Last updated: August 14, 2026

1. Who we are

The Service is provided by Situated Strategies LLC, the "data controller" responsible for your personal data. If you have any questions about this policy or how we handle your information, contact us at olivia@situatedstrategies.org.

• Company: Situated Strategies LLC
• Product: Have Another Cherry
• Privacy contact: olivia@situatedstrategies.org
• Mailing address: [Add your business mailing address]

2. Information we collect

We collect only what's needed to run a shared expense splitter:

• Account information — your name and email address, provided when you sign in (for example, through Google Sign-In) or create an account. Authentication is handled by Google Firebase Authentication.
• Group and expense data — the household group you create, the members you invite, your chosen split percentages, and the expenses, contributions, settlements, categories, comments, and notes you record.
• Optional profile data — income context and financial-profile quiz results, collected only if you choose to provide them, to personalize splits and insights.
• Receipt images — photos you upload for AI receipt scanning, used to extract details such as merchant, total, date, and category.
• Communications — messages you send us (for example, by email) and your responses to transactional emails such as invites.
• Technical and usage data — limited information your device and browser send automatically, such as IP address, device and browser type, and basic diagnostic/log data used to keep the Service secure and reliable.

We do not collect bank login credentials or full card numbers, and we do not process or move money on your behalf. You settle balances directly with each other, however you choose.

3. How we use your information

• To provide the Service — calculate fair splits, keep balances accurate, and sync your group's data across members in real time.
• To operate optional features you turn on, such as AI receipt scanning, recurring expenses, and insights.
• To send transactional communications, such as group invites and settle-up confirmations.
• To secure the Service, prevent fraud and abuse, and troubleshoot problems.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your expense history to serve you third-party advertising.

4. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to provide the Service you sign up for.
• Legitimate interests — to secure, maintain, and improve the Service, where those interests are not overridden by your rights.
• Consent — for optional features you choose to enable (such as uploading receipt images for AI processing). You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law.

5. How we share your information

• With your group members. The people you invite to a household can see that household's shared expenses, splits, settlements, and related details. This is the core function of the Service.
• With service providers. We use a small set of trusted third parties ("processors") to operate the Service, listed below. They process data on our behalf and are bound by confidentiality and data-protection obligations.
• For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, safety, and property of our users, the public, or Situated Strategies LLC.
• Business transfers. If Situated Strategies LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
• We do not sell your data to advertisers or data brokers.

6. Service providers (subprocessors)

We rely on the following providers to deliver the Service:

• Google Cloud / Firebase — hosting, authentication, and the Firestore database that stores your group's data.
• Google Vertex AI (Gemini) — AI processing of receipt images you upload for scanning.
• Resend — delivery of transactional emails such as group invitations.

Each provider processes data under its own security and privacy commitments. We update this list as our providers change.

7. AI and receipt processing

AI receipt scanning uses Google's Gemini models through Vertex AI to read the text on a receipt you upload. Images are transmitted securely to Google Cloud for processing so we can extract details like merchant, total, date, and category. We use this data only to create your expense record. We do not use your receipts or expense data to train publicly available AI models. If you never use receipt scanning, no receipt images are collected. Automated extraction may occasionally be inaccurate, so you can review and edit any detail before saving.

8. Cookies and similar technologies

We use only the cookies and local storage necessary to operate the Service — primarily to keep you securely signed in and to remember essential preferences. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

9. How we protect your information

• Encrypted in transit. All traffic between your device and our servers is protected with HTTPS/TLS.
• Encrypted at rest. Data is stored on Google Cloud (Firebase Firestore), which encrypts data at rest by default. Sensitive expense fields are additionally encrypted by the app before they are saved.
• Strict access rules. Database security rules ensure that only members of a group can read or write that group's data.
• Trusted infrastructure. The Service runs on Google Cloud, with secrets stored in a managed secret manager rather than in code.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information using industry-standard safeguards.

10. Data retention

We keep your data for as long as your account is active so your household's history stays intact. If you close your account or ask us to delete your data, we remove your personal information from our active systems within a reasonable period, except where we are required to retain limited records to comply with legal, accounting, or security obligations.

11. International data transfers

We are based in the United States, and our providers may process and store data in the United States and other countries. If you access the Service from outside the United States, you understand your information may be transferred to, stored, and processed in the U.S. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data. You can also edit most data directly in the app.
• Deletion — ask us to delete your account and associated personal data.
• Portability — receive your data in a portable format; you can also export a backup of your group's history from the app.
• Objection and restriction — object to or ask us to restrict certain processing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email olivia@situatedstrategies.org. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

13. US state privacy rights (California & others)

If you are a California resident, the CCPA/CPRA gives you rights to know, access, correct, and delete your personal information, and to not be discriminated against for exercising those rights. Because we do not sell or "share" (for cross-context behavioral advertising) your personal information, no opt-out of sale is required — but you may still exercise your other rights by contacting us at olivia@situatedstrategies.org. Residents of other US states with similar laws (such as Virginia, Colorado, Connecticut, and Utah) may exercise comparable rights the same way.

14. Children's privacy

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Legal notices & ownership

Have Another Cherry is a product of, and is owned and operated by, Situated Strategies LLC. The Service, including its software, design, logo, and content, is protected by intellectual property laws and remains the property of Situated Strategies LLC and its licensors. Your use of the Service is also governed by our Terms of Service.

17. Contact us

Questions about privacy or security, or a request to exercise your rights? Contact Situated Strategies LLC at olivia@situatedstrategies.org and we'll get back to you.