Where your data lives
On our servers, sent over an encrypted connection and tied to your account.
We do not sell your data, and we do not run analytics on the contents of your transactions. What you spent money on is not a product input.
No bank connection
HiBill never connects to your bank. There are no banking credentials to leak because we never ask for them.
It is a memory tool: you tell it what happened and it remembers. That also means nothing is recorded unless somebody records it.
Who can see what
People you are connected to see the ledger between the two of you — the transactions you both touched, and your shared balance. They cannot see your other people, your other balances, or anything involving people they are not part of.
Placeholder people see nothing. They have no account, so that record is yours alone. See adding people who haven't signed up.
Circle members are connected to each other, so each pair can split. A Circle holds no balances of its own and does not reveal one member's balance to another. See creating and using Circles.
A Circle's transaction list follows the same rule. It shows you only the transactions you are already part of, as payer or participant. Being in a Circle does not open anyone else's transactions to you, even when they are tagged with that Circle.
Anyone with a public share link sees exactly that one transaction, including its attachments. Nothing else — not your account, not your other transactions. See sharing a transaction publicly.
Receipt scanning
Scanned receipt images are processed to extract the title, total, currency, date and line items, then the transaction is drafted for you to confirm. See scanning receipts.
If you would rather a particular receipt were not processed, enter the transaction manually — scanning is always optional.
Deleting your account
Account deletion is in settings. It is permanent — your account and its data are removed and cannot be recovered.
Two things worth understanding first:
Cancel any active subscription before deleting, or check its status — see managing your subscription.
Shared history is shared. A transaction between you and another person is part of their ledger too. Deleting your account does not reach into someone else's records and erase transactions they were part of. If you and Marco split a dinner, that is a fact about both of you.
Guest accounts
A guest account is tied to one browser or device and cannot be recovered if you clear your browser data. Register to make your data durable — everything carries over. See signing in and guest accounts.
Questions about your data
Email admin@hibill.app and we will answer.
Full terms
The privacy policy and terms are the authoritative documents.