Privacy Policy for Amy
Last updated: October 30, 2026This is a translation. If the two versions differ, the German version applies.
1. The short version
Amy is a free app for keeping track of shared expenses and working out who owes whom how much. For that we need your email address, your name and the expenses that you and your groups enter.
- We show no ads and sell no data.
- We build no profiles about you and do not track you across other apps or websites.
- What you enter in a group is visible to the other members of that group.
- You can delete your account in the app at any time.
The details follow below.
2. Who is responsible?
The controller for the processing of your data in the Amy app and on the website amy.borstessi.de is:
Lennart Borstelmann
Schwarzer Weg 70
32549 Bad Oeynhausen
Germany
Email: hello@amy.borstessi.de
We have not appointed a data protection officer because there is no legal obligation to do so. If you have questions about data protection, write to the address above.
3. What data does the app process, for what purpose and on what legal basis?
3.1 Account and sign-in
When you sign up, you enter your email address, your first name and your last name. There is no password: every time you sign in, we send you a one-time code by email. The sign-in and the sending of these codes are handled by the service Clerk (section 6). The codes come from a sender address on our domain tally.borstessi.de. Clerk also stores technical details about the session, such as IP address, device type and time of sign-in.
In our database we create a profile with your email address, your name, an avatar (initials, emoji or colour), the language of your device, your default currency and your notification settings.
- Purpose: to provide your account, sign you in securely and email you changes to the terms of use for your consent.
- Legal basis: performance of the contract of use, Art. 6(1)(b) GDPR.
3.2 Groups, expenses and your budget
So that Amy can do the maths, we store what you and the other members enter:
- groups with name, picture, currency and members,
- expenses with description, amount, date, category, who paid and how it was split, and for foreign currencies the exchange rate,
- the photo of a receipt, if you attach one to an expense,
- payments between members,
- a history of activity in a group, such as who added, changed or deleted an expense,
- friendships and friend requests,
- for your personal budget, your income and fixed costs with name, amount, interval and an optional note.
This data is stored with our database service Convex (section 6).
- Purpose: to provide the features of Amy.
- Legal basis: Art. 6(1)(b) GDPR.
Our server fetches exchange rates from the service Frankfurter (frankfurter.app). It only sends currencies and a date, nothing about you.
When you photograph a receipt or pick a photo from your gallery, the app reads its text on your device, with Apple's text recognition on an iPhone and Google's ML Kit on Android. It does not send the photo to any server for this. What it recognises, the amount, currency, date and shop, it fills into the form. Only when you save the expense does the app upload a scaled-down copy of the photo to Convex. Your operating system asks you before the app can use the camera.
3.3 Information about other people
In Amy you can add people who do not use the app, so-called guests. For a guest we store the name you give them and the expenses they are part of. Optionally you can add an email address so the person can later link the guest to their own account. The members of the group see this address while the invitation is open. You can also send a friend request to an email address that has no account yet. Amy does not email this person. The request waits 90 days for someone to sign up with that address. After that we delete it.
Please only enter what is needed for settling up about other people, usually a first name.
- Purpose: to settle shared expenses with people who do not use the app.
- Legal basis: the legitimate interest of the group in a complete settlement, Art. 6(1)(f) GDPR.
3.4 Push notifications
If you allow notifications in your operating system, we store the push token of your device. When we send you a message, such as "Emma paid €96.00 for 'Fondue'", it goes with this token through the push service of Expo to Apple (iPhone) or Google (Android) and from there to your device. The message contains names, amounts and descriptions from your groups.
You choose which notifications you get in the app under "Menu", "Notifications". If you switch them off completely there or sign out, we delete the push token. If Apple or Google report that the device no longer accepts messages, for example because you deleted the app, we delete it as well.
- Purpose: to tell you about new expenses, payments and requests.
- Legal basis: your consent through the dialog of the operating system, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time in your device settings.
3.5 Error reports and stability
To find crashes and bugs, the app uses the service Sentry (section 6). When an error occurs, Sentry receives a report with the error message, app version, device type, operating system, your last steps in the app and an internal user ID. We do not send names, email addresses, invite codes or expenses.
In 10 percent of sessions and with every error, Sentry also records the screen history as a replay. All text and images are masked, so no content is visible.
Sentry processes the data in the EU (data centre in Frankfurt), does not store IP addresses and deletes the data after 90 days at the latest.
How fast the app starts and loads its screens is measured by the service EAS Observe from Expo (section 6). It receives the measured times, the name of the screen, app version, device type, operating system, battery level and network connection at start, and a random ID of this installation. The ID is not tied to your account and changes when you reinstall the app. We do not send invite codes or names from the app. Expo deletes these measurements after 90 days.
- Purpose: to detect and fix errors, and to find slow starts and screens.
- Legal basis: legitimate interest in an app that works, Art. 6(1)(f) GDPR, and for access to your device Section 25(2) no. 2 TDDDG.
3.6 App updates
On start, the app asks the update service of Expo whether a new version is available and downloads it if so. Expo receives technical details such as IP address, app version and operating system.
- Purpose: to ship bug fixes quickly.
- Legal basis: Art. 6(1)(f) GDPR.
3.7 Feedback and ratings
After a while the app asks whether you like Amy. We store your answer and, if you write any, your feedback together with app version, platform and language. If you want to rate the app, the rating dialog of Apple or Google opens. What you enter there is processed by Apple or Google under their own privacy policies.
If you email us, for example through "Send feedback" to feedback@amy.borstessi.de, we process your address and your message to reply.
- Legal basis: Art. 6(1)(f) GDPR, for requests about your account Art. 6(1)(b) GDPR.
4. What do the others in your group see?
Members of a group see your name, your avatar and everything entered in that group, that is expenses with their receipt photos, payments, balances and the activity history. They do not see your email address, and our server does not send it to them.
Friends you settle up with directly also see your email address so they can recognise you for sure. The same applies to someone you send a friend request to.
Nobody but you sees your income, your fixed costs and your personal statistics.
If you export a settlement as a PDF, the file is created on your device. You decide who you send it to.
5. What does Amy store on your device?
So that the app starts fast and shows something without a connection, it stores a copy of your groups, expenses and profiles on your device. It also remembers your sign-in status, the email address you last used, your colour scheme and whether it has already asked you for a rating. This data does not leave your device. When you sign out or delete your account, the app deletes the copy of your data. When you delete your account, it also forgets the email address you last used.
Changes you make without a connection, and the receipt photos that go with them, stay on your device until the app has sent them to Convex. If you sign out while changes are still waiting, the app asks whether to discard them. If you keep them, the app sends them the next time you sign in with the same account. If you delete your account, it discards the waiting changes.
This storage is necessary for the app to work, Section 25(2) no. 2 TDDDG.
7. The website amy.borstessi.de
Hosting and server logs
The website is hosted by Vercel. On every visit, Vercel stores technical details such as IP address, requested address, time, browser and operating system in logs and deletes them after 7 days.
- Purpose: to deliver the website and protect it from abuse.
- Legal basis: Art. 6(1)(f) GDPR.
Visitor statistics
We count visits with Vercel Web Analytics. The tool sets no cookies and does not recognise you across several days. We only see aggregated numbers, such as how many visits a page had, which country they came from and how often someone tapped a store button. We remove invite codes from the addresses first.
- Legal basis: Art. 6(1)(f) GDPR.
Error reports
The website also sends error reports to Sentry in the EU, without cookies and without invite codes.
Cookies
The website sets no cookies and stores nothing in your browser. We load fonts and images from our own server, not from third parties.
Invite links
When you open an invite link such as amy.borstessi.de/join/…, the page processes the code only in your browser to show it to you and pass it on to the app.
8. How long do we keep your data?
- Account and content: until you delete your account.
- Receipt photos: until someone removes or replaces the photo or deletes the expense. We delete an uploaded photo that never reached an expense after 2 to 3 hours.
- Push token: until you sign out, switch off notifications in the app or delete your account.
- Friend requests to addresses without an account: 90 days.
- Error reports at Sentry: 90 days at most.
- Website logs at Vercel: 7 days.
- Sign-in sessions at Clerk: expire after 7 days.
- Emails to us: until the request is dealt with, then 6 months.
9. What happens when you delete your account?
You delete your account in the app under "Menu", "Account", "Delete account". If you can no longer get into the app, write to hello@amy.borstessi.de.
We then delete your income and fixed costs, your personal expenses, your friendships and requests, your notifications and your sign-in account at Clerk. Groups in which nobody else with their own account is a member any more are deleted completely, with all expenses and guests.
Shared expenses in groups with others remain, with their receipt photos, otherwise their balances would no longer add up. There we replace your name with "Deleted User" and remove your email address. We also replace the name in the group history, in the name of a friend group and in the notifications others see in the app. Push messages that have already reached a device cannot be recalled.
10. Your rights
You have the right
- to get information about the data stored about you (Art. 15 GDPR),
- to have incorrect data corrected (Art. 16 GDPR),
- to have your data deleted (Art. 17 GDPR),
- to have processing restricted (Art. 18 GDPR),
- to receive your data in a common format (Art. 20 GDPR),
- to object to processing based on our legitimate interest (Art. 21 GDPR),
- to withdraw a consent at any time with effect for the future (Art. 7(3) GDPR).
Write to hello@amy.borstessi.de for any of these. If you ask for information, we send you your data as a file.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
11. Do you have to provide your data?
Without an email address and a name you cannot create an account and cannot use Amy. Everything else, such as push notifications, is optional.
12. Children and young people
Amy is meant for people aged 16 and over. If you are younger, you need your parents' consent.
13. Automated decisions
Amy makes no decisions about you based solely on automated processing (Art. 22 GDPR). The balances are plain calculations from your entries.
14. Changes to this privacy policy
If the way Amy processes data changes, we update this policy. The current version is always at amy.borstessi.de/en/privacy. We tell you about significant changes in the app.