Loading…
platy24 splits a bill between friends. It works without an account, and it collects as little as it can get away with. This page says exactly what it keeps, why it is allowed to, and for how long.
No account is required and none is created unless you ask for one. There is no analytics, no advertising, and no third-party tracking of any kind — which is also why this site has no cookie banner to dismiss.
What platy24 stores is what you put into a tab: what was bought, what it cost, and the names you typed for the people sharing it.
platy24 is run by Evgenii Chopei, who is the data controller for everything described on this page — meaning the person who decides what is collected and why, and the person answerable for it.
Questions, requests and complaints all go to bojenkaaaa@gmail.com, and are answered within one month.
The first time you create or join a tab, your browser is given an anonymous session. It is an identifier and nothing else — no name, no address, nothing that says who you are. It is what lets the app show you your own tabs and nobody else's.
It lives in a cookie. Clear your browser data and it is gone, along with your way back into any tab you have not written the code down for.
Everything below is something you or somebody at your table typed in or photographed.
Once you have shared a tab with somebody, you can invite them into another one without sending a code. To make that work, platy24 records that an invitation was sent, by whom, to whom, and whether it was accepted or declined.
It only ever works between people who have genuinely been in a tab together. There is no user search in this app, no directory, and no way to reach somebody you have not already split a bill with. What crosses between two people is the display name they had already chosen to show each other — never an email address.
Signing in is optional and buys exactly one thing: your tabs stop living on a single device. platy24 receives your email address and the name on your Google account, and stores them to show you which account you are signed in as and to send you the messages described in the next section.
No contacts, no calendar, no files, no Google data beyond your basic profile is requested or received. You can sign out at any time, and you can disconnect platy24 from your Google account's own security settings.
Only if you are signed in, because only then is there an address. Anonymous use — which is most of it — sends no email at all, ever.
Each message waits a minute first, and is dropped unsent if you have already seen the thing it is about in the app. There is no marketing email, no digest, no reminder and no newsletter: the three below are the whole of it.
You can switch any of them off under your account on the home screen, and every message carries a link that turns all three off without signing in. Turning them off changes nothing else about your tabs.
The three, in full:
Five things, all of them doing a job you asked for. None of them is used to profile you, follow you between sites, or measure anything — which is why none of them needs a consent banner:
Two features send data outside platy24, and only when you use them.
Scanning a receipt sends that photograph to Google, which reads the line items off it. Typing an order into the chat box sends that text to OpenAI, which turns it into a list of items and prices. Both are processed under those companies' API terms as processors for platy24, and platy24 does not permit either of them to train models on what it sends.
A receipt can carry more than its line items — a merchant, a date, sometimes the last digits of a card. Adding an expense by hand sends nothing anywhere. If you would rather no photograph left this app, that is the tab to use.
Two things are recorded that nobody typed in, and both exist to keep the service standing up.
A tab code is six characters, so somebody could try to guess one. Every attempt to open a tab by code is logged with the IP address it came from, the code that was tried, and whether it worked; ten failures in fifteen minutes and that address is turned away.
The AI features cost real money per call, so each call is recorded against the account that made it, to cap how many one account may make in fifteen minutes. What was photographed or typed is not recorded — only that a call happened.
Both are deleted automatically after 24 hours. The checks themselves only ever look back fifteen minutes; the rest is headroom for looking into an incident.
Under the GDPR every purpose needs a lawful basis. These are platy24's:
Anybody holding the tab's code, and its password if it has one. That is the point of the code, and it is why a tab is as private as the group chat you shared it in.
Inside a tab, everyone is equal: any member can add, edit or delete any expense, and can claim items for anybody. It works the way a table works — on trust. Do not put anything in a tab you would not say out loud to the people at it.
The database, the authentication and the receipt photographs are held by Supabase. The site itself is served by Vercel. Both act as processors for platy24 under written terms, and neither uses the data for their own purposes.
Alongside them, Google and OpenAI process only what the two AI features above send them, and Resend delivers the email described above — it receives the address it is sent to and the message itself, and nothing else.
Some of these providers operate outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by the safeguards in those providers' data processing terms — the European Commission's Standard Contractual Clauses, or an adequacy decision where one applies. You can ask for details of the safeguards at the address above.
A tab and everything in it stays until somebody deletes it. Deleting a tab deletes its expenses, its items, its claims and its receipt photographs with it, and cannot be undone. Photographs are removed from file storage at the same moment; anything a failed request leaves behind is swept up automatically within the hour.
The two ledgers are deleted after 24 hours. Everything else has no timer on it — if you want a tab gone, delete it, and if you want everything gone, write to the address above.
If you are in the EEA or the UK, the law gives you the following rights over your personal data. platy24 honours them wherever you are.
If you think platy24 has handled your data wrongly, please write to bojenkaaaa@gmail.com first — most things are a misunderstanding or a bug, and both are fixable.
You also have the right to complain to a data protection authority without going through us. In the EEA that is the supervisory authority of the country you live or work in; in the UK it is the Information Commissioner's Office; in Ukraine it is the Verkhovna Rada Commissioner for Human Rights.
There is no profiling and no automated decision-making in platy24. The AI features read a receipt or a sentence and hand you a draft to check; nothing is decided about you, scored, or acted on without you confirming it.
platy24 is not directed at children. It is not intended for anybody under 16 in the European Economic Area, or under 13 elsewhere, and no account should be created for one.
If this policy changes, the date at the top of this page changes with it. Material changes will be worth telling you about, and will be.