Your money stays your business

Last updated: October 9th 2026

1. Who we are

The Service is provided by Situated Strategies LLC, the "data controller" responsible for your personal data. If you have any questions about this policy or how we handle your information, contact us at help@haveanothercherry.com.

• Company: Situated Strategies LLC, a New York limited liability company
• Product: Have Another Cherry
• Privacy contact: help@haveanothercherry.com
• Mailing address: PO Box 3766, Albany, NY 12208

2. Information we collect

We collect only what's needed to run a shared expense splitter:

• Account information. Your name and email address, provided when you sign in (through Google Sign-In or Sign in with Apple) or create an account with an email address and password. We save your email address: it is how you sign in and how we reach you, and it is the only contact information we keep. Authentication is handled by Google Firebase Authentication.
• Group and expense data. The household group you create, the members you invite, your chosen split percentages, and the expenses, contributions, settlements, categories, comments, and notes you record.
• Payment handles (optional). If you choose to add them, the usernames or handles you use on payment apps such as Venmo or Zelle, so group members can see where to send a settlement. Handles are encrypted by the app before they are saved. We never hold card numbers or bank credentials.
• Optional profile data. Income context and financial-profile quiz results, collected only if you choose to provide them, to personalize splits and insights.
• Receipt images. Photos you take or choose from your library for AI receipt scanning. The image is sent to our server to extract details such as merchant, total, date, and category, and is not stored after extraction. Only the extracted fields you confirm are saved to your expense.
• Household Vault content (Cherry Plus). Notes, bills, statements, and photos you save to the Vault, encrypted by the app before they are stored. Section 7 explains what happens when you ask the Vault to organise an item.
• Communications and support requests. Messages you send us by email or through the in-app support form, and your responses to transactional emails such as invites. A support request sent from inside the app includes your account email, the message you write, and basic context (which screen you were on, an error code if one was shown, your operating system and version). It never includes ledger content.
• Purchase data. If you subscribe to Cherry Plus, whether your subscription is active and which plan it is. The purchase itself is made through Apple's App Store or Google Play, so we never see your card details, and the store tells us only that a valid subscription exists. Your account identifier is shared with our subscription processor so the right account is unlocked.
• Notification data. If you turn on notifications, a token identifying your device so a notification can reach it. If you also turn on bill reminders, the dates your household has something due, described in full in section 7b. Both are deleted when you turn notifications off.
• Technical data. Limited information your device and browser send automatically when they connect to our servers, such as IP address and device or browser type, kept in server logs for security and reliability.
• Usage analytics (iOS and Android apps only). The mobile apps include Google Analytics for Firebase, which records that the app was installed and opened, which screens were visited, when the app was updated, and when the app asked your device's app store for a rating. Screen names are generic (the kind of screen, never which expense or group was on it), and no amount, balance, expense name, person's name, or account identifier is ever sent. The data is tied to a random identifier for that installation, not to your account. We use it to count installs from our own ads and to see which parts of the app get used. You can turn it off in the app's Settings, under Usage analytics. The apps contain no crash-reporting or advertising SDK, collect no advertising identifier, and do not ask for tracking permission, because there is nothing to track across other companies' apps.

We do not collect bank login credentials or full card numbers, and we do not process or move money on your behalf. You settle balances directly with each other, however you choose.

3. How we use your information

• To provide the Service. Calculate fair splits, keep balances accurate, and sync your group's data across members in real time.
• To operate optional features you turn on, such as AI receipt scanning, recurring expenses, and insights.
• To send transactional communications, such as verification, password resets, group invites, and payment reminders a group member chooses to send. Our emails are written so they never contain your amounts, balances, or expense details.
• To send newsletters and promotional email, only if you opt in. We do not send marketing email to your account address unless you have asked for it. You can turn it on or off at any time in the app's Settings, under Email, and every marketing email includes an unsubscribe link. Opting out does not affect the transactional emails the Service needs to send, such as verification, password resets, and group invites.
• To unlock Cherry Plus for the account that paid for it, and to stop unlocking it when a subscription ends.
• To send notifications you turn on, including bill reminders. A notification tells you that something has happened or is due; it never carries an amount, a balance, or the name of an expense. Section 7b explains what we have to know in order to send a bill reminder.
• To secure the Service, prevent fraud and abuse, and troubleshoot problems.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information or share it beyond the service providers listed below, and we do not use your expense history to serve you third-party advertising. The only marketing use of your data is email you have opted into. We save your email address; we do not save any other contact information about you.

4. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract. To provide the Service you sign up for.
• Legitimate interests. To secure, maintain, and improve the Service, where those interests are not overridden by your rights.
• Consent. For optional features you choose to enable (such as uploading receipt images for AI processing) and for newsletters and promotional email. You may withdraw consent at any time.
• Legal obligation. Where we must process data to comply with the law.

5. How we share your information

• With your group members. The people you invite to a household can see that household's shared expenses, splits, settlements, and related details. This is the core function of the Service.
• With service providers. We use a small set of trusted third parties ("processors") to operate the Service, listed below. They process data on our behalf and are bound by confidentiality and data-protection obligations.
• For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, safety, and property of our users, the public, or Situated Strategies LLC.
• Business transfers. If Situated Strategies LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
• We do not sell your data to advertisers or data brokers.

6. Service providers (subprocessors)

We rely on the following providers to deliver the Service:

• Google Cloud / Firebase. Hosting, authentication, and the Firestore database that stores your group's data.
• Google Vertex AI (Gemini). AI processing of receipt images you upload for scanning, and of content you submit to the Household Vault for organisation. Processing is stateless; submitted content is not retained.
• Google Cloud Firestore. Encrypted archive of ledger entries older than six months, retrieved on demand.
• RevenueCat. Manages Cherry Plus subscriptions and tells the app whether yours is active. It receives your account identifier, the subscription status the app store reports, and your purchase history for Cherry Plus, so entitlements can be validated and we can see aggregate subscription metrics. It does not receive your ledger, your name, your email address, or your payment details.
• Apple App Store and Google Play. Payment for Cherry Plus is taken by the store, under its own terms and privacy policy. We never receive your card number, and we cannot charge you outside the store.
• Firebase Cloud Messaging, Apple Push Notification service, and Google's Android equivalent. Delivery of notifications to your device. A notification passes through these services on its way to you, so our notifications are deliberately written to say only that something has happened: never an amount, a balance, or the name of an expense.
• Google Analytics and Google Ads. On this website, traffic measurement and ad conversion tracking on the marketing pages, loaded only after you choose "Accept all" in the cookie banner (see section 8). In the iOS and Android apps, Google Analytics for Firebase receives the usage events described in section 2, and the install count is passed to Google Ads so we can measure our own app install ads. Nothing from your ledger reaches either service, and the apps send no advertising identifier.
• Anthropic (this website only). Powers Jack, the chat on the marketing pages. What you type into the chat is sent to Anthropic's API to generate the reply and is handled under Anthropic's commercial terms. We do not store the conversation; it lives in your browser tab until you close it. See section 8a.
• Resend. Delivery of our emails (verification, password resets, invitations, payment reminders, and newsletters or promotional email you opt into). Like most email providers, Resend keeps delivery logs that include the recipient address and message content; our emails are deliberately written so those logs never contain your ledger amounts or expense details.

Each provider processes data under its own security and privacy commitments. We update this list as our providers change.

7. AI, receipts, and the Household Vault

AI receipt scanning uses Google's Gemini models through Vertex AI to read the text on a receipt you upload. Images are transmitted securely to Google Cloud for processing so we can extract details like merchant, total, date, and category. We use this data only to create your expense record. We do not use your receipts or expense data to train publicly available AI models. If you never use receipt scanning, no receipt images are collected. Automated extraction may occasionally be inaccurate, so you can review and edit any detail before saving.

The Household Vault works the same way, and the trade-off matters. When you write a note, or upload a bill, statement, or photo, and ask the Vault to organise it, that content is sent to a processing endpoint so a model can turn it into structured information, a title, an amount, a due date, a vendor, a category. This means content you submit to the Vault for AI organisation is readable during processing. It is not end-to-end encrypted on the way to the model, because a model cannot read text only your device can decrypt.

• Nothing submitted for processing is retained. The endpoint is stateless: your content produces the extraction and is not stored, logged as content, or used to train models.
• The result is encrypted before it is saved. Once extraction returns, the note and its extracted fields are encrypted on your device with your group's key, exactly like your ledger, before anything reaches our database.
• It only happens when you ask. Vault entries you type and save without requesting AI organisation are encrypted on your device and never sent for processing.
• You confirm before anything is saved. Extracted fields are shown beside what you submitted, and nothing is written to your notebook or calendar until you accept it.

If you would rather no content leave your device, do not use the Vault's AI organisation. The rest of the app, including your ledger, is unaffected.

7a. Older history and cloud archive

To keep the app fast, only your recent ledger is kept on your device. Entries older than six months are archived to our cloud storage and removed from local storage, then pulled back down on demand when you scroll far enough back or open an older month.

• Archived entries stay encrypted. They are archived in the same client-encrypted form they were stored in. We do not decrypt them to archive them, and we cannot read them at rest.
• Archiving is automatic and is part of the Service. It is how your full history remains available across devices and after you reinstall; it is not an optional feature you enable.
• Retrieval is on demand. Older months are fetched only when you ask for them, which is why loading further back takes a moment.
• Deletion still removes them. Deleting your account or your group's data removes archived entries along with everything else, as described in Retention below.

7b. Bill reminders and due dates

If you turn on bill reminders, we send a notification the day before something is due. A reminder has to arrive when nobody has the app open, which makes it something our servers do rather than your phone, and that creates a trade-off worth stating plainly.

To remind you when a bill is due, we have to know when it is due. Your ledger and your Vault entries are encrypted by the app before they are saved, so we cannot read them to work this out. Instead, your app publishes a short schedule of what is coming up, containing only:

• A date, with no time of day.
• An identifier that means nothing outside your own account, used to open the right entry when you tap the notification.
• Which screen to open.

What this tells us, and what it does not. We learn that your household has something due on a given date, and roughly how many such things there are. We do not learn what any of them is: no name, no amount, no category, no vendor. That is a smaller disclosure than the alternative, but it is not nothing, which is why it has a section of its own.

• The notification repeats none of it. The message says only that a household bill is due tomorrow. Nothing about the bill appears on your lock screen. Amounts and details are shown after you open the app, which is the point at which they can be decrypted.
• It only happens while reminders are on. Reminders are part of Cherry Plus. If you turn notifications off for the app in your device settings, or your Cherry Plus subscription ends, your app stops publishing the schedule and the copy we hold is deleted.
• It is not the ledger. Nothing else about your expenses is published this way, and turning reminders off does not affect anything else in the app.
• Deletion still removes it. Deleting your account or your group's data removes the schedule along with everything else, as described in Retention below.

If you would rather we never held your due dates, do not turn on bill reminders. The rest of the app, including your ledger and the calendar itself, works the same either way.

8. Cookies and similar technologies

On this marketing website. The pages you are reading now ask before setting any advertising or analytics cookie. A banner appears on your first visit with two choices:

• Accept all. We load Google Analytics 4 and Google Ads measurement. Google sets cookies in your browser (such as _ga and _gcl_au) that let us count visits, see which pages people read, and see whether an ad brought someone here and whether they went on to sign up. We use that to decide where to advertise and to reach people who are likely to want the app. Google processes this measurement data under its own privacy policy.
• Only necessary. No advertising or analytics cookie is set. Google's tags still receive cookieless pings that carry no identifier, which Google uses only to estimate visit counts.

Your choice is stored in a first-party cookie named ss_consent, mirrored in your browser's local storage, for twelve months, so we do not ask again on every visit. That cookie holds only the word "all" or "necessary" and the date you chose. Change it at any time with the Cookie settings link in the footer of every page, or by clearing cookies for this site in your browser.

Two other pieces of local storage on this site are strictly functional and never leave your browser: the introductory offer strip and card remember that you dismissed them, so they stay out of the way.

In the app. The web app uses only the cookies and local storage necessary to operate the Service, primarily to keep you securely signed in and to remember essential preferences. The iOS and Android apps store sign-in state and preferences on your device. They contain no advertising or tracking SDK; the usage analytics they do include is described in section 2 and carries nothing from your ledger. You can turn it off at any time in the app's Settings, under Usage analytics, which also resets the install identifier. There are no ads in the ledger, and we do not use your expense history to serve you third-party advertising.

You can control or block cookies through your browser settings, though disabling the cookies the app relies on may prevent you from signing in.

8a. Jack, the chat on this website

The marketing pages carry a small chat named Jack. It is a Claude powered assistant with a big personality, made to talk about sharing costs and to point you to the right page. It is not a person and it is not financial, legal or tax advice.

When you send a message, the conversation so far is posted to our own server function and from there to Anthropic's API, which generates the reply. We do not store the conversation, attach it to an account, or set a cookie for it. Your browser keeps it in session storage so it survives moving between pages and is gone when the tab closes. Please don't type personal or financial details into the chat; Jack doesn't need them and will steer away from them. Conversations are capped at twelve of your messages, and requests are rate limited to keep the chat available to everyone.

If analytics is on (you chose "Accept all" in the cookie banner), two events are recorded: that the chat was opened, and that a message was sent. The text of the message is never part of an analytics event.

9. How we protect your information

• Encrypted in transit. All traffic between your device and our servers is protected with HTTPS/TLS.
• Encrypted at rest. Data is stored on Google Cloud (Firebase Firestore), which encrypts data at rest by default. Sensitive expense fields are additionally encrypted by the app before they are saved, as are payment handles and Household Vault content.
• Strict access rules. Database security rules ensure that only members of a group can read or write that group's data.
• Trusted infrastructure. The Service runs on Google Cloud, with secrets stored in a managed secret manager rather than in code.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information using industry-standard safeguards.

10. Data retention

We keep your data for as long as your account is active so your household's history stays intact. You can delete your account from inside the app at any time, which removes your profile, payment handles, notification token, reminder schedule, and any group of which you were the last member. Shared groups you leave remain with the other members. If you delete your account or ask us to delete your data, we remove your personal information from our active systems within a reasonable period, except where we are required to retain limited records to comply with legal, accounting, or security obligations.

11. International data transfers

We are based in the United States, and our providers may process and store data in the United States and other countries. If you access the Service from outside the United States, you understand your information may be transferred to, stored, and processed in the U.S. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete data. You can also edit most data directly in the app.
• Deletion. Delete your account from inside the app, or ask us to delete your account and associated personal data.
• Portability. Receive your data in a portable format; you can also export a backup of your group's history from the app.
• Objection and restriction. Object to or ask us to restrict certain processing.
• Withdraw consent. Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email help@haveanothercherry.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

13. US state privacy rights (California & others)

If you are a California resident, the CCPA/CPRA gives you rights to know, access, correct, and delete your personal information, and to not be discriminated against for exercising those rights. We do not sell your personal information. This marketing website does "share" personal information as the CCPA/CPRA defines that term: with your consent it uses Google Analytics and a Google Ads tag for traffic measurement and conversion tracking (see section 8, Cookies), and we use that measurement to advertise and reach relevant audiences, which counts as sharing for cross-context behavioral advertising. You have the right to opt out of that sharing. To do so, choose "Only necessary" in the cookie banner or from the Cookie settings link in the footer of every page, which turns that sharing off, or contact us at help@haveanothercherry.com and we will honor your request. Inside the app, we do not sell or share your personal information for cross-context behavioral advertising. The app does not collect data for third-party advertising. Its two marketing uses are the install count we pass to Google Ads to measure our own app install ads, which carries no advertising identifier, and email you have opted into, which you can withdraw at any time. Residents of other US states with similar laws (such as Virginia, Colorado, Connecticut, and Utah) may exercise comparable rights the same way.

14. Age suitability

Have Another Cherry is for anyone 13 and up. We built it for households, roommates, friends, and young people who are learning to manage shared money and to have honest, low-drama conversations about it. If you are between 13 and 17, use the Service with a parent or guardian's permission. Inviting them into your group is a fine way to practice.

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child under 13 has provided us personal data, contact us at help@haveanothercherry.com and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Legal notices & ownership

Have Another Cherry is a product of, and is owned and operated by, Situated Strategies LLC. The Service, including its software, design, logo, and content, is protected by intellectual property laws and remains the property of Situated Strategies LLC and its licensors. Your use of the Service is also governed by our Terms of Service.

17. Contact us

Questions about privacy or security, or a request to exercise your rights? Contact Situated Strategies LLC at help@haveanothercherry.com and we'll get back to you.