Privacy policy

Papro is provided by PANGAEA BILISIM TICARET LIMITED SIRKETI. This policy explains the information used to provide shared expense tracking. For questions or privacy requests, contact hello@pangaea.tr.

Information you provide

• Account and profile: your name, account identifier, email address and a password stored by the service as a password hash.
• Shared expense data: groups, participant names, amounts, currencies, payment records, balances, categories, dates and recurring expense settings.
• Content you add: notes, comments, group information and the receipt photos or documents you choose to upload. Camera and photo access are used only for receipt selection or capture at your request. We do not request your location or address book.

Service and device information

The service uses account/session identifiers to authenticate you and protect group access. If you enable notifications, Firebase Cloud Messaging processes an app installation identifier and push registration token to deliver notifications. Notification enrollment is optional. Firebase and its supporting SDKs also process technical diagnostics and SDK usage information for service functionality and aggregate SDK analytics. Local preferences, cached group information and pending changes help the app work offline. Our infrastructure may process IP addresses and operational request logs for security, troubleshooting and service delivery.

How information is used and shared

We use this information to maintain accounts, synchronize groups, calculate shares and balances, display receipts and comments, send requested notifications, respond to support requests and prevent misuse. Group members can see the information shared within their group. Invitation previews expose limited group details, not expenses or balances. Service providers process information to host and operate the service; Google Firebase provides optional push delivery. We do not sell personal information, serve advertising or track you across other companies' apps and websites.

Retention and deletion

We retain account and group information while it is needed to provide the service. You can delete your account from Profile → Account settings → Permanently delete my account. Your account, sessions, notification registrations and attributable personal content are removed. Shared accounting records may remain for the other participants, with account links removed and your name anonymized. For older shared attachments, we remove those that can be attributed to your account; unidentifiable content may remain with the shared record. Contact us if you need help identifying personal content.

Your choices and security

You can update your profile, disable notifications, export group records as CSV and delete your account. You can change camera/photo permissions in your device settings. Connections use HTTPS. Account tokens use Apple secure storage on iOS and encrypted secure storage on Android. Access to group data is restricted to authorized members. No system can guarantee absolute security. To request access, correction or deletion of personal information, email hello@pangaea.tr.

Changes to this policy

We may update this policy as Papro changes. The date at the top identifies the current policy.