, it is read on your device using Apple's built-in text recognition. A receipt your device cannot read on its own is handled by Apple's Private Cloud Compute, which processes it without storing it and which Apple opens to independent verification. In neither case is the image sent to us, and we never store it. Only the values you keep — the amounts and item names you confirm — are saved with the bill you create.

Nor are photos of what you keep at home. When you point the camera at a product to read its name, brand and size, the words are read on your device. If your device cannot tell what the product is, only those words — never the picture — go to Apple's Private Cloud Compute, under the same terms as above. Nothing reaches us except the name, brand and size you choose to save on the item.

What we store

• Your account: email address, and whichever of these you choose to add — display name, username, phone number, currency and language.
• Your avatar: an emoji and colour, or a photo if you upload one. Uploaded photos are resized and stored on our server.
• Sign-in: an identifier from Apple or Google confirming it is you. We never receive your password for those accounts.
• Contacts you add: the name, and any email or phone number you enter for them. This comes from what you type, not from your phone's address book — the app does not read your contacts.
• Groups and bills: group names and descriptions, bill descriptions, amounts, items, dates, who paid, and how each bill was split. For households, also the address and lease end date if you enter them.
• Settlements and deposits: amounts, notes, and who owes whom.
• Your cards and accounts: if you add them to say what paid a bill, the name you give each one, its type, and its last four digits if you enter them — never a full card or account number — and which of your bills and payments each one paid. Only you can see them; nobody you share a group with is shown which card you used.
• Chiipin Pro: if you subscribe, Apple gives us a transaction identifier, the plan, and its expiry date so we know the subscription is active. We never see your payment details — Apple handles payment entirely.

Who else can see it

People in a group can see that group's bills, amounts, and who paid — that is the point of sharing one. Your name and avatar are visible to people you share a group with, and to anyone who opens an invite link or code you give them.

Outside of that, we do not sell your information. We share it only with the providers that run the service: Apple and Google, which handle sign-in, Apple, which handles subscription payments, and Cloudflare, which carries the connection.

Apps you connect. If you connect an AI assistant such as ChatGPT (made by OpenAI) or Claude (made by Anthropic) to your Chiipin account, it can read the parts of your Chiipin data it needs to answer you — your groups and the names of their members, bills, amounts, balances and payments — and, if you allow it, record bills and payments for you. Other people's email addresses are never shared with it. Nothing is shared until you approve the connection on Chiipin's own page, and only for as long as it stays connected. What the assistant does with what it reads is governed by its maker's privacy policy, not this one.

Barcodes. When you scan a barcode that your household's storage has not seen before, our server asks Open Food Facts, an open, non-profit product database, what product it is, so the name, brand and size can be filled in for you. Only the barcode number and the language you use the app in are sent, by our server rather than your phone, and nothing that identifies you goes with them. The product details that come back are open data, shared under the Open Database License. If the product has a photo there, our server keeps one copy of it, shared by everyone who scans that product; the app shows it as the item's picture and may read the product's name and size from it, on your phone.

Connected apps

You can see every app connected to your account in Profile › Connected apps, in the iPhone app and on the web, and disconnect any of them; it loses access at once. Deleting your account disconnects all of them. For each connection we keep which app it is, when it was connected and when it was last used, for as long as it stays connected.

What the app does not contain

As of the date at the top of this page, the app ships with no analytics, tracking or advertising software, and no third-party SDKs of any kind. If that ever changes, this page is updated before the change ships and the change is announced in the app.

We do not sell your data. That one is not a description of the current build — it is a commitment.

Where it is kept

On our own servers in Canada. Traffic reaches them through Cloudflare, which handles the connection and can see the IP address a request comes from, as any network provider would.

How long we keep it

For as long as you have an account. Bills shared with other people remain visible to them, because they are part of a shared record — deleting your account does not erase what a group jointly recorded. What was only ever yours, such as your cards and accounts, is deleted with the account.

Your choices

You can edit or delete your groups, bills and contacts in the app, and swap a photo avatar back to an emoji at any time. To request a copy of your data or ask us to delete your account, email [email protected].

Children

Chiipin is not intended for children under 13.

Changes

If this policy changes we will update the date above. Material changes will be announced in the app.

Contact

Questions: [email protected]