Last updated: November 3, 2026

Cospender is an app for sharing expenses within a group: holidays, roommates, couples… This page explains what data the Cospender apps for Android and iPhone and the website cospender.com process, what it is used for, and what your rights are.

1. Data controller

The data controller is the publisher of Cospender, based in Nice, France. For any question about your data: contact@cospender.com.

2. Data we process and why

Account

• The name you choose when you first open the app. It is shown to the members of your groups.
• An account number and a secret access key created by our server, which identify your account in the app.
• Optional: an email address and a password, if you save your account to recover it on another device. The password is stored only in hashed form, never in plain text.
• Your phone's language, so that notifications are sent in your language.

Groups and expenses

• Group and member names, expense labels, amounts and dates, who paid and how each expense is split, reimbursements and recurring expenses.
• Names of members who do not use the app, if you add them to a group.

This data is used to calculate who owes what to whom and to synchronize your groups between members and between your devices.

Profile photo (optional)

If you choose a photo, the app reduces it to 300 × 300 pixels before sending it to our server. The app does not access your other photos.

Notifications

A notification identifier provided by Google (Firebase Cloud Messaging) on Android or by Apple on iPhone, together with the device type and app version. They are used only to notify you of activity in your groups: new expense, new member, reimbursement…

Invitations

To invite someone, the app creates an invitation link that you share through your own apps (SMS, email, messaging). The app never reads your contacts. Invitation links are valid for a short time and then deleted.

Technical data

• Like any web server, our hosting provider records technical logs (IP address, date, requested address) for security and troubleshooting.
• When an error occurs on our server, a technical report (requested address and error message) is sent to our error-tracking tool, uBugtrack, so that we can fix it.

What we do not collect

Your location, your contacts, the advertising identifier, your browsing history. The app contains no advertising, analytics or crash-reporting tool.

3. Who can see your data

• Members of your groups see your name, your photo, and the expenses and reimbursements of the groups you share with them.
• Our service providers, who process data only on our behalf:
  • OVHcloud (France): hosting of our server, database and emails;
  • Google: Firebase Cloud Messaging delivers notifications on Android, so the text of a notification (for example a member's name, a group name, an expense label and amount) passes through Google's servers. Google Play handles payment of the Premium subscription;
  • Apple: delivery of notifications on iPhone and App Store payments.
• Authorities, only when required by law.

Google and Apple may process some data outside the European Union, with the safeguards required by the GDPR (such as the European Commission's standard contractual clauses).

4. Premium subscription

The Premium subscription is bought and paid through Google Play (or the App Store on iPhone). We never receive your payment details. The app checks the subscription on your device and we do not store your purchases on our server. You can manage or cancel the subscription in Google Play, under Payments & subscriptions, then Subscriptions.

5. Legal bases

• Providing the service you use: account, groups, expenses, synchronization, invitations.
• Our legitimate interest: security of the service and fixing errors (technical logs and error reports).
• Your choice: the profile photo, email address and notifications are optional. You can turn notifications off in the app settings or in your phone settings.

6. How long we keep your data

• Your account and your groups: as long as you use Cospender, until you ask us to delete them.
• Deletion from the app: immediate. Request by email: within 30 days.
• Technical logs: one year at most.

7. Security

All exchanges between the app and our server are encrypted (HTTPS). Passwords are stored in hashed form and access to the server is restricted.

8. Your rights

Under the GDPR, you can access your data, correct it, delete it, receive a copy of it, object to its processing or ask for it to be restricted. You can change your name or remove your photo directly in the app. For anything else, write to us at contact@cospender.com: we reply within one month. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

9. Deleting your account

From the Android app: open “User details” in the menu, tap “Delete my account” and confirm. Your account is deleted immediately.

Without the app: send an email to contact@cospender.com with the subject “Delete my Cospender account”. Include the name shown in your profile, the name of one of your groups and, if you saved your account, the email address you used. We process the request within 30 days.

What is deleted: your name, email address, password, photo and notification identifier, as well as the groups you do not share with any other Cospender user, with all their content. Your recurring expenses stop.

In groups shared with other users, your expenses and reimbursements are kept so that the other members' balances stay correct, but your name is replaced with “Deleted member”. If you created one of these groups, another member takes it over.

Deleting your account does not cancel a Premium subscription: cancel it in Google Play.

10. Children

Cospender is not intended for children under 13 and we do not knowingly collect their data.

11. Our website

• The contact form sends us your email address and your message by email; they are used only to reply to you.
• The site uses a technical session cookie, with no advertising or audience measurement.
• Our pages load the Lato font from Google Fonts, which sends your IP address to Google.
• The home page shows posts from our X (Twitter) account, loaded from X's servers, and a YouTube video that loads only if you click on it.

12. Changes

We may update this policy, for example when the app changes. The date at the top of the page shows the version in force.

Back to cospender.com