Veeva helps people share expenses and keep track of balances. This policy explains the information Veeva uses to run the app, who receives it, and what happens when you delete your account.
Information you provide
- Account and identity: your name, email address, sign-in method, and verified phone number. Sign-in is handled through Firebase Authentication and, if you choose them, Apple or Google sign-in.
- Groups and expense history: group membership, names of guests you add, expense descriptions and amounts, currencies, splits, invitations, balances, and settlement records. Veeva records that a payment was marked as settled; it does not transfer money.
- Payment details you choose to add: such as an InstaPay address or link, IBAN, bank name, and account holder name. Veeva makes these available to an eligible person who owes you money within the app. You can remove your payment details from your profile.
- Receipts: images you attach or scan, plus details extracted from a scan. A receipt attached to an expense can be viewed by people with access to that expense.
Contacts and photos on your device
If you allow Contacts access, Veeva reads contact names and phone numbers on your device to help you find people already using Veeva. The app converts phone numbers into lookup keys and sends those keys in a request to Firebase. It does not save a copy of your address book as a contact list. You can deny or revoke Contacts access in device settings and still use the rest of the app.
If you choose a profile photo, the image is saved on your device. Veeva stores a reference to it in your profile; the image itself is not uploaded as a profile photo. Receipt photos are different: attaching or scanning a receipt uploads that image to Veeva's Firebase Storage.
Receipt scanning and AI processing
Scanning is optional. When you ask Veeva to scan a receipt, the app uploads its image to Firebase Storage and a Veeva server sends it to FreeOCR.AI for automated text and field extraction. FreeOCR uses BytePlus ModelArk and infrastructure providers to process API requests. FreeOCR says it does not intentionally keep direct API images or outputs after processing, but limited security or legal retention can occur. BytePlus may retain content that triggers its safety filter in Malaysia for up to 180 days. Processing may also occur in the United States, Indonesia, or the EU/EEA. Veeva stores the image and extracted result so you can review the expense. Do not scan receipts that show a full payment card number or other highly sensitive information; enter the expense manually instead.
Service operation and diagnostics
Veeva uses Firebase services from Google to authenticate accounts, store app data and receipts, run secure expense operations, understand which app features are used, and diagnose crashes. Analytics events describe screen visits and actions using categories, counts, and currencies; Veeva's own event fields do not include names, email addresses, phone numbers, payment details, or expense descriptions. Crash reports may include technical details such as the app version, screen category, error category, device or operating-system information, and a stack trace. Veeva does not deliberately attach your account ID or your expense text to crash reports. Google may process service data under its own terms and privacy notices.
Who can see your information
People in a group can see the shared expense and settlement information needed to understand their balances, including guest names and receipts attached to shared expenses. Private account fields and payment details are not available through a public user directory. Payment details are shown only in the app's eligible debt flow. Service providers described above process data to operate Veeva. Veeva does not sell your personal information or show third-party advertising in the app.
How long information remains
Account, group, and receipt information is kept while your account is active and needed to provide the service. When you delete your account in Profile → Delete account, Veeva deletes your sign-in record, private profile and payment details, phone lookup entries, and receipt files and extracted receipt records owned by your account. An inaccessible group containing only your account and guests is deleted. Shared groups keep past expenses and settlements so other members' balances remain correct; your entry is reduced to your first name followed by “(deleted).” Accepted invitation records needed to preserve shared access may remain with your email removed. You may email us about remaining personal information or request further deletion where possible. Provider operational, security, and diagnostic records may remain for their stated retention periods.
Your choices and requests
You can edit your name, phone number, and payment details in the app; choose whether to grant Contacts and camera access; skip receipt scanning and enter expenses manually; and delete your account in the app. For access, correction, deletion, or privacy questions, contact ihab.mouti@gmail.com. We may need to verify that a request concerns your account before acting on it. Withdrawal of device permission does not erase data already saved in an expense or sent for a scan.
Changes and contact
If our data practices change, we will update this page and its effective date. The person responsible for Veeva is Ihab Abdelmouti. Contact: ihab.mouti@gmail.com.