Privacy Policy

Last updated: 12 July 2026

This policy explains how the independent developer operating Diwy Split handles personal data through the website, Telegram bot, and mini app.

What the app handles

• Telegram data: depending on how you use the service, Telegram user ID, name, username, language, profile photo, messages, media, and chat or launch context.
• Receipt and split data: uploaded photos, recognized text, translated items, prices, allocations, participants, and activity in a session.
• Technical data: IP address, timestamps, request and device information, error data, and security or server logs.

How receipt photos are processed

To provide receipt recognition, the image, recognized text, and related metadata may be sent to:

• Google Cloud Vision reads the text on the receipt (optical character recognition).
• Large language models, accessed through OpenRouter (which routes requests to providers such as Google, Anthropic, and OpenAI), extract the structured list of items and translate them.

Providers, models, subprocessors, and processing locations may change. Data may be processed outside your country. Receipt photos and results may also be stored on our hosting systems so the split can be displayed and maintained.

How data is used and shared

We process data to provide, secure, troubleshoot, maintain, analyze, and improve Diwy Split; communicate with you; enforce our terms; and comply with law. Depending on applicable law, we rely on performing the service you request, our legitimate interests, legal obligations, or consent where required.

Session data is visible to people who join that session. We may share data with hosting, Telegram, OCR, AI, security, and infrastructure providers; authorities where legally required; and a successor if the service is transferred. We do not sell personal data.

What Diwy Split does not do

• It does not connect to your bank and does not access any card or account numbers.
• It does not move, hold, or transfer money — you settle up however you already do.

Storage and deletion

We keep data while needed to operate, secure, improve, or comply with legal obligations relating to the service. Session data may remain until the session or service is deleted; temporary files and logs may be kept for a reasonable operational period. Data may be reset or lost during beta.

You may request access, correction, or deletion by contacting us. We will handle valid requests as required by applicable law. Deletion may not be immediate or complete in backups, security logs, legal records, or third-party systems.

Analytics and cookies

We do not currently use advertising or cross-site tracking cookies. We may use first-party or privacy-oriented analytics and update this policy where required.

Children

Diwy Split is not directed to children. Do not use it if you are below the age at which you may lawfully consent to this processing or use the service without a parent or guardian.

Security

We use reasonable measures intended to protect data, but no service is completely secure and we cannot guarantee absolute security.

Contact

The independent developer operating Diwy Split is responsible for this processing. Questions, requests, or complaints: hello@diwy.me. You may also complain to the data protection authority available to you.

Changes

We may update this policy as the service or law changes. The “last updated” date above identifies the current version.