Privacy Policy
Chillwari is a personal hobby project. This policy explains what data we collect and how we use it.
What We Collect
- Anonymous users: A session cookie to remember your language preference, and a device-local session that links you to trips you joined. No name, email, or account required.
- Google sign-in users: Your Google display name, email address, and profile picture, as provided by Google. Used to identify you across devices.
- All users: Trip names, member names, expense descriptions, amounts, currencies, and payment notes you enter while using the app.
How We Use Your Data
We use your data only to operate the service — to display your trips, calculate splits, and keep you connected to your groups. We do not sell, share, or use your data for advertising.
Third-Party Services
- Google OAuth: When you sign in with Google, authentication is handled by Google. See Google's Privacy Policy for details.
- Exchange rates: We fetch live rates from a third-party provider. No personal data is transmitted.
Cookies and Tokens
We set a language preference cookie (cwr_lang) and a session cookie. Signed-in users also receive a JWT refresh token stored in an HttpOnly cookie. These are required for the service to work.
Data Retention
Trip and expense data is retained until you delete it. Sessions expire on logout. There is no automatic purge for inactive accounts at this time.
Your Rights
You can delete your trip data at any time from within the app. To request deletion of your account or Google-linked data, email us.
Changes
We may update this policy. The date at the top reflects the latest revision.
Contact
Questions? Email [email protected].