Privacy Policy

AfterBite ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the AfterBite mobile application ("App") and website at afterbite.app ("Website").

1. Information We Collect

1.1 Receipt Images

When you use the receipt scanning feature, your device's camera captures an image of the receipt. This image is sent to a third-party AI service (OpenAI) for text extraction. We do not permanently store your receipt images on our servers. Images are processed in transit and discarded after the text data is extracted.

1.2 Session Data

When you create or join a bill-splitting session, the following data is stored temporarily in our database (Supabase):

• Session code and session ID
• Extracted receipt data (store name, items, prices, tax, tip)
• Participant names (as entered by the session creator)
• Item claims (which participant selected which items)
• Device identifiers (randomly generated UUIDs, not tied to your real identity)

Session data is associated with randomly generated identifiers, not personal accounts or real names.

1.3 Device Information

The App and Website generate a random device identifier (UUID) stored locally on your device. This identifier is used solely to associate you with your session participation and is not linked to any personal information.

1.4 Information We Do Not Collect

• We do not require account creation, email addresses, or phone numbers
• We do not collect payment or financial account information
• We do not track your location (the App may request camera access only)
• We do not use advertising trackers or sell data to third parties

2. How We Use Information

We use the collected information solely to:

• Process receipt images and extract item data for bill splitting
• Enable real-time collaboration within a session
• Calculate each participant's fair share of the bill

We do not use your data for marketing, advertising, profiling, or any purpose beyond providing the core bill-splitting functionality.

3. Data Sharing

3.1 Session Participants

When you join a session, other participants in that session can see the participant names, item claims, and calculated totals. Only people with the session code can access a session.

3.2 Third-Party Service Providers

We use the following third-party services to operate AfterBite:

• OpenAI — processes receipt images for text extraction. Subject to OpenAI's Privacy Policy.
• Supabase — hosts session data. Subject to Supabase's Privacy Policy.
• Vercel — hosts the Website. Subject to Vercel's Privacy Policy.

3.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

4. Data Retention

Session data is retained only for the duration of an active session. Once a session is closed or becomes inactive, the associated data may be deleted. We do not maintain long-term archives of session data.

5. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• All data transmitted between your device and our services uses HTTPS encryption
• API keys and credentials are stored securely and are not embedded in the App binary
• Database access is controlled through row-level security policies

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to remove that information.

7. Your Rights

Since we do not collect personal account information, most traditional data rights (access, correction, deletion) are addressed by the ephemeral nature of our data collection. If you have concerns about specific data, please contact us via our Support page.

8. Cookies and Local Storage

The Website uses browser local storage to store a randomly generated device ID and your session state. We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please reach out via our Support page.