Privacy Policy

This policy explains how OwedTab (“the app”), made by WAYMASON LLC (“we”, “us”), handles information. It covers the OwedTab iPhone app, its widgets and its share extension, and this website.

What stays on your device

Everything you add to OwedTab is stored on your iPhone. That includes merchants and people, amounts, dates, categories, notes, reference numbers, receipt photos and shared text.

• iCloud sync. If iCloud is on, your entries are also kept in your private iCloud database, which belongs to your Apple Account. Apple stores it under its own privacy policy, and we have no access to it.
• Scanning and reading receipts happens on your iPhone, using Apple’s on-device text recognition and on-device Apple Intelligence models. Images and text aren’t sent to us or anyone else.
• Camera and Photos are used only when you choose to scan or attach something, and only on your device.
• Calendar. If you turn on calendar sync, OwedTab writes your entries to an OwedTab calendar in Apple Calendar on your device. It doesn’t read your other calendars.
• Reminders are scheduled on your iPhone as local notifications. No push notification service is used.
• Face ID is handled entirely by iOS. OwedTab only learns whether it succeeded.
• Follow-up messages are written on your device and sent by you, through Mail, Messages or another app you choose.

What we collect

We collect three kinds of information, all tied only to a random ID created by the app when it’s installed. That ID isn’t connected to your name, email, Apple Account or any other identity.

What	Examples	Why
Usage events	Finished setup, added an entry (and its kind, like “refund”), marked one paid, opened the paywall, chose a plan. Entry counts are sent as ranges, like “4–10”.	To understand which features help and where the app is confusing.
Device and app details	iPhone model, iOS and app version, screen size, language, time zone, Wi-Fi or cellular.	To make sure the app works well across devices and versions.
Purchase records	Which OwedTab Plus plan was bought, the price, dates, trial status, renewals, cancellations and refunds, and the App Store country.	To keep accurate records of subscriptions and understand which plans people choose.

We never collect the merchants, people, amounts, dates, notes, receipts or photos you add; your name, email, phone number or contacts; your location; your bank or card details (Apple handles payment and never shares them with us); or the advertising identifier.

Who processes it

We use these service providers, who process this information on our behalf, under data processing agreements, and only for the purposes in this policy:

• PostHog (posthog.com), for usage analytics in the app and on this website, hosted in the United States. We’ve configured PostHog not to record your IP address or derive your location from it.
• RevenueCat (revenuecat.com), for purchase records. RevenueCat receives purchase information from Apple and from the app.
• Cloudflare (cloudflare.com), which hosts this website and passes on email sent to our @owedtab.com addresses.
• Google (google.com), whose Gmail holds the email you send us.
• Resend (resend.com), which keeps the early-access list and sends its emails.

We don’t sell your information, share it with advertisers or data brokers, or use it to track you across other companies’ apps and websites. We may disclose information if the law requires it, or to a successor if WAYMASON LLC or OwedTab is sold or merged, in which case this policy continues to apply to it.

This website

owedtab.com doesn’t use cookies or advertising, and stores nothing in your browser.

To learn which pages are useful, the site counts visits with PostHog: the page you viewed, the links and buttons you clicked, which of the site’s tools you used (but never what you entered), whether you joined the early-access list, the page that sent you here, and your browser, device type, screen size and language. To tell one visitor from another without cookies, PostHog makes a code from your IP address and browser details mixed with a random value that changes every day and is then deleted. Visits on different days can’t be linked, and none can be linked to the app or to you. Your IP address isn’t stored, and your location isn’t looked up. If your browser sends a Do Not Track or Global Privacy Control signal, the site doesn’t count your visit at all.

The site’s tools, such as the security deposit deadline calculator, work in your browser, and what you enter stays there. If you add a result to your calendar, your browser asks owedtab.com for the calendar file, sending the dates and choices you entered (such as your state), but never an amount; the file is made on the spot and nothing is kept. If you choose Google Calendar instead, those details go to Google.

Like any website, owedtab.com’s host, Cloudflare, keeps standard server logs (such as IP address, browser type and the page requested) for security and to keep the site running.

The early-access list

If you join the early-access list on this website, we keep your email address, when you joined, how you found us (a campaign tag in the link you followed, a friend’s share link, or the page of this site you joined from), whether you signed up on an iPhone, an Android phone or a computer (so we only send test invites to people who can use them), and, if you tell us, the kinds of money you’re waiting on. We use them to send you an invite to try OwedTab before it’s out and an email when it launches, to send emails about your place on the list (confirming it, welcoming you, or reminding you that you’re already on it), and to make launch emails about what you track. We don’t sell or share them.

Everyone on the list gets a personal share link. When someone joins through yours and confirms, we record that you referred them and add one to your count, and invites to try OwedTab go out sooner to people who’ve brought friends. We don’t tell you who joined through your link.

Joining takes two steps: we email you a link, and you’re only added once you follow it. Every email we send has an unsubscribe link, and you can also ask us by email to remove you. Resend keeps the list and sends the emails for us.

To keep bots off the list, the form uses Cloudflare Turnstile, which checks that you’re a person using signals from your browser, such as how the page was loaded. It starts only once you begin filling in the form, sets no cookies, and is covered by Cloudflare’s Turnstile Privacy Addendum.

When you email us

If you email us, we receive your email address and what you write, and use them only to reply and to help with what you asked. Cloudflare passes our email on to us, and it’s kept in Google’s Gmail.

Legal bases (EEA and UK)

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR and UK GDPR:

• Usage events and device details: our legitimate interest in understanding how the app and this website are used so we can fix problems and improve them. We’ve limited this to information that doesn’t include your name, contact details or anything you track. You can switch it off in the app at any time in Settings, and on this website with your browser’s Global Privacy Control or Do Not Track setting.
• Email you send us: our legitimate interest in answering you.
• The early-access list: your consent, which you can withdraw at any time by unsubscribing.
• Purchase records: to provide what you’ve bought (performance of a contract), and to meet our tax and accounting obligations (legal obligation).

International transfers

WAYMASON LLC and our service providers are based in the United States, so information is processed there. Where information about people in the EEA, UK or Switzerland is transferred to the United States, it’s protected by the European Commission’s Standard Contractual Clauses (and the UK addendum) in our agreements with our providers, or by another safeguard recognised by law.

Your choices

• Turn off usage sharing in OwedTab › Settings › Privacy & data › Share anonymous usage. The app stops sending usage events straight away.
• Delete your entries one at a time in the app, or delete the app to remove everything stored on your iPhone.
• Delete your iCloud copy in iOS Settings › your name › iCloud › Manage Storage › OwedTab.
• Manage or cancel OwedTab Plus in iOS Settings › your name › Subscriptions.
• Leave the early-access list with the unsubscribe link in any email from it.

How long we keep it

• Usage events and device details, from the app and this website, are kept for no longer than 24 months, then deleted.
• Email you send us is kept while we’re helping you, and deleted when it’s no longer needed.
• The early-access list keeps your details until you unsubscribe or ask us to remove you.
• Purchase records are kept for as long as we need them to provide what you’ve bought and to meet tax and accounting requirements, which can be up to seven years.
• What you track stays on your iPhone and in your iCloud until you delete it.

Your rights

Depending on where you live, you may have the right to:

• know what information we hold about you, and get a copy of it;
• have it corrected or deleted;
• restrict or object to how we use it, including our use based on legitimate interests;
• receive it in a portable format;
• not be treated differently for exercising any of these rights.

To make a request, email us. We’ll reply within the time the law requires, usually 30 days or one month. Because we only hold information under a random ID, not your name or email, we may not be able to tell which records are yours; we’ll explain what we can find and act on it. If we decline a request, you can appeal by replying to our decision with “Appeal” in the subject, and we’ll respond within 45 days.

If you’re in the EEA or UK, you also have the right to complain to your local data protection authority.

California residents

In the last 12 months we’ve collected these categories of personal information, as defined by the California Consumer Privacy Act:

• Identifiers: the random ID created by the app, and your email address if you join the early-access list.
• Commercial information: purchase records for OwedTab Plus.
• Internet or other electronic network activity: usage events and device details.

We collect these from the app, this website and Apple, for the purposes described above, and disclose them only to the service providers named above for those purposes. We don’t sell or share personal information (including for cross-context behavioral advertising), haven’t done so in the last 12 months, and don’t use or disclose sensitive personal information. You have the rights to know, delete and correct described above, and to not be discriminated against for using them. You can use an authorized agent to make a request on your behalf.

Do Not Track

Some browsers send a “Do Not Track” or Global Privacy Control signal. Because neither the app nor this website tracks you across other companies’ apps or websites, or sells or shares personal information, there’s nothing for these signals to switch off; we treat them as a request to opt out regardless.

Children

OwedTab isn’t directed at children under 13, and we don’t knowingly collect information from them. If you believe a child has used the app and we hold information about them, email us and we’ll delete it.

Changes

If this policy changes, we’ll update it here and change the effective date above. If a change affects what’s collected, we’ll say so in the app’s release notes.

Contact

WAYMASON LLC is responsible for the information described in this policy (the “controller” under the GDPR).

WAYMASON LLC
P.O. Box 11501
Chicago, IL 60611
United States
Email support