cowspent/PRIVACY.md

Privacy Policy for Cowspent

App: Cowspent (net.helcel.cowspent) Developer: Helcel Effective date: 19 September 2026

What we collect

Nothing. We operate no servers and receive no data from the app. Cowspent contains no analytics, advertising, or tracking libraries.

Data you enter and where it goes

Cowspent stores your projects, members, bills, categories, and app settings on your device.

If you connect the app to a Cospend or IHateMoney server, this data is synchronised with the server you choose: either your own or one operated by a third party. That server's operator controls that copy of your data and their privacy policy applies to it. We are not involved in that transfer and cannot access it.

Your server address, username, and password or access token are stored on your device and sent only to the server you configured, over the connection it provides. If you sign in through the Nextcloud Files app, authentication is handled by that app's Single Sign-On and we never see your password.

Sharing projects

Project share links and QR codes are generated by your server. Anyone who obtains a link or code may be able to access the project, so share them only with people you trust.

Permissions

• INTERNET, ACCESS_NETWORK_STATE — synchronising with your chosen server.
• CAMERA — scanning QR codes to import a project. Images are processed on the device, never stored or transmitted.
• GET_ACCOUNTS — used by the Nextcloud Single Sign-On library to list accounts from the Nextcloud Files app.

Retention and deletion

Data on your device remains until you delete it. Clearing the app's data in Android Settings, or uninstalling Cowspent, removes the local copy and the stored credentials. Data already synchronised to a server must be deleted on that server, by you or its administrator.

Children

Cowspent is suitable for all ages and collects no data from any user, including children.

Security

Credentials and project data are held in the app's private storage, protected by the Android sandbox. Use an HTTPS server address so that synchronisation is encrypted in transit.

Open source

Cowspent is released under the GNU General Public License v3.0. The full source is available at https://github.com/helcel-net/cowspent, so these statements can be independently verified.

Changes

Any change affecting privacy will be published in this document before or with the release that introduces it.

Contact

Email: net-helcel+privacy@gmail.com Issues: https://github.com/helcel-net/cowspent/issues