Privacy Policy

1. Who is responsible for your data?

CoreTrail Labs operates SettleDrop and acts as the data controller for personal data described in this policy. You can contact us at info@settledrop.com.

2. Data we process

You decide whether to upload a document or add an expense manually. Please avoid uploading information that is unnecessary for managing shared expenses.

3. Why we use it

• Provide accounts, groups, invitations, expense splitting, document review, settlements, and subscriptions.
• Authenticate users, protect accounts, prevent abuse, and maintain service integrity.
• Deliver requested emails and push notifications.
• Respond to support, privacy, export, and deletion requests.
• Measure reliability and improve the product using consented analytics where consent is required.
• Meet legal, accounting, fraud-prevention, and regulatory obligations.

Depending on your location and the activity, processing is based on performance of our agreement with you, legitimate interests in security and service improvement, your consent, or compliance with law. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

4. Documents and automated extraction

Uploaded documents may be processed with automated document extraction technology to propose transaction fields. You review and choose what to publish. SettleDrop does not use this process to make legal or similarly significant decisions about you, and documents are not used to train artificial-intelligence models.

5. Who receives data?

We disclose data only when required to provide the service, follow your instructions, protect users, or comply with law. Service-provider categories include:

• Google Cloud services, including storage and document processing
• Firebase services for authentication support, diagnostics, performance, and consented analytics
• OneSignal for push notification delivery
• RevenueCat and the applicable app store for subscription status and purchases
• Infrastructure, email, security, and support providers required to operate SettleDrop

Group data is visible to the members you invite according to the product's permissions. We do not sell personal data or share it for cross-context behavioural advertising.

6. International transfers

SettleDrop and its providers may process data in countries other than your own. Where required, we use applicable transfer mechanisms and contractual, organisational, and technical safeguards under data-protection law.

7. Retention

We keep account and product data while your account is active and as needed to provide the service. Processing copies, logs, and backups are retained for limited operational, security, and legal periods. When you delete your account, data is deleted or de-identified unless retention is required for security, dispute, tax, or legal obligations. Content already shared with a group may remain in that group's expense history where necessary to preserve other members' records and balances.

8. Security

We use encryption in transit, access controls, secure credential storage, monitoring, backups, and data-minimisation measures. No internet service is completely risk-free, so please use a strong password and protect access to your device and account.

9. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to the Turkish Personal Data Protection Authority or the competent supervisory authority in your country. SettleDrop also provides in-app account export and deletion controls. We may verify your identity before completing a request.

10. Children

SettleDrop is not directed to children under 18. If we learn that personal data was provided by a child contrary to applicable law, we will take appropriate steps to delete it.

11. Changes and contact

We may update this policy as SettleDrop or legal requirements change. Material changes will be communicated through the app, website, or email when appropriate. Questions and rights requests can be sent to info@settledrop.com.