platy24 splits a bill between friends. It works without an account, and it collects as little as it can get away with. This page says exactly what it keeps, why, and for how long.
No account is required and none is created unless you ask for one. There is no analytics, no advertising, and no third-party tracking of any kind — which is also why this site has no cookie banner to dismiss.
What platy24 stores is what you put into a tab: what was bought, what it cost, and the names you typed for the people sharing it.
The first time you create or join a tab, your browser is given an anonymous session. It is an identifier and nothing else — no name, no address, nothing that says who you are. It is what lets the app show you your own tabs and nobody else's.
It lives in a cookie. Clear your browser data and it is gone, along with your way back into any tab you have not written the code down for.
Everything below is something you or somebody at your table typed in or photographed.
Signing in is optional and buys exactly one thing: your tabs stop living on a single device. platy24 receives your email address and the name on your Google account, and stores them so it can show you which account you are signed in as.
No contacts, no calendar, no files, no Google data beyond your basic profile is requested or received. You can sign out at any time, and you can disconnect platy24 from your Google account's own security settings.
Four things, all of them doing a job you asked for:
Two features send data outside platy24, and only when you use them.
Scanning a receipt sends that photograph to Google, which reads the line items off it. Typing an order into the chat box sends that text to OpenAI, which turns it into a list of items and prices. Both are processed under those companies' API terms.
Adding an expense by hand sends nothing anywhere. If you would rather no photograph left this app, that is the tab to use.
A tab code is six characters, so somebody could try to guess one. Every attempt to open a tab by code is therefore logged with the IP address it came from, the code that was tried, and whether it worked. Ten failures in fifteen minutes and that address is turned away.
This is the only thing platy24 records that nobody typed in. It is deleted automatically after 24 hours — the check itself only ever looks back fifteen minutes.
Anybody holding the tab's code, and its password if it has one. That is the point of the code, and it is why a tab is as private as the group chat you shared it in.
Inside a tab, everyone is equal: any member can add, edit or delete any expense, and can claim items for anybody. It works the way a table works — on trust. Do not put anything in a tab you would not say out loud to the people at it.
The database, the authentication and the receipt photographs are held by Supabase, in the region this project was created in. The site itself is served by Vercel. Both act as processors for platy24 and neither uses the data for their own purposes.
Alongside them, Google and OpenAI process only what the two AI features above send them.
A tab and everything in it stays until somebody deletes it. Deleting a tab deletes its expenses, its items, its claims and its receipt photographs with it, and cannot be undone.
The rate-limit log is deleted after 24 hours. Everything else has no timer on it — if you want a tab gone, delete it.
You can see everything platy24 holds about you inside the app itself: your tabs are the data. You can delete any tab you created, leave any tab you joined, and sign out at any time.
For anything that does not have a button — a copy of your data, deletion of an account, or a question about any of the above — write to bojenkaaaa@gmail.com.
platy24 is not directed at children and is not intended for anybody under 13.
If this policy changes, the date at the top of this page changes with it. Material changes will be worth telling you about, and will be.