Privacy policy
Effective 18 September 2026. The Settings screen in the app states the same promises in shorter words.
Who is responsible
Afrasiyab Afrasiyab, trading as One App Company, is the data controller for Simply and for the shared households held on its server.
Questions about this policy, or anything else about the app: hello@oneappcompany.com
1. The short version
Simply keeps your subscriptions, bills, splits and payments on your phone. An account is optional. If you sign in, a copy of your data is kept with your account, so reinstalling Simply or changing phone brings it back (section 3.3). You can switch that off.
There is no analytics, no tracking, no crash reporting, no advertising and no advertising identifier, on any tier. Nothing about you is sold or shared for advertising. Simply never connects to your bank and never holds or moves money.
A few things leave the phone, each for one job, and all of them are listed in section 3. One of them is not ours to switch off: reading a receipt photo uses Google's text recognition, which runs on the phone but reports anonymous performance figures to Google (section 3.6).
2. What stays on your phone
Everything you enter: subscriptions, bills, what each one costs and when it is due, the people in a household and how costs are split between them, the payments and settlements you record, notes, reminders, and your settings — except for a household you share, whose people, shared bills, payments and household notes are also kept on Simply's server (section 3.3).
A bank statement you import is read on the phone. The file is not uploaded anywhere.
A photo of a receipt or a bill is read on the phone, and the photo is kept on that phone only, with the one-off it became. It is never uploaded — not to Simply's server, and not to the other people in a shared household. What they see is the note it posts: the name, the amount and the date (section 3.3). Deleting the one-off deletes the photo.
Reminders are scheduled on the phone itself. They are not sent from a server.
Uninstalling Simply, or clearing its storage, deletes all of this from the phone. If you are signed in with "Keep a copy with my account" on, the copy kept with your account (section 3.3) brings it back when you sign in again. If you are not signed in, there is no other copy, because we never had one.
3. What leaves your phone, and why
3.1 A website address, to show a brand's logo
When a subscription has a website, such as netflix.com, Simply asks a public icon service for that site's logo: Google's favicon service first, then DuckDuckGo's. The request carries the website address only — not what you pay, when, or who with. Like any request on the internet, it also reaches that service from your phone's IP address.
Looking up a website, only if you switch it on. Simply fills in the website for brands it already knows without asking anyone. For a name it does not know, and only if "Look up websites" is on in Settings (it is off until you turn it on), Simply sends the name you typed to DuckDuckGo's instant-answer service to find the company's website. With the same switch on, when a bill or subscription has no contact details in Simply, Simply opens a few pages of that company's own website (such as its contact page) to read the customer service email and phone number. Nothing else goes with either — not the amount, the date, or who it is shared with.
3.2 A currency, to fetch an exchange rate
If you track costs in more than one currency, Simply fetches European Central Bank reference rates from Frankfurter, a free public service. The request carries currency codes and dates and nothing else.
3.3 Your email, if you sign in to share a household
Sharing is optional. To share a household, or to join one somebody invited you to, you sign in with your email address and a one-time code.
- Your email address is held by our database provider, Supabase, as your sign-in. The code is emailed to you through our email provider, Resend.
- The shared household — its name, currency and default split, and each person's name, colour and role, plus their email address and income if someone entered them — is stored on Simply's server, run by Supabase in London, so the people in that household can see it.
- Its shared bills. For each subscription or bill in a shared household: the name, amount, currency, how often, when it is due, category, notes, how it is split, who pays, and whether it is paused. Personal bills — ones with no household — stay on the phone.
- Its household notes. Meter readings, what the landlord said, whose card a bill comes off, and the note a receipt photo posts (its name, amount and date, never the photo) — notes pinned to a shared household, not a note on a personal subscription. Those personal notes stay on the phone.
- Its payments. For each bill marked paid in a shared household: the bill's name, the amount, the currency, the date, who paid, each person's share, and — for a bill more than one person is in — which of them have confirmed it and when, or that somebody said it was wrong. For each settle-up: who paid whom, how much, when, how, any note, and whether the other person confirmed it. This is so everyone in the household sees the same list and the same balance, and so a payment counts only once the people in it agree it happened.
- A change waiting to be agreed. When somebody proposes a change to a shared bill — what it costs, when it is due, how it splits, who pays, pausing it, ending it or removing it — the server keeps what the change would do, who proposed it, who has to agree, and who has agreed so far, until everyone has answered. It is then applied or dropped.
- Its notifications. When somebody adds, changes or removes a shared bill, marks one paid, records or confirms a settle-up, or asks someone to pay, the server keeps a short notice for each person it involves (never the person who did it): what happened, the bill's name, the amount and who did it. Only that person can read theirs. A request to be paid keeps who asked whom, how much, and any note, until it is paid or cancelled.
- An invite is stored only as a scrambled fingerprint of its code, which cannot be turned back into the code. It expires after seven days.
- A copy of your data, if you are signed in. While "Keep a copy with my account" is on (Settings → Account, on unless you switch it off), your subscriptions, bills, households, payments, notes and settings are kept on Simply's server, run by Supabase in London, so they come back if you reinstall Simply or sign in on another phone. Only your account can read it. Receipt photos and imported statements are never part of it. Switching it off deletes the copy.
Only people who hold a place in a household can read it. The server enforces that, not just the app.
Households you do not share leave the phone only as part of the copy kept with your account, if you are signed in and have it on.
3.4 A purchase, if you buy Pro
Payment is handled entirely by Google Play or the App Store. Simply never sees your card or payment details.
To know whether Pro is active, Simply uses RevenueCat, a subscription service. It receives the store's record of the purchase and a random identifier created for the install. It does not receive your name or email address.
3.5 Things you send yourself
Exports — spreadsheets, PDF statements, calendar files and backups — go wherever you choose to send them. Simply does not keep a copy of them anywhere else.
3.6 Reading a receipt photo
Taking a receipt photo opens the phone's document scanner — Google's on Android, Apple's on an iPhone — which crops and straightens the page on the phone. The text is then read on the phone by Google's ML Kit, which is built into Simply. The photo and its text are not sent anywhere to be read.
ML Kit and Google's document scanner send Google anonymous figures about how they are performing — the device type, how long reading took, whether it failed. They do not send the photo or the text in it. On Android the scanner is part of Google Play services, which may download it the first time it is used. This is Google's, under Google's terms, and Simply cannot turn it off; not using receipt photos avoids it.
4. Why we are allowed to
Under UK data protection law:
- Sharing and signing in are processed to provide the service you asked for: a household that more than one person can see.
- Purchases are processed to provide what you paid for.
- Logo and exchange-rate requests carry nothing that identifies you beyond the IP address every internet request carries, and are made only to show you the screen you opened.
5. Who else handles it
| Provider | What for | Where |
|---|---|---|
| Supabase | Sign-in, and shared households | London, UK |
| Resend | Sending sign-in codes | United States |
| RevenueCat | Confirming a Pro purchase | United States |
| Google Play, App Store | Taking payment | Their own terms |
| Google, DuckDuckGo | Brand logos; a website lookup, if switched on | Their own terms |
| The company's own website | Its contact details, if Look up websites is on | Their own terms |
| Google ML Kit | Anonymous performance figures, when a receipt photo is scanned or read | Their own terms |
| Frankfurter | Exchange rates | Their own terms |
Where a provider is outside the UK, it handles the data under the safeguards UK data protection law requires for that transfer. None of them may use it for their own purposes.
6. How long it is kept
- On your phone: until you delete it or uninstall Simply.
- A shared household: for as long as it is shared. A person or household that is removed is marked as removed, so every phone in the household hears about it, and is then no longer shown to anyone.
- A shared bill you remove: kept, and marked as removed, when payments have been recorded against it — so that history still adds up and anyone in the household can bring the bill back. A bill with no payments is deleted. Either way it leaves the lists, the totals and the reminders at once.
- Your sign-in: until you ask for your account to be deleted. Deleting it frees your place in any household. The rest of that household is not affected.
- Invites: seven days, or until used.
- The copy kept with your account: until you switch it off or delete your account, either of which deletes it.
7. Your rights
You can ask to see the personal data we hold about you, to have it corrected, or to have it deleted, by writing to hello@oneappcompany.com. If you have never signed in, the answer is that we hold nothing, because everything is on your phone.
Deleting your account. Until deletion is available inside the app, write to the address above from the email you sign in with, and it will be done.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.
8. Children
Simply is not directed at children under 13, and does not knowingly hold a child's data. A household member's name entered by someone else stays on that person's phone unless they share the household.
9. Changes
If this policy changes, the new version is published here with a new effective date, and anything that changes what leaves your phone is said in the app before it happens.