1. Who we are
Tabby is made and operated by Kealy Studio, based in Spain. This policy explains what we store when you use the Tabby mobile app and this website, who can see it, and what you can do about it. It is written to be read, not to be survived — if anything here is unclear, email us at support@kealy.studio and we'll explain it.
2. What we collect
Only what the app needs to split a bill. Specifically:
- Your account — you sign in with Apple or Google. There are no passwords in Tabby, and we never see your Apple or Google credentials. Our authentication provider stores an account record for you, including the email address your provider passes on. If you use Sign in with Apple and choose to hide your address, that record holds Apple's private relay address rather than your real one.
- Your profile — a display name, the initials we show on your avatar, and a profile picture if your sign-in provider supplied one.
- Tabs you create or join — the photo of the receipt, the items and prices read from it, the tax, tip and total, an optional place name, who joined the tab, which items each person claimed, and what each person ended up owing. This includes whether someone has marked their share as paid, and how many times they've been nudged.
- Payment details, if you add them — a free-text bank details field, an email address and a phone number, so people who owe you money know where to send it. All three are optional and blank until you fill them in.
- A push token, if you allow notifications — a device identifier issued by Expo that lets us deliver a nudge to your phone. We only ask for notification permission after your first tab has settled, never on launch.
That is the complete list.
3. What we don't collect
Tabby contains no analytics, no crash reporting, and no advertising software of any kind. We don't track which screens you visit, we don't build a profile of you, we don't use cookies to follow you around, and we don't collect an advertising identifier. The app never asks for your location, and on Android it explicitly blocks the location, microphone and media permissions so it cannot request them by accident.
The camera and photo library permissions are used for two things only: photographing a receipt, and scanning a friend's QR code to join their tab. Nothing is uploaded except a receipt image you choose to scan.
4. How we use it
- To read the items off a receipt you photograph, so the table can claim them
- To show everyone on a tab who has claimed what, live, as it happens
- To work out what each person owes once a tab is locked
- To deliver a nudge when someone who owes you money hasn't paid
- To show your payment details to people who owe you, so they can pay you back
- To answer you when you email us for help
We do not sell your personal information, we do not share it for advertising, and we do not use it to train any model of our own.
5. Who can see what
Tabby is a shared app, so some of what you enter is visible to the people you share a tab with. Concretely:
- Your display name, initials and picture are visible to other signed-in users of the app.
- The items on a tab, and who claimed them, are visible to everyone on that tab — that is the whole point of it.
- Your payment details are visible only to people you have actually shared a tab with. Nobody else can read them, which is why they live separately from your profile.
- Nothing about your tabs is visible to the public, and no tab is readable by someone who hasn't joined it.
These rules are enforced by the database itself, on every single request, rather than by the app being polite about it.
6. The services we rely on
Tabby is a small operation and uses a handful of outside services to work. Each handles data under its own privacy policy:
- Supabase — hosts our database, our file storage, and the sign-in system. Your account, profile, tabs and receipt images live here.
- OpenAI — when you photograph a receipt, that image is sent to OpenAI's API, which reads the items and prices off it and sends back a list. This is the only time your data leaves our own systems for processing, and it happens only for receipts you actively scan.
- Expo — delivers push notifications to your device, and delivers updates to the app itself.
- Apple and Google — handle signing you in. They tell us who you are; we never see how you proved it.
Some of these providers process data outside the European Economic Area. Where that happens, the transfer relies on the safeguards those providers have in place, such as the European Commission's standard contractual clauses.
7. How long we keep it
Your account and your tabs stay until you delete them. A tab you delete is gone immediately, along with its items and claims.
You can delete your entire account from the profile screen in the app, or by asking us — see the data deletion page. Deleting your account removes your profile, the tabs you created, your claims on other people's tabs, your settled amounts and your payment details. Receipt images you uploaded are deleted within 30 days of the account being closed. We complete deletion requests sent by email within 30 days.
One thing worth knowing: a tab is shared. If you delete your account, tabs you created are removed for everyone who was on them.
8. Security
Everything is encrypted in transit, and encrypted at rest by our hosting provider. Receipt images sit in a private storage bucket that is not readable from the internet — the app reaches them through links that expire. Your sign-in session is held in your device's secure storage, not in ordinary app storage. Access to your data is restricted at the database level, per row, so one person's request cannot reach another person's tab.
No system is perfectly secure, and we won't pretend otherwise, but we would rather hold less of your data than defend more of it.
9. Children
Tabby is not intended for anyone under 16, and we don't knowingly collect information from children. If you believe a child has created an account, email us and we'll delete it.
10. Your rights
You can ask us to show you a copy of what we hold about you, correct it, export it, or delete it. You can also object to how we're using it or ask us to restrict it. Email support@kealy.studio and we'll take care of it — there's no form to fill in.
We handle your information because we need it to provide the app you asked us for, and — where you've turned notifications on — because you consented. You can withdraw that consent at any time in your device settings.
If you're in the EU or UK and you think we've handled your data badly, you're entitled to complain to your data protection authority. In Spain, that's the Agencia Española de Protección de Datos (aepd.es).
11. Changes
If we change this policy we'll update the date at the top, and for anything significant we'll tell you in the app rather than hoping you re-read this page.
12. Contact
Questions about any of this, or about your data specifically, go to support@kealy.studio.