Plain-language policy

Privacy, without the fog.

Last updated: 19 August 2026

What the app keeps

Broken Tubelight keeps the account details needed to sign in and deliver account-targeted features, including an email address, display name, encrypted session token, and optional profile image. Your expense entries remain available locally on your device. Shared workspace events are sent to the collaboration service only when you choose to use a shared group.

Why we use it

We use account data to authenticate you, deliver and verify a secure invitation, prevent unauthorised membership changes, and support the service. We do not sell personal information or use group expenses for advertising.

Your choices

Phone and WhatsApp updates are optional. You can withhold a phone number, turn off the opt-in, or change your profile information in the app. Email and phone delivery are only treated as active after their relevant verification step. You can request account deletion at any time; see our Delete account page for the steps and data details.

Sharing and security

Group access is recipient-controlled. Opening a link never joins someone automatically; a signed-in recipient must explicitly accept. We use reasonable controls to protect service data, but no internet system can promise absolute security.

Payments and donations

Donations are processed by a payment provider. Broken Tubelight does not store payment-card numbers. A donation is voluntary and never changes product access.