Privacy Policy
Scope
This policy applies to the AaBill mobile app (AaBill) and its companion website (the "Service"). It explains how we, as the data controller, collect, use, store, and protect your personal information. We never sell your personal information for advertising purposes.
Information We Collect
To provide the bookkeeping and settlement service, we collect:
Account information: the nickname and email address you enter; when you set a password, only a salted hash is stored; a phone number where that feature is enabled. If you choose Apple or Google sign-in, we process the basic profile (name/email) and avatar returned by the provider.
Group and bill data: the groups you create or join, membership, bills, transfers, settlements, and confirmation records.
Evidence images: receipt images you actively upload. Please avoid including sensitive information unrelated to bookkeeping in your evidence.
Subscription information: transaction metadata and the appAccountToken provided by App Store when you purchase or restore a subscription, used to verify entitlements and prevent duplicate benefits.
Device and technical information: the APNs device token when you enable notifications; install and request identifiers and irreversible IP fingerprints used for abuse prevention and security audits.
Email delivery: the minimum information necessary to send verification-code emails through our third-party email service.
Device Permissions
The Service may request the following system permissions, each requiring your consent and revocable at any time in system settings: Camera (photographing receipts and scanning invite codes) and Notifications (bill and settlement reminders).
How We Use Information
Information is used for: identity verification and account security; group collaboration, bill recording, split calculation, and settlement; push notifications; subscription entitlement verification; abuse prevention and security audits. OCR results of evidence images are used only to pre-fill entries and must be reviewed and submitted by you. We do not use your personal information for targeted advertising, and we never sell it.
Storage and Security
All transit is encrypted with TLS, and storage is encrypted at rest. Evidence files are accessible only through presigned links valid for 15 minutes and only to the current active members of the group containing the bill. We limit internal access to the minimum required by each function.
Third-Party Services and Data Sharing
Bills and evidence are shown only to the current active members of the group that contains them; except as required by law, we disclose them to no one else.
The Service relies on the following third-party services: Apple (Sign in with Apple, App Store in-app purchase and subscription processing, APNs push); Cloudflare (API service, D1 database, R2 object storage for evidence files, Workers AI for OCR of evidence images); Resend (verification-code email delivery). These providers process the data necessary to deliver their services under their own privacy policies. Beyond this list, we do not provide your personal information to any other third party.
Retention and Deletion
Personal information is retained as long as needed to provide the features. You can delete your own bills and evidence at any time.
Account deletion takes effect immediately: personal identity data is anonymized immediately, and external credentials and files are expected to be cleaned up within 7 days; third-party failures, retries, or manual processing may extend this estimate. Bills, transfers, and settlements in shared ledgers are retained anonymously only to the minimum extent needed for reconciliation and preventing duplicate entitlements. App Store transaction audit records are retained minimally as required by Apple.
Your Rights
You may access, correct, and delete your personal information. Most actions are available in the app: correct your profile under "Profile"; export or delete data, and delete your account, under "Privacy and Data". You may also exercise these rights by emailing support@cera.hk; we will respond within 30 days.
Account Deletion
You can start account deletion in the app under "Privacy and Data"; it takes effect after the necessary verification. Note that deleting your account does not automatically cancel your Apple subscription or trigger a refund; please cancel renewal in your subscription settings first.
Minors
The Service is not directed to children under 13. Minors should use the Service under guardian supervision. If we learn that we have collected a minor's personal information without guardian consent, we will delete it promptly.
Policy Updates
We may update this policy from time to time. When we do, the effective date at the top of this page will change, and material changes will be announced in the app. Continued use of the Service means you are aware of the latest version.
Contact Us
Data controller: C-ERA INTERNATIONAL TECHNOLOGY LIMITED. Email: support@cera.hk.