Last updated: October 12, 2026
Jointly ("we," "us," or "our") is operated by Joshua Knopman, a sole proprietor based in Brooklyn, New York. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Jointly mobile application (the "App").
By using the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
Account Information: When you create an account, we collect your name, email address, and profile photo (if provided). You may sign in using email/password, Google Sign-In, or Apple Sign-In. If you use Apple Sign-In, Apple may provide a private relay email address instead of your real email address, depending on your Apple ID settings.
Financial Data via Plaid: If you choose to connect a bank account, we use Plaid Inc. to securely access your transaction data. Plaid retrieves transaction details (merchant name, amount, date, category) and basic account information (institution name, account mask) on your behalf. Jointly never receives, stores, or has access to your bank login credentials. Your credentials are handled entirely by Plaid under their own End User Privacy Policy.
Financial Data via Apple FinanceKit: If you choose to connect your Apple Wallet, we use Apple's FinanceKit framework to access transaction data from your Apple Card, Apple Cash, and Savings with Apple accounts. FinanceKit reads this data directly from your device — Apple does not receive or have access to the transaction data you share with Jointly. We collect transaction details (merchant name, amount, date, category) and transmit them to our servers for expense-splitting functionality. You authorize this access through a system-level iOS prompt and can revoke it at any time in iOS Settings → Privacy & Security → Finance.
Expense and Split Data: We store records of transactions, manual expenses, recurring expense schedules, splits, settlement history, and related notes that you create within the App.
Receipt Images: You may attach receipt or photo images, or PDF files, to your transactions and splits within the App. These files are stored in Firebase Storage. Receipts on a transaction you have not split remain private to you; once a transaction is split, its receipts become visible to your partner along with the shared split. If you or your partner remove a receipt from a split, the image is kept and stays visible to both of you in that split's edit history (see "Split Edit History" below), so a shared receipt can't be silently replaced.
Split Edit History: When you or your partner change a split's amount or percentage, add, change or remove its note, or add or remove a receipt, we keep a permanent record of the change on that split — who made it, when, and the values before and after (including the previous and new note text). Both partners can see this history, including after the split is settled or removed; dismissing a notification about an edit does not delete the record. Notes are limited to 1,000 characters.
Partnership Data: If you pair with a partner, we store information about that relationship, including invite codes and shared split preferences.
Payment Preferences: If you choose to set a default payment method (Venmo, PayPal, Cash App, or Apple Cash) for settlement, we store your username for that service. For Apple Cash, we store the phone number you provide so the App can open Apple's Messages app addressed to your partner to complete a payment — the phone number is shared with your linked partner for this purpose. When you settle up or invite a partner, the App may pre-fill settlement details (such as the merchant, amount, split percentage, and date) into your chosen payment app or into a Messages/SMS draft that you review and send. We do not process payments directly.
Biometric Authentication: If you enable Face ID or Touch ID, your sign-in credentials are stored in the iOS Keychain with biometric access control. No biometric data (fingerprints, facial scans) is collected, stored, or transmitted by Jointly. All biometric processing is handled locally by Apple's LocalAuthentication framework and never leaves your device.
In-App Feedback: If you respond to an optional in-app satisfaction survey, we store your response to help improve the App. Survey responses are also sent to Firebase Analytics.
Subscription Data: If you subscribe to Jointly Premium, Apple processes your payment through the App Store. We store your subscription status and a subscription identifier in our database to manage feature access. We do not receive or store your payment method details (credit card number, billing address, etc.). All payment processing is handled entirely by Apple.
Analytics: We use Firebase Analytics to collect pseudonymous usage data to improve the App. Analytics events are tied to a random account identifier (not your name or email), and some events are generated on our servers rather than on your device. This includes screen views, feature interaction events (such as creating splits, connecting accounts, or changing settings), and aggregated behavioral metrics (such as the number of connected accounts, splits created, or your preferred payment app). We also collect optional survey responses (a single rating choice) and counts about how you use custom categories — never the category names themselves. If you try to connect a bank that Jointly does not support yet, we record that bank's name so we know which banks to add next. We never send your name, email, transaction amounts, merchant names, or account numbers to analytics. Analytics data is processed by Google under their privacy documentation.
Push Notifications: If you enable push notifications, we store a device token for each device you are signed in on, so we can deliver notifications about new splits, edits to or removals of shared splits, settlements, review requests, settle-up reminders, and problems with your bank connections. These tokens do not contain personal information. A device's token is deleted when you sign out on that device, when you request account deletion, and automatically once it stops working.
Activity Data: We record a timestamp of when you last used the App. We use this solely to identify accounts that have been inactive for an extended period so we can pause their bank connections (see "Inactive Accounts" under Data Retention and Deletion below). This timestamp does not include your location or any details about what you did in the App.
Device Information: If you choose to submit a bug report or contact support from within the App, your message may include basic device information (app version, iOS version, and device model). This information is only sent when you initiate a support request and is not collected automatically.
We use the information we collect to:
We do not sell, rent, trade, or otherwise share your personal information or financial data with third parties for their marketing or advertising purposes. Period.
We share your information only in the following limited circumstances:
We take reasonable measures to protect your information, including:
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account is active or as needed to provide our services. Retention periods for each category of personal information are set out in the table in Section 9; the rest of this section describes what happens when you delete an account, disconnect an account, or stop using the App.
Account Deletion: You can delete your account directly from the App via Settings. Account deletion includes a 7-day grace period during which you can cancel by signing back into the App. After 7 days, all of your data is permanently and irreversibly deleted, including your profile, transactions, splits, settlement history, partnership data, category preferences, uploaded receipt images, your profile photo, and any connected account records. Please note that settled splits your partner created and settled are part of your partner's own settlement history and remain in their account after your deletion. Likewise, changes you made to splits your partner created (amounts, notes and receipts you added or removed) remain in the edit history of those splits, which are part of your partner's account. You may also contact us at help@getjointly.co for assistance with a deletion request.
Disconnecting a Bank Account: When you disconnect a bank account, the associated Plaid access token is immediately revoked and deleted from our servers, preventing any further data access. Disconnecting only stops future syncing — it does not delete anything already synced. Your existing transactions, splits, settlement history, and any transactions you marked Personal are all retained. If you want that data removed, you can use "Remove Accounts" in Settings → Connected Accounts, which lets you pick individual accounts at that bank; removing an account stops syncing it and permanently deletes its transactions and unsettled splits (settled splits remain in your settlement history because they are shared with your partner). You can also delete your entire account.
Deleting a Manual Expense: A transaction you added by hand can be deleted outright by the person who added it, as long as it has not been settled. Deleting it permanently removes the transaction and any splits it created from our servers, for you and for your partner, and updates the balance between you. This cannot be undone. Transactions synced from a connected bank or from Apple Wallet cannot be deleted this way, because they are a record of a charge that actually occurred — you can mark those Personal to keep them out of your shared splits instead.
Inactive Accounts: If you do not use the App for an extended period (currently 45 days), we automatically pause your bank connections to protect your privacy and avoid maintaining access we no longer need on your behalf: the associated Plaid access tokens are revoked and deleted from our servers, exactly as if you had disconnected the account yourself. We send you a notice beforehand so you have an opportunity to return first. Your cached transactions, splits, and settlement history are retained — only the live bank connection is removed. You can reconnect at any time from Settings to resume syncing. This inactivity pause applies to all connections, including Apple Wallet via FinanceKit (Apple Card, Apple Cash, and Apple Savings). FinanceKit reads data directly from your device rather than through a third party, so there is no access token for us to revoke; instead we clear the authorization record that permits the App to read those accounts, and syncing stops until you reconnect from Settings.
Deleting Accounts After Two Years of Inactivity: If you do not use the App for two years, we delete your account and its data, exactly as if you had requested deletion yourself (see "Account Deletion" above), so we don't keep your financial information longer than we need it. About 30 days before that, we email you (and, if the App is still installed, send a notification) with the date. Opening the App and signing in before then keeps your account, and nothing else is required. After the scheduled date there is a further 7-day window, as with any deletion request, before the data is permanently removed. If you are linked with a partner, any open balance between you is cleared; settled splits your partner created remain in their settlement history.
Disconnecting Apple Wallet: When you revoke FinanceKit access — either through the App's settings or via iOS Settings → Privacy & Security → Finance — we immediately stop accessing new transaction data from your Apple Wallet. As with a bank disconnection, this only stops future syncing: revoking FinanceKit access does not delete previously shared data. Your existing transactions, splits, and settlement history are retained until you remove them yourself or delete your account.
Removing Older Transactions: In Settings → Connected Accounts you can adjust the "Show Transactions From" date. Moving this date forward permanently and irreversibly deletes synced transactions dated before it from our servers. Your splits and settlement history are preserved.
Consent: Bank accounts are connected through Plaid Link, which presents its own data-use disclosure and consent step before any account is connected — you authorize the connection there, not in Jointly. For Apple Wallet, authorization is granted through the FinanceKit permission prompt, a system-level iOS dialog. You can revoke access at any time by disconnecting the account in Settings.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
How to make a request. Email legal@getjointly.co from the email address associated with your account, and tell us which right you are exercising. You can also delete your account and all of its data yourself, without contacting us, from Settings inside the App.
How we verify you. For most requests we verify you by confirming control of the account email address on file. For requests to delete or to receive a copy of your data, we may ask you to confirm from within the App, or to provide additional information that matches what we already hold, so that we do not disclose your financial information to someone else. We use information provided for verification only for that purpose.
Authorized agents. You may use an authorized agent to submit a request on your behalf. We will ask the agent for written permission signed by you, and we may still ask you to verify your own identity directly with us.
Our response times. We will acknowledge your request promptly and respond within the period required by the law that applies to you — generally within 45 days, which may be extended by an additional period where the applicable law permits and we notify you of the extension and the reason for it.
If we decline (right to appeal). If we refuse to act on your request, we will tell you why. If you live in a state that provides a right to appeal — including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and others — you may appeal that decision by replying to our response, or by emailing legal@getjointly.co with “Privacy Appeal” in the subject line. We will review the appeal and respond in writing with our decision and the reasons for it, within the period your state's law requires. If we deny your appeal, we will provide you with a method to contact your state Attorney General to submit a complaint.
If you are a California resident, you have the right to know what personal information we collect, request access to or deletion of it, correct inaccurate information, limit the use of sensitive personal information, and opt out of the sale or sharing of personal information. As stated above, we do not sell or share your personal information, and we will not discriminate against you for exercising any of these rights. See Section 8 for how to make a request, how we verify it, and how long we take to respond.
The table below sets out, for each category of personal information we collect: where it comes from, why we collect it, who we disclose it to for a business purpose, and how long we keep it.
| Category | Sources | Business purpose | Disclosed to | Retention |
|---|---|---|---|---|
| Identifiers Name, email address, account identifier, device push token |
You, at signup; Apple or Google if you use their sign-in; your device | Create and secure your account, pair you with a partner, send you notifications you have enabled | Firebase / Google Cloud (authentication, database, messaging); Postmark (your email address, only to send account notices; your account identifier, only in internal alerts to us) | For the life of your account. Deleted permanently 7 days after you request account deletion, or after two years without using the App (following an email notice). A push token is deleted as soon as you sign out on that device. |
| Financial information Transaction details (merchant, amount, date, category), account masks, institution names, subscription status |
Plaid, if you connect a bank; Apple FinanceKit, directly from your device, if you connect Apple Wallet; Apple StoreKit, for subscription status; you, for manual expenses | Provide the core expense-splitting service — showing your feed, creating splits, and calculating balances | Firebase / Google Cloud (database, cloud functions). Plaid receives the request to retrieve it; Apple does not receive FinanceKit data. | Until you delete it, remove the account it came from, move your “Show Transactions From” date past it, or delete your account. Deleted with your account after two years without using the App. |
| Commercial information Splits, settlement history, category and split preferences, automation rules |
You, through your use of the App | Provide the service and maintain an accurate shared record between you and your partner | Firebase / Google Cloud (database, cloud functions) | For the life of your account, including deletion after two years without using the App. Settled splits your partner created remain part of their settlement history after your deletion. |
| Visual information Profile photo, receipt images and PDFs you upload |
You | Display your profile and let you attach evidence to an expense | Firebase Storage | Until you delete the image or the item it is attached to, or delete your account. A receipt removed from a split is kept with that split's edit history until the split or your account is deleted. |
| Phone number | You, and only if you choose Apple Cash as a payment method | Open Apple’s Messages app addressed to your partner so you can settle up | Shared with your linked partner for this purpose | Until you remove it or delete your account. |
| Internet or other electronic activity Pseudonymous app usage and analytics events, crash diagnostics |
Your device, through the App | Understand which features are used, diagnose crashes, and improve the App | Firebase / Google Cloud (Analytics, Crashlytics) | Retained according to the data-retention configuration of our Google Analytics and Crashlytics properties, which expires these records on a rolling basis rather than keeping them indefinitely. |
| Support and feedback content Only what you actively send us |
You, by email or by submitting feedback from a TestFlight pre-release build | Respond to you and fix the problem you reported | For TestFlight feedback only: Anthropic (to summarize and categorize) and Notion (issue tracking). This never applies to App Store users. | As long as needed to resolve the issue. Not deleted automatically when you delete your account — email us to have a report removed. |
Sensitive personal information. We do not collect your bank login credentials, full account numbers, government identifiers, precise geolocation, or the contents of your communications. We use the financial information we do hold only to provide the service you asked for, and not for any purpose that would give rise to a right to limit its use under the CPRA.
Sale and sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising. The App contains no advertising SDK, does not use the Advertising Identifier (IDFA), and does not present an App Tracking Transparency prompt because it has nothing to track you with. Ad-personalization and ad-user-data signals are disabled in our analytics configuration. We have not sold or shared personal information, including the personal information of anyone we know to be under 16, in the preceding twelve months.
In compliance with the New York SHIELD Act, we implement reasonable safeguards to protect the security, confidentiality, and integrity of private information of New York residents, including administrative, technical, and physical safeguards.
Breach Notification: In the event of a security breach that compromises your personal information, we will notify affected users without undue delay, as required by applicable law, and describe the nature of the incident and the steps we are taking in response.
A number of U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, and Maryland — give residents privacy rights similar to those described above. If you are a resident of one of these states, you may have the right to confirm whether we process your personal data and to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
We do not do the things most of these opt-outs exist to address. We do not sell personal data, we do not engage in targeted advertising, and we do not carry out profiling of the kind described above. You may still submit a request, and we will confirm this to you in writing.
Sensitive data. Where your state treats financial account information as sensitive data requiring consent, you provide that consent when you choose to connect an account through Plaid or Apple Wallet, and you can withdraw it at any time by disconnecting the account in Settings.
Right to appeal. If we decline to act on your request, you may appeal. The process, including what we will tell you if the appeal is denied, is described in Section 8.
To exercise any of these rights, contact us at legal@getjointly.co.
Jointly is offered only to individuals in the United States. Our Terms of Service state the same thing, and the App is distributed and supported on that basis. We do not offer the App to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not target or knowingly direct it to residents of those regions.
Jointly is operated from the United States, and all personal information we collect is processed and stored on servers in the United States by our infrastructure providers. If you access the App from outside the United States, you do so on your own initiative, you are responsible for compliance with your local law, and you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.
Where we process your personal information, we do so because it is necessary to provide the service you have asked us for and to perform our agreement with you; because you have consented, as when you connect a financial account or enable notifications; because we have a legitimate interest in keeping the App secure, diagnosing faults, and improving it; or because we are required to by law. You can withdraw a consent at any time, as described above, without affecting processing that already took place.
The App is intended for adults. As stated in our Terms of Service, you must be at least 18 years old to use Jointly, and the App is not directed to minors. We do not knowingly collect personal information from anyone under 18, and in particular do not knowingly collect information from children under 13. If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at legal@getjointly.co.
The App is provided on an "as is" and "as available" basis, without warranties of any kind, either express or implied. Jointly is not a financial advisor, accountant, or bank. The App is a tool for tracking and splitting shared expenses and does not provide financial, tax, or legal advice.
To the fullest extent permitted by applicable law, Jointly and its operator shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or use, arising out of or related to your use of the App, including but not limited to:
You use the App at your own risk and are solely responsible for verifying the accuracy of any financial information.
The App may contain links to third-party services (such as Plaid, Apple FinanceKit, Venmo, PayPal, and Cash App). We are not responsible for the privacy practices or content of these third-party services. We encourage you to review their privacy policies before using them.
We may update this Privacy Policy from time to time. For minor or non-material changes, we will update the "Last updated" date at the top of this page. For material changes, we will give you at least thirty (30) days' notice before they take effect, by email to the address on your account or by an in-app notice. We will not use information we already hold in a materially different way than this policy described when we collected it without first asking for your consent. Your continued use of the App after a change takes effect constitutes your acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Jointly
Operated by Joshua Knopman
Brooklyn, New York
info@getjointly.co