Privacy

Last updated: 27 October 2026

KickBill lets a group split a restaurant bill from a shared link. There are no accounts and no passwords. This page says what we keep, why, and for how long.

Who we are

KickBill is a hobby project run by Lena. Contact: [email protected].

What we keep

Your device's random ID. One cookie, _kick_bill_key, holds a random ID so we recognise your device when you come back. It is signed, so it can't be forged, and it lasts a year. It is not used for tracking or advertising.
The name, colour and icon you pick: when you join a room, and the ones your device suggests next time.
Payment handles you save: Revolut, PayPal or Lightning, so others in a room can pay you back.
Bill photos you take: used to read the bill. A photo that doesn't resolve to a room isn't saved in our photo storage.
The bill's contents read from them: restaurant, items, prices, totals, and anything else printed on the bill, which can include a waiter's name or a table number.
What happens in a room: who joined, who had what, who has paid.
When your device last visited.

We remove location and camera details (EXIF metadata) from photos before they are stored or sent anywhere.

Why we keep it

We use this data only to run the service you ask for: reading the bill, keeping the room in sync and showing who owes what. We also use it to keep the service working and secure.

Why we use it, and on what basis

Your room, the bill photo and what's read from it, and payment handles you save: you ask for these by using KickBill, so we use them to provide it (GDPR Art. 6(1)(b)).
Error reports: our legitimate interest in keeping KickBill working (Art. 6(1)(f)). You can object by emailing us.
The _kick_bill_key cookie: strictly necessary to run KickBill, so it needs no consent.

What we don't do

No analytics, no ads, no tracking across sites, and we don't sell data. We never handle money: payment links open the payment provider you choose.

In your browser

Your browser keeps a draft of your name, colour and icon for each room until you clear this site's data. Colour and icon choices are also sent to the server before you join, to keep the available choices up to date. Your name is sent when you join.

Who processes data for us

Gigalixir: runs the app, in the EU.
Supabase: hosts the database, in the EU.
Amazon Web Services: stores bill photos, in the EU.
Anthropic: reads the bill from a resized photo with its metadata removed. Photos are sent for reading before we know whether they can be used, including photos that don't turn out to be usable bills. Anthropic's retention rules apply to those requests separately from our photo storage.
Sentry: receives error reports to help us fix problems, stored in the EU. We remove IP addresses from them, and filter out names, bill contents and payment handles as far as we can.

Each one handles data under its own privacy policy (linked).

Anthropic is based in the US; data sent to it is covered by Standard Contractual Clauses for transfers from the EU. Sentry stores our error reports in the EU.

How long we keep it

Rooms, with their items, people, claims and payment state: deleted 90 days after the room is created.
Bill photos: deleted 90 days after upload.
Your device's ID, your suggested name and saved payment handles: deleted after 12 months without a visit, once you're no longer in any room.

Your rights

You can ask us what we hold about your device, or ask us to delete it. Contact: [email protected]. You can also complain to your data protection authority.

Changes

If this page changes, the date at the top changes too.