Privacy Policy

Last updated: July 15, 2026

KittyUp (the “app”) is operated by Brandon Pang (“we,” “us,” or “our”). This Privacy Policy explains what information we collect when you use KittyUp, how we use it, who can see it, and the choices and rights you have. By using KittyUp, you agree to the practices described here.

1. Information We Collect

We collect only the information needed to run an expense-tracking and splitting service:

• Account information — your first and last name, email address, username, and (optionally) a profile photo.
• Authentication data — if you sign in with Apple, Apple may share your name and an email address (which may be a private relay address) with us to create your account.
• Transaction data — expenses you record, including amounts, descriptions, dates, who paid, and how each expense is split between participants.
• Group and social data — the groups you belong to, your group membership, and your friend connections within the app.

We do not collect payment-card numbers or bank-account details, and KittyUp does not process real-money payments. See our Terms of Service for more.

2. How We Use Your Information

• To create and maintain your account.
• To provide the core service: recording expenses and computing who owes whom.
• To display shared transactions to the appropriate group members.
• To authenticate you and keep your account secure.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How Your Information Is Stored

Your data is stored using Supabase, a hosted backend platform that runs on cloud infrastructure (Amazon Web Services). Data is transmitted over encrypted connections. While no method of storage or transmission is perfectly secure, we take reasonable measures to protect your information.

4. Who Can See Your Information

• Group members can see the transactions, balances, and participant details shared within groups you are both part of, along with your name, username, and profile photo.
• Friends can see your friend-connection status and basic profile details.

Beyond this, we do not share your personal information with third parties except as needed to operate the service (see below) or as required by law.

5. Third-Party Services

• Supabase — database, authentication, and storage hosting.
• Apple Sign-In — optional authentication.
• Resend — delivery of account emails (such as password resets and signup confirmations), which involves processing your email address.

These providers process data on our behalf in order to deliver the service.

6. Data Retention & Deletion

We retain your information for as long as your account is active. You can delete your account at any time from within the app (Settings → Delete Account). Deleting your account removes your profile, group memberships, friend connections, and invites. To preserve the integrity of shared group records, some historical transaction entries may be retained in an anonymized form and shown to other members as “Deleted User.”

7. Your Rights

You may access and update most of your information directly in the app, and you may delete your account as described above. To make any other request regarding your data, contact us at [email protected].

8. US State Privacy Rights (Including California)

If you are a resident of a US state with a comprehensive privacy law — including California (CCPA/CPRA), Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — you may have the right to:

• Know whether we process your personal information, and what we collect and how it is used.
• Request access to your personal information and obtain a copy of it.
• Request correction of inaccurate personal information.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We do not do any of these — we have not sold or shared personal information in the preceding twelve (12) months and will not do so, we do not serve targeted advertising, and we do not profile.
• Not be discriminated against for exercising these rights.

Exercising your rights. You can access, update, and delete most of your information directly in the app (see Sections 6 and 7). For anything else, contact us at [email protected]. Before fulfilling a request, we will verify your identity — normally by confirming you control the email address on the account — and we may ask for additional information if needed for verification or fraud prevention. You may designate an authorized agent to submit a request on your behalf; we may deny a request from an agent who does not provide proof of valid authorization.

Appeals. If we decline to act on your request, you may appeal by replying to our decision or emailing [email protected] with the subject “Appeal.” We will respond in writing with the reasons for our decision. If your appeal is denied, you may contact your state attorney general to submit a complaint.

9. Do-Not-Track Signals

Some browsers and devices offer a Do-Not-Track (“DNT”) setting. Because no uniform standard for recognizing DNT signals has been adopted, we do not respond to them at this time. We also do not track users across third-party websites or apps, so there is no cross-site tracking to opt out of. If a standard we must follow is adopted, we will describe our response to it in a revised version of this policy.

10. Children’s Privacy

KittyUp is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and if the changes are material we will provide additional notice (such as a prominent notice in the app or an email). Continued use of the app after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected].