Política de privacidade

CheckMates is a free app for splitting a bill with friends: you photograph the check, share one link, and each person marks what they had. This policy explains what information the CheckMates apps for iOS and Android, the website at checkmatesapp.com and the shared check pages at checkmates.cash (together, “CheckMates”, “we”, “us”) handle, and why.

The short version: there are no accounts, no ads, no analytics and no tracking. We don’t keep your receipt photos, we never sell data, and shared checks delete themselves after 7 days.

1. What we don’t do

• We don’t ask you to create an account or give us your email or phone number.
• We don’t show ads, use advertising identifiers or track you across apps and websites.
• We don’t include analytics or crash-reporting SDKs.
• We don’t sell or rent personal information, or share it for marketing.
• We don’t access your location or contacts.

2. Information we handle

Receipt photos and text

When you scan a check, your phone first reads the text on the device (Apple Vision on iPhone, Google ML Kit on Android). The app then sends a compressed copy of the photo and the recognized text to our server, which passes them to OpenAI to identify the items, prices, venue, date and charges. The result comes back to your phone.

We don’t store the photo on our server, and we ask OpenAI not to store the request. Under OpenAI’s API data policy, OpenAI may still keep API inputs for up to 30 days to detect abuse, and does not use them to train its models. Receipts can show a venue’s name and address and sometimes a card’s last digits; please avoid photographing anything else personal.

Shared checks

When you choose to split a check with friends, our server stores what is needed to run the shared page: the items and prices, tax, service, discounts and tip, the currency, the venue name, address and date if they are on the receipt, the name you enter, any payment details you choose to add (for example a payment link or card number), the names your friends type, which items each person picked and who is marked as paid.

Anyone who has the link can see this information and make picks, so share the link only with the people at your table. Each shared check, with everything in it, is deleted automatically 7 days after it is created. Random secret tokens, kept on your phone or in your friend’s browser, make sure only the right person can change their own picks.

Information that stays on your device

Your name, your payment details and your list of past checks (“My checks”) are stored only on your phone. Deleting a check or the app removes them. On the shared check page, your browser keeps a random token in local storage so it remembers which person you are on that check. We don’t use cookies.

Technical information

When the app or a web page connects to our servers, our hosting provider processes your IP address and basic request details (such as the time, the page requested and the browser type) to deliver the service, keep it secure and limit how many checks can be scanned per minute from one address. Our server logs may contain this information and are kept for a few days.

Camera and photos

The app asks for camera and photo library access only so you can take or pick a photo of a check. It doesn’t look at any other photos.

Website fonts

Our web pages load fonts from Google Fonts, so your browser sends your IP address to Google when it fetches them.

Emails to us

If you write to us, we use your email address and message only to answer you, and delete the conversation when it is no longer needed.

3. Why we use it

We process this information to provide the service you ask for: reading your check and running the shared page (performance of a contract, Art. 6(1)(b) GDPR), and to keep the service secure and prevent abuse (our legitimate interests, Art. 6(1)(f) GDPR).

4. Who processes it for us

• Cloudflare, Inc.: hosting, storage of shared checks, network and security.
• OpenAI: reading receipt photos.
• Google: delivering web fonts on our pages.
• Apple and Google: on-device text recognition and app distribution through their stores, under their own privacy policies.

These providers may process data in the United States and other countries. Where data leaves the EEA, UK or Switzerland, they rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

5. How long we keep it

Information	Kept for
Receipt photo	Not stored by us; up to 30 days at OpenAI for abuse monitoring
Shared check	7 days, then deleted automatically
Name, payment details, My checks	On your device until you delete them or the app
Server logs	A few days
Support emails	Until your question is resolved

6. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to data portability. Because CheckMates has no accounts, we usually can’t tell which data is yours; send us the link of a shared check and we will delete it straight away. You also have the right to complain to your local data protection authority.

7. Children

CheckMates is not directed at children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal data.

8. Security

All connections use HTTPS. Shared check links are long and random, and only the person who created a check can change its items. No system is perfectly secure, so please don’t put sensitive information in a shared check.

9. Changes

If we change this policy, we will update the date at the top. If the change is significant, we will also mention it on our website.

10. Contact

Questions or requests about privacy: support@checkmatesapp.com.