Privacy Policy

Last updated: October 22, 2026

This server runs wakeru, open-source software for splitting trip expenses. It is operated by Flávio Gallon, who decides how it's hosted. This page describes what the software does with your data.

What we collect

• From your Google account, when you sign in: your name, email address, profile picture URL and Google's account identifier. We never see your Google password.
• What you enter: trips, expenses (titles, amounts, notes, categories, who paid and how, including card names you type), payments between members, and the keywords the app learns when you correct a category.
• Your Google profile photo: at sign-in the server downloads it and keeps a small copy (128 px), which it serves itself, so the app never contacts Google for it. You can hide it under Account → "Show my Google photo".
• Profile settings: your home currency and, if you add it, your Pix key.
• Sign-in sessions: the server stores only a hash of your session token.
• Technical logs: the server logs each API request's path, status and duration, without your IP address. The hosting provider or a proxy in front of the server may keep their own access logs.

Purchases: if you buy a Trip pass or the Yearly plan, the payment happens at Paddle, our reseller and merchant of record. We store only Paddle's identifiers (your customer, subscription and transaction IDs), which trip a pass is for and its dates, and your plan's status and renewal date. We never see or store your card or bank details.

What we don't do

No analytics, no ads, no tracking cookies, no selling or renting of data. On the web, two things load from Google: the Google sign-in button (on the sign-in screen), and fonts for characters the app doesn't include (for example some emoji), which your browser may download from Google Fonts. Those requests send your IP address to Google.

Why

Only to provide the service: syncing your trips across your devices and with the people you travel with. Under the LGPD and GDPR, the legal basis is performing the service you asked for (contract) and our legitimate interest in keeping it secure and working.

Who sees it

• People in your trips see the trip's expenses, payments and change history, and your name, email address, Pix key and profile photo (unless you hide it). Only people who share a trip with you can get your photo from the server. Sharing with them is the point of the app.
• Google handles sign-in only.
• Paddle (Paddle.com Market Ltd and its affiliates) processes payments as merchant of record, under its own privacy policy. When you start your first checkout we send it your email address and name; to show prices in your currency, the app's price lookup sends it your IP address (we don't store it). The checkout page loads Paddle's script from Paddle.
• The hosting provider that runs this server stores the data on the operator's behalf.
• Exchange rates come from the European Central Bank through Frankfurter; currencies the ECB doesn't publish (such as the Argentine or Chilean peso) come from the free currency-api project, downloaded through jsDelivr. These services only receive the currencies and dates being looked up: no user data is sent to them.

Where it's stored

On this server (wherever the operator hosts it) and on your devices, which keep an offline copy of your trips. Signing out removes that copy from the device.

How long

Until you delete your account. Backups, if the operator keeps them, follow the operator's schedule. Billing records (the Paddle identifiers above) are kept as long as accounting and tax law require, also after you delete your account; Paddle keeps its own records as merchant of record.

Your rights

• Access and export: everything is visible in the app, and any trip can be exported as a spreadsheet (CSV or XLSX).
• Correction: edit your profile and your entries in the app.
• Deletion: Account → Delete account (see Delete your account), or write to the contact below. Your sign-in details, email, profile photo (including the server's copy), Pix key and memberships are deleted. Expenses and payments you recorded in shared trips stay, shown as from a "Deleted user", so the other members' balances remain correct. Deleting your account also cancels an active Yearly plan.
• You can also object to processing or complain to your data protection authority (in Brazil, the ANPD).

Children

wakeru isn't meant for children under 13 (or under 16 where the law requires it).

Changes

If this policy changes, the date at the top changes. Significant changes will be announced in the app or by email.

Contact

Contact: wakeru@frav.in (Flávio Gallon)