How ShareSquad handles your information

Effective date: September 19, 2026

ShareSquad is operated by Tanish Sheth. This policy explains the information used to provide the ShareSquad service.

Information you provide

When you create an account or use the service, ShareSquad may store your display name, email address, password hash, profile photo, group details, group membership, expenses, receipt images, receipt data, chosen currency, and optional AI receipt-scanning settings. ShareSquad does not store your account password in plain text.

How information is used

Information is used to operate the service: sign you in, show your profile and expenses to relevant group members, calculate balances, create reports, process invites, and provide receipt-scanning features. ShareSquad does not sell personal information.

Passwords and login security

Account passwords are stored as a one-way bcrypt hash. ShareSquad can verify a password at sign-in, but cannot recover the original password from what is stored. New passwords must be at least 8 characters and include at least 1 uppercase letter, 2 numbers, and 1 special character. Keep your password private and use a unique password you do not reuse on other sites.

Receipt scanning and AI keys

ShareSquad first attempts local receipt reading. If you enable an external AI provider and local reading needs help, the receipt image may be sent to that provider to extract merchant, date, and total information. Optional provider API keys you add in Settings are encrypted at rest on the server. After you save a key, ShareSquad does not display the full key again in the app; Settings only shows whether a key is saved. Keys are decrypted on the server only when a receipt scan needs the provider. Review the provider’s own privacy terms before enabling it.

Who can see shared information

Members of a shared group can see that group’s members, expenses, balances, and relevant photos. Friend splits are visible only to the people included in that private split. You control the information you add, but do not add information you do not have permission to share.

Retention and deletion

Information remains in the service while your account and relevant groups remain active, subject to operational and legal needs. You can remove profile and group photos within the app. For account or data-deletion requests, contact support.

Security

ShareSquad uses authenticated access controls for private app data, password hashing for account credentials, and encryption at rest for optional AI API keys. Production access is served over HTTPS. No internet service can guarantee absolute security. Protect your password and API keys, and contact support if you believe your account may be compromised.

Changes and contact

This policy may be updated when the service changes. Questions or requests can be sent to tan•••.com.