Dela privacy policy

Last updated 27 September 2026

Dela is an app for splitting shared expenses in a group. This policy explains what the app stores about you, why, who else handles it, how long it is kept and what you can ask for.

Who is responsible

The data controller is Rasmus Svala, a private individual in Sweden. For anything about your data, write to rasmus.svala@gmail.com.

No accounts

Dela has no sign-up and no login. The first time you open it, the app creates an anonymous identity: a random ID, with no email, phone number or password behind it, kept in the app on your phone. That identity is how Dela knows which groups are yours.

Because nothing else ties it to you, it cannot be recovered. If you delete the app or move to a new phone, you lose access to your groups. You can join a group again with its invite code, but you join as a new member. The expenses you recorded before stay in the group.

What is stored, and why

To run the service, Dela stores:

• Your name in each group, the display name you give when you create or join it, so the other members know who you are.
• Expenses: each expense's description, amount and date, who paid and who it is split between.
• Settlements: payments recorded between members, and the balances worked out from them, that is, who owes whom.
• Your Swish number, which is a phone number, if you choose to give one, so that other members can pay you back through Swish. It is optional, and you can remove it in the group's settings.
• Your anonymous identity (the random ID described above), so the app can show you your groups and no one else's.
• Crash reports, sent when the app fails: which version and update of the app was running, the device model and operating system, and which line of code went wrong. Crash reports never include your name, your identity, your groups, expenses, amounts or Swish number.

Everything you enter in a group is visible to the other members of that group. That is what the app is for.

A few preferences never leave your phone: which groups you have archived and whether the app is shown light or dark.

Legal basis

• Group and expense data, your name, your Swish number and your anonymous identity are processed because they are needed to provide the service you use (GDPR Article 6(1)(b), performance of a contract).
• Crash reports are processed on the basis of legitimate interest (Article 6(1)(f)): finding and fixing faults keeps the app working, and the reports are kept free of anything about your groups.

Who else handles your data

Dela uses three service providers, each acting as a processor on Dela's behalf. Each one handles the data only to provide its service to Dela, and protects it to the same standard as this policy.

• Supabase hosts the database where groups, members, expenses and settlements are stored, and issues the anonymous identity. The data is stored in the EU, in Stockholm, Sweden. Like any server, it sees the IP address a request comes from.
• Sentry receives crash reports, which are stored in the EU. Sentry may work out an approximate country and city from the network a report was sent from. The report carries neither your real IP address nor any ID that identifies you or your phone.
• Expo delivers app updates. When the app checks for an update, Expo sees your IP address and which version of the app you have, and the app sends a random ID for this installation, so Expo can tell installations apart when delivering updates. The ID is not linked to your anonymous identity, your name or your groups, and it is lost when the app is deleted. Expo is based in the US and is certified under the EU–US Data Privacy Framework, which protects data sent there to the standard the EU requires.

Your data is not sold or shared with anyone else.

No tracking, ads or analytics

Dela does not track you across apps or websites, shows no ads and collects no analytics or usage statistics.

How long data is kept, and how to remove it

Your data is kept for as long as you are a member of a group. You remove it yourself, in the app: open the group, open its settings (the gear), and choose Leave group. Leaving takes effect at once and cannot be undone.

When you leave a group:

• Your name in that group is replaced with "Former member", and your Swish number is deleted.
• The membership is detached from your anonymous identity, so it no longer belongs to you or your phone.
• The expenses and payments you were part of stay in the group, so the other members' balances remain correct. Their descriptions and amounts are not changed.
• If you were the last member, the whole group is deleted, with all its expenses and payments.

Please note that the other members may still recognise which expenses were yours from the group's history, since they were there when those expenses happened. Leaving removes your name and your link to the records; it cannot remove what the others remember.

To remove your data from every group, leave each of them. Deleting the app on its own does not remove anything from the groups; it only loses your access to them.

Leaving does not delete the anonymous identity itself. Once you have left every group, it is a random ID that links to nothing, and it is lost when the app is deleted.

Crash reports are deleted automatically at the end of Sentry's retention period. Supabase and Expo keep request logs, including IP addresses, only for as long as they need them to run their service.

Your rights

Under the GDPR you have the right to:

• access the data held about you,
• have incorrect data corrected,
• have your data deleted,
• restrict how your data is processed,
• object to processing based on legitimate interest, and
• receive your data in a portable format.

Deletion is done in the app, by leaving a group, as described above. Your name and Swish number can also be corrected there, in each group's settings. For any other request, write to the contact address above. Because there are no accounts, an email alone does not say which memberships are yours, so name the group and the name you use in it.

If you think your data is handled wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or to the data protection authority where you live.

Changes to this policy

If this policy changes, the new version is published on this page with a new date at the top.