Privacy policy

At Commingle, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it and the choices available to you.

Information we collect

Optional: Your name, pronouns and avatar

Providing your name, pronouns and avatar is entirely optional. You can create and use a Commingle account without them, although your name may be imported automatically if you sign in with Apple or Google. You can change or remove any of this information at any time.

You are free to use your real name, a nickname or any other display name you prefer. This information is primarily used to help you and your friends recognise each other when using shared features such as adding friends or splitting expenses. A profile photo makes this even easier, but it is never required.

If we contact you by email, we may also use your chosen name and, where appropriate, your preferred pronouns to personalise our communication.

Your profile information is visible only to people you interact with through Commingle’s shared features.

We retain this information until you delete your account. Following account deletion, it is removed within 30 days unless we are legally required to retain it.

Strong E2E Encryption

Encrypted: Personal financial data

All personal financial information you choose to store in Commingle is end-to-end encrypted before it leaves your device. Commingle stores only the encrypted version of this data and cannot access or read its contents. Only your authorised devices can decrypt it.

This includes your personal expenses, income, transfers, adjustments, categories, events, wallets, notes, attachments and many of your app preferences.

Financial analysis, aggregation, charts, insights and most other Commingle features are performed directly on your device unless explicitly stated otherwise within the app.

Your email address

We collect your email address to:

• create and manage your account
• communicate important account and security information
• send subscription and billing-related notifications
• notify you about significant changes to Commingle

Your email address is provided by Apple or Google during registration unless you choose another supported sign-in method.

We retain this information until you delete your account. Following account deletion, it is removed within 30 days unless we are legally required to retain it.

AI-powered features

Commingle offers optional AI-powered features to help you save time when managing your finances. These features are entirely user-initiated or can be disabled at any time.

Examples include:

• scanning receipts
• creating transactions using your voice
• suggesting categories while you enter a transaction

To provide these features, a limited subset of the information you provide–such as transaction descriptions, receipt images, voice recordings or other information necessary to understand your request–may be transmitted to third-party AI service providers for processing.

We only send the information reasonably necessary to fulfil your request. AI processing is used solely to generate the requested result and is not used to make automated decisions about you.

Receipt scanning and voice transactions are processed only after you explicitly initiate them. AI category suggestions can be disabled at any time in the app’s settings.

We currently use Google’s Gemini models for certain AI features and may use other AI providers or models in the future where they provide comparable privacy protections or improve quality, performance or cost. Regardless of the provider used, your data is processed only for the purpose of providing the AI feature you requested.

Multi-user transactions

Transactions involving multiple participants are shared with those participants.

Any participant may update a shared transaction, and those changes will be reflected for everyone involved.

If you delete your account, other participants will continue to have access to shared transaction history unless every participant associated with those transactions also deletes their account.

Usage data

We collect information about how Commingle is used in order to:

• improve the app
• diagnose problems
• measure performance
• develop new features

This may include information about screens viewed, features used and app performance.

Device information

We collect technical information about your device, including:

• device identifiers (where available)
• advertising identifier (IDFA, where available and permitted)
• IP address
• operating system
• app version
• device model

We use this information for:

• fraud prevention
• security
• diagnostics
• improving app reliability
• measuring the effectiveness of our marketing campaigns

We do not use your financial data for advertising purposes.

Cookies, tracking technologies and similar identifiers

Our website and certain parts of Commingle use cookies and similar technologies to:

• remember preferences
• measure website traffic
• understand how users discover Commingle
• evaluate the effectiveness of marketing campaigns

Where required by applicable law, we will request your consent before using non-essential cookies or similar tracking technologies.

Advertising and third-party services

We work with third-party providers, including Google and Meta, for analytics and marketing.

These services may receive pseudonymised or anonymised identifiers to:

• measure advertising performance
• understand how users discover Commingle
• build similar audiences for future marketing campaigns

We never share your financial data with advertising platforms, nor do we access your social media profiles.

For more information, please refer to:

• Google Privacy Policy
• Meta Privacy Policy

How we use your information

We use your information to:

• provide, operate and maintain Commingle
• personalise your experience
• synchronise your data across devices
• provide optional AI-powered features that you explicitly request
• improve existing features and develop new ones
• analyse usage and app performance
• communicate with you about your account
• process subscriptions
• prevent fraud and abuse
• ensure the security of our services
• comply with legal obligations

Legal bases for processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal information under one or more of the following legal bases:

• Performance of a contract – to provide and operate Commingle.
• Legal obligation – where processing is required by applicable law.
• Legitimate interests – including improving Commingle, preventing fraud, ensuring security and maintaining reliable services.
• Consent – where required by law, such as for marketing cookies or similar technologies.

International data transfers

Commingle is operated using infrastructure located in the United States.

If you access Commingle from another country, your information may be transferred to and processed in the United States.

We are committed to complying with applicable data protection laws, including the GDPR where it applies.

Data security

We implement technical, organisational and administrative safeguards designed to protect your information from unauthorised access, disclosure, alteration and destruction.

While we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

Data retention

We retain your information for as long as necessary to provide our services and comply with applicable legal obligations.

When you delete your account, your personal data is scheduled for deletion within 30 days unless we are legally required to retain certain information.

Shared transaction history may remain available to other participants as described above.

Your privacy rights

To exercise any of your privacy rights, please contact us at:

hello@commingle.app

We aim to respond within one month where required by applicable law.

For users in the European Economic Area (GDPR)

You have the right to:

• access your personal information
• correct inaccurate information
• request deletion of your information
• restrict processing
• object to processing
• request data portability
• withdraw consent where processing is based on consent

For California residents (CCPA/CPRA)

You may have the right to:

• know what personal information we collect
• request deletion of your information
• request correction of inaccurate information
• opt out of the sale or sharing of personal information where applicable

Children’s privacy

Commingle is not intended for children under the age of 13.

If you are under the minimum age required by the laws of your country, you may only use Commingle with the permission of a parent or legal guardian.

If you believe a child has provided personal information to Commingle, please contact us and we will promptly delete that information.

Data controller

The data controller responsible for processing your personal information is: Krzysztof (Chris) Rutkowski – Founder of Commingle.

Your data is securely stored using Google Cloud data centres located in Iowa, United States.

Acceptance of this Privacy Policy

By creating an account and using Commingle, you acknowledge that your personal information will be processed as described in this Privacy Policy.

Where required by applicable law, we will ask for your consent before processing information for specific purposes such as marketing cookies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make significant changes, we will notify users through the app, by email or by other appropriate means where required.

Contact us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

hello@commingle.app