Where your data lives
On our servers, sent over an encrypted connection and tied to your account.
We do not sell your data, and we do not run analytics on the contents of your transactions. What you spent money on is not a product input.
No bank connection
HiBill never connects to your bank. There are no banking credentials to leak because we never ask for them.
It is a memory tool: you tell it what happened and it remembers. That also means nothing is recorded unless somebody records it.
Who can see what
People you are connected to see the ledger between the two of you — the transactions you both touched, and your shared balance. They cannot see your other people, your other balances, or anything involving people they are not part of.
Placeholder people see nothing. They have no account, so that record is yours alone. See adding people who haven't signed up.
Group members are connected to each other, so each pair can split. A group holds no balances of its own and does not reveal one member's balance to another. See creating and using groups.
A group's transaction list follows the same rule. It shows you only the transactions you are already part of, as payer or participant. Being in a group does not open anyone else's transactions to you, even when they are tagged with that group.
Anyone with a public share link sees exactly that one transaction, including its attachments. Nothing else — not your account, not your other transactions. See sharing a transaction publicly.
Receipt scanning and AI sentence reads
A receipt you mark as a bill is processed to extract the title, total, currency, date and line items. It is read together with your sentence when you press Read, and the transaction is saved only when you press Add — so you can check it and fix anything the AI got wrong first. See scanning receipts.
Every typed sentence is read by AI when you press Read. It is given the sentence text, your date and default currency, and the names of your contacts and groups (never their email addresses, balances or history). A marked bill also sends the photo. See adding a transaction by typing a sentence.
If you would rather a particular receipt were not processed, enter the transaction manually — scanning is always optional.
Deleting your account
Account deletion is in settings. It is permanent — your account and its data are removed and cannot be recovered.
Two things worth understanding first:
Deleting your account cancels any active subscription at once — there is no need to cancel it first. See managing your subscription.
Shared history is shared. A transaction between you and another person is part of their ledger too. Deleting your account does not reach into someone else's records and erase transactions they were part of. If you and Marco split a dinner, that is a fact about both of you.
Guest accounts
A guest account is tied to one browser or device and cannot be recovered if you clear your browser data. Register to make your data durable — everything carries over. See signing in and guest accounts.
Questions about your data
Email admin@hibill.app and we will answer.
Full terms
The privacy policy and terms are the authoritative documents.
Continue reading
Signing in, guest accounts and sessions — how to keep a guest account's data and see where you are signed in.
Sharing a transaction publicly — what a share link shows, and how to turn one off.
How HiBill Works: A Quiet Ledger for the Money Between Friends — the person-to-person model behind who sees what.