Privacy Policy

SlyceIt is built to do one job — split a restaurant bill — and to keep what it needs to do that job, and nothing else. This page describes what we collect, why, and who else sees it.

What we collect from hosts

When you sign in with Google, we receive and store your name and email address from Google. We use these to identify your account and show your bills back to you. We do not receive your Google password, contacts, or any other Google profile data.

You can also set, and we will store:

• A display name (which overrides the name we received from Google)
• A default currency and country preference
• Payment instructions you want shown to your guests (e.g. bank, DuitNow, or e-wallet details)

What we collect from guests

Guests do not sign in. When a guest opens a bill link and starts claiming items, we store only the name they type in, the items they claim, and whether they have marked themselves as paid. No email, phone number, or account is required.

Receipt images

When you scan a receipt, the image is sent to our OCR provider (OpenAI), parsed into structured line items, and then discarded. SlyceIt does not store the receipt image. We only keep the parsed items, taxes, and totals as text records linked to your bill.

Payments

SlyceIt does not process payments. Friends pay you directly through whatever method you set up (bank transfer, DuitNow, e-wallet, etc.). We do not see, store, or transmit any payment credentials, card numbers, or bank passwords — only the display instructions you typed in yourself.

Third-party services we rely on

• Google — OAuth sign-in for hosts.
• OpenAI — vision-based OCR on receipt images (in-memory, not retained on our side).
• Vercel — application hosting and request logs.
• Neon — Postgres database where bills, items, and claims are stored.
• Pusher — real-time updates so the host's view stays in sync with guest claims.
• Google Tag Manager — analytics loader. Specific tags configured server-side may collect aggregate usage data.

Cookies

We use a session cookie (managed by NextAuth) to keep you signed in. Guests do not get a SlyceIt cookie — their progress is held in their browser's sessionStorage and disappears when they close the tab. Analytics loaded via Google Tag Manager may set additional cookies.

Data retention and deletion

Your account and your bills are kept while you have an account. If you want your account deleted, or specific bills removed, reach out via the contact page and we will handle it.

Children

SlyceIt is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes

If we change this policy in any material way, we will update the date at the top of this page. Continued use of SlyceIt after a change means you accept the updated policy.

Contact

Questions about this policy? Email hello@slyceit.app or open an issue at our GitHub repository.