privacy policy.
Debts collects only the information needed to maintain a shared debt record between people who choose to use the app. Debts contains no advertising or cross-app tracking.
Who is responsible
Verbeet UG (haftungsbeschränkt), Bismarckstrasse 116, 20253 Hamburg, Germany, is the controller responsible for Debts. The company is represented by managing director Markus Verbeet. Contact: hello@verbeet.com. Additional company information is available in the imprint.
Information we process
- Account identifiers, email address, display name, and username.
- Debt claims, amounts, currencies, optional notes, decisions, payment acknowledgements, and timestamps.
- An IBAN when you choose to save one, plus your choices about individual access and automatic approval.
- Authentication, security, and network information needed to operate and protect the service.
- A limited balance snapshot stored on your device for the Home Screen widget.
Why we process it
We process this information to create your account, show shared balances, let participants accept or decline claims and payment acknowledgements, provide optional repayment details, prevent abuse, secure the service, and respond to support requests. For users in the EEA, the principal legal bases are performance of the service you request, our legitimate interests in operating and securing it, and consent where the app asks for an optional choice.
Sharing
Information is shared only as the product requires. Claim and payment information is visible to the people involved. An IBAN stays private by default. Its owner can approve an intended payer individually or turn on public access in the app. Public access automatically approves IBAN requests only from signed-in people with a valid debt balance to repay; it does not publish the IBAN on the open web. Turning public access off stops automatic approval of future requests, and existing access can be revoked individually. We use Supabase to provide authentication, database, and realtime infrastructure. Apple provides Sign in with Apple and App Store distribution. We do not sell personal information.
Storage and retention
Service data is stored in the configured Supabase project in the European Union. We retain account and debt records while the account is active and as needed to preserve an agreed shared record, resolve disputes, secure the service, or comply with law. When an account is deleted, personal information is deleted or irreversibly anonymized unless a legal obligation requires limited retention.
Your choices and rights
You can decline unrecognized claims, choose private or public IBAN access, revoke another person's IBAN access, sign out, and delete your account. Depending on where you live, you may also have rights to access, correct, export, restrict, object to, or erase personal information. Contact hello@verbeet.com to exercise a right or ask a privacy question.
Children
Debts is not directed to children. Do not use the app if you are below the minimum age required to consent to this service in your country.
Changes
We may update this policy when the service or law changes. Material changes will be reflected here with a new effective date.