Privacy Policy

Account and profile

When you create an account, we collect:

• Your name and email address, and a password if you sign up with one (passwords are stored only as a salted hash, never in readable form).
• If you sign in with Google, the basic profile information Google shares with us — your name, email address, and profile picture.
• Optional profile details you add, such as a display name, profile photo, language preference, and your public Venmo username (used to prefill settle-up payments).
• Verification and sign-in codes we send to confirm it's you.

Your nest and members

To run a shared ledger, we store:

• Your nest's name and settings, including the split rule that decides who pays what.
• Membership details — who belongs to a nest and their role.
• Email addresses you enter to invite someone, and the name you give an as-yet-unregistered partner so the app can show their share before they join.

Expenses and financial activity

The core of Eider is the expenses you record. For each one we store:

• The amount, date, merchant or payee, category, and any title or notes you add.
• How the expense is split between members, and who paid.
• Settle-up records — the amount, who paid whom, the method you noted, and when — along with a history of changes that keeps the ledger accurate.

Device and technical information

To keep the app secure and deliver notifications, we collect:

• Your IP address and browser or device type, recorded with each sign-in session.
• Session identifiers that keep you signed in.
• If you enable push notifications, a device push token plus your device's platform and name, so we can deliver alerts to the right device.
• Crash and error diagnostics. When something goes wrong, the app sends us an automatic report with the error, the app version, your device or browser type, and a random per-install id. We filter out personal details — names, email addresses, and your expense amounts and merchants — before the report leaves your device.
• Product-usage events, so we can see which parts of Eider people actually use. These record that something happened — you added an expense, settled up, invited someone — along with plain counts such as how many people are in a nest. They never carry an amount, a merchant, a description, or anyone's name or email address.
• Performance timings from our servers. To find and fix slow app opens, we record how long our servers take to answer the requests that load your home screen, and how long each step of that work took, along with the app version. These timings carry no name, email address, account id, or anything about your expenses.

Information you start but don't finish

If you begin adding an expense and don't finish, we temporarily save your in-progress entries so you can pick up where you left off. These drafts expire automatically.

Connected bank and card accounts

If you connect a bank or card account, Eider imports the charges on it so your spending is in one place and you can add the ones you choose to a nest. Connecting an account is optional, and Eider works fully without it.

You connect the account through Plaid, a financial-data provider. You enter your online banking credentials with Plaid, never with Eider, and we never see or store them. Plaid returns a connection token that we use to read that account's transactions and its basic details, such as the institution, the account type, and the last four digits. What Plaid collects when you connect is covered by Plaid's own privacy policy at plaid.com/legal.

We keep our own copy of the charges we import, rather than fetching them from your bank each time you open the app. That copy is what the app searches, filters, and charts, and it is how Eider tells which charges are new. When you first connect an account, we ask for up to 24 months of past charges, so your history is there from the start. For each connected account we store:

• The institution's name, the bank's own name for the account, the account type such as checking or credit card, the card brand where there is one, the last four digits of the account number, and the identifier Plaid uses to recognize the account.
• For each charge: the amount, the currency, the date, the description your bank sends, the tidied-up merchant name, and the category.
• Whether a charge is still pending at your bank, and whether you have added it to a nest.
• The state of the connection itself, including when charges last arrived and whether it needs you to sign in to your bank again.

What a connection does not give us

We ask Plaid for your transactions and the basic details of the account itself. We do not store your account balance, and we never request your full account or routing numbers, your identity records, or any income or liability information. Eider cannot move money through the connection.

How imported charges are stored

The charge details, including the merchant name and category, are stored in readable form in our database, because searching, filtering, and charting your spending run against them directly. They are covered by the protections described in How we protect your information, and by access controls that scope every read of them to you.

Features that connect outside data

Some paid-plan features will work with information beyond what you type in. When they become available and you choose to use them:

• Receipt scanning (a paid-plan feature being added) will let you photograph a receipt, and we would process the image to extract details such as the merchant, total, and line items.

With members of your nest

Eider is a shared ledger, so your activity in a nest is visible to the other members of that nest. This includes the expenses you add, how they're split, the running balance, settle-up records, your display name and profile photo, and the Venmo username you choose to share for payments. Only share a nest with people you trust with this information.

What your nest sees from a connected account

Charges imported from an account you connect are private to you. Nobody else in your nests can see them, and they never reach a nest's activity, balance, or totals, however many nests you belong to.

That changes only for a charge you add to a nest yourself. It then becomes an ordinary expense in that nest, and the other members see its amount, date, merchant name (or the description your bank sent when there is no merchant name), category, and anything you add to it, exactly as if you had typed it in. They also see which account paid for it, shown as your name with the card brand or account type, such as "Alex's VISA".

They do not see the last four digits of your account number, the name you gave the account, your balance, or any charge you have not added to that nest.

With service providers

We rely on trusted companies to run Eider. They may process your information only to provide services to us, under contracts that limit how they use it. These include:

• Cloud hosting and database providers that store and serve the app's data.
• Authentication and sign-in providers, including Google when you choose Google sign-in.
• Push-notification delivery services, when you enable notifications. A delivery service passes each notification to Apple's or Google's operating-system push system, so it receives the notification's text along with your device's push token.
• An email provider that sends account and verification emails.
• A crash-, error- and performance-diagnostics provider that receives the automatic error reports and server timings described above, so we can find and fix problems.
• A product-analytics provider that receives the usage events described above, so we can see which features are used and where people get stuck.
• Plaid, when you choose to connect a bank or card account. You sign in to your bank with Plaid rather than with us, and Plaid passes us that account's transactions. Plaid's handling of your information is governed by its own privacy policy at plaid.com/legal.
• Features that aren't available yet would bring providers of their own — an AI provider to read receipt images on a paid plan, and payment or app-store providers to handle subscriptions. We'll update this policy before any of them receives your information.

Venmo and other payment apps

Eider does not move money. When you settle up, we open your chosen payment app — such as Venmo — with the amount and a note prefilled, using the public username you provided. The payment itself happens in that app under its own terms; Eider never sees your payment credentials or transfers funds.

For legal and safety reasons

We may disclose information if required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, safety, and security of our users, the public, or Eider. If Eider is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your data

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

While your account is active

Your nest data — expenses, splits, settle-ups, and settings — is retained so your shared history and running balance stay accurate over time.

When a member leaves a nest

If you leave or are removed from a nest, your membership ends, but the expenses and settle-ups you recorded remain part of that nest's shared history so the remaining members keep an accurate ledger. Your name may appear as a former member on those past entries.

When you delete your account

You can delete your account from Settings, or by emailing support@eider.app. Deletion has a seven-day grace period: your account is deactivated straight away, and signing back in during those seven days restores it. After that we remove the associated personal information — keeping only what we must to meet our legal obligations, and the shared nest history that other members still need, as described above.

How to delete your account

Notifications

Notification records are kept so your history and unread counts stay consistent across your devices, and are removed only through our normal data-cleanup processes.

Receipt images

When receipt scanning becomes available on paid plans, receipt images and the details extracted from them would be stored with your account and retained subject to your plan's limits. This section applies once that feature is available to you.

Connected accounts and imported charges

Imported charges are kept for as long as you keep the connection, so your own record of your spending does not shrink over time. You can turn an account's import off at any time, which stops new charges from arriving and leaves the ones already imported in place.

Disconnecting an account stops new charges from arriving straight away, and we release our access to that account with Plaid. The charges already imported stay on your private list, and any expense you have already added to a nest stays on that nest's ledger.

Deleting your Eider account removes your imported charges outright. Expenses you added to a nest remain part of that nest's shared history, as described above.

Access and a copy of your data

You can request a copy of the personal information we hold about you from Settings. We prepare the file and email you a download link, which stays valid for seven days. You can also email support@eider.app if you'd rather we handle it.

Deletion

You can delete your account from Settings, or ask us to delete your personal information by emailing support@eider.app. Some shared nest history may remain with the other members, as described in How long we keep your information.

Correction

You can edit your profile and your own expenses directly in the app. If you can't change something yourself, contact us and we'll help.

Notifications and communications

You can turn push notifications on or off in the app or in your device settings. We may still send essential account and security messages.

Regional privacy rights (GDPR and CCPA)

If you are in the European Economic Area or the United Kingdom, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Our legal basis for processing is generally the performance of our contract with you, your consent, or our legitimate interests in operating and securing the app.

If you are a California resident, you may have rights to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights. We do not sell your personal information. To exercise any of these rights, contact us at support@eider.app; we will verify your request and respond as required by law.