Baantlo helps a group of people — an apartment building, a trip, a savings committee — record what they spend together and work out who owes what. This policy explains exactly what the app stores, why, and how to get rid of it.
What we collect
We only collect what the app needs to do its job.
Your account
- Your name — shown to the other members of the groups you are in.
- Your mobile number and/or email address — one of them is how you sign in, and a mobile number is how a group’s admin can add you to their group before you have signed up.
- Your password, stored only as a bcrypt hash. We cannot read it.
What you record in a group
- Group names, unit or member labels, and the names of people you add.
- Bills: title, category, amount, date, and who each bill is split between.
- Payments: amount, date and an optional note.
Automatically
On this website
baantlo.com counts page views using Vercel Web Analytics. It is cookieless and sets no identifier: it records the page, the referrer, and a coarse country and device type. It cannot follow you between sites or sessions, and it is never joined to your Baantlo account — the app itself does not run it. That is also why this site has no cookie banner: there is nothing to consent to.
How we use it
Only to run the service: to sign you in, to show your groups and the people in them, and to calculate balances and monthly reports.
We do not sell your data, share it with advertisers, or use it to build a profile of you.
Who can see your data
- Other members of a group you belong to can see your name, your unit or member label, the entries you are part of and what you owe. That is the point of a shared expense book.
- Nobody else. Your data is scoped to your groups; members of other groups cannot see it.
Service providers
- MongoDB Atlas — hosts the database.
- Brevo — sends the password-reset email containing your one-time code. Brevo receives your email address for that purpose only.
We do not use any other third-party processor.
Security
- Passwords are hashed with bcrypt and never stored in readable form.
- Sign-in tokens are held in the device keychain (iOS Keychain / Android Keystore), not in ordinary app storage.
- All traffic between the app and our servers uses HTTPS.
- Password-reset codes are six digits, expire after 5 minutes, allow at most 5 attempts, and are invalidated once used.
Keeping and deleting your data
Your data stays until you delete it.
Deleting your account — open the app, tap your profile picture, and use Delete my account in the Danger zone. This immediately:
- deletes every group you created, along with its entries, payments, categories and member records;
- removes you from groups run by other people, leaving their books intact;
- signs out every device you are signed in on.
You will be asked to settle anything you still owe in someone else’s group first, so that the other members are not left covering your share.
Account deletion cannot be undone.
To delete your data without using the app, email hello@baantlo.com from the address on your account.
Children
Baantlo is not directed at children and we do not knowingly collect data from anyone under 13.
Changes
If this policy changes we will update the date at the top and, for anything material, tell you in the app.
Who operates Baantlo
Baantlo is operated by Muhammad Tahir, Karachi, Pakistan — the same seller named on the App Store listing. He is the data controller for everything described above, and is who to write to about it.
Contact
Questions about your data: hello@baantlo.com.
Back to Baantlo