Privacy notice

TripTab · Shared travel expenses
Updated: October 2, 2026

Where your ledger is stored

The app stores trips, members, expenses and avatars on your device and in Apple iCloud, and shares them through iCloud with the travelers you invite. We do not access your iCloud expenses. You can record locally without signing into iCloud, but shared recording through iCloud requires sign-in.

iCloud uses Apple's standard encryption and sharing mechanisms. These differ from the device-side encryption used by the WeChat web entry described below. This does not mean we provide end-to-end encryption across the entire product.

WeChat web access

When the organizer enables web invitations in the app, the ledger summary is encrypted on the device before being uploaded. The decryption key is in the invitation link's # fragment and is not sent to the server in HTTP requests. Web entries are also encrypted in the browser and temporarily stored until an iPhone participant opens the app to retrieve them and add them to the ledger.

The server stores ciphertext along with ledger identifiers, passcode hashes, sequence numbers and timestamps used to receive, sync and clean up records. It does not store the key needed to decrypt the contents. The web page shows recent expenses and the last synced settlement information, not the complete app ledger.

Anyone with the complete invitation link has the decryption key. Share it only with your travel group; do not publish real invitation links. The browser stores your participant identity locally. You may need to claim it again after changing devices or clearing browser data.

Reference exchange rates

The app retrieves daily reference rates from ExchangeRate-API's public endpoint. Requests contain no expenses or personal information. Reference rates are not real-time prices and become fixed ledger rates only after the organizer confirms them. Routine refreshes do not automatically alter earlier entries.

This website and external links

This website has no accounts, collects no expenses and uses no advertising or third-party analytics scripts. When you view public pages, the hosting server may process routine access logs including IP addresses, request paths and request times.

TestFlight is provided by Apple and is subject to Apple's rules when you visit it. The brand website and WeChat contact are subject to their respective privacy rules. This website has no online form collecting your contact details.

Deletion and recovery

When the organizer moves a trip to Trash, web invitations close and the corresponding summary and web entries are deleted from the server. The app retains items in Trash for 7 days and allows recovery within that period. After recovery, the app can upload again using the original invitation identifier and key, making the original link available again. After the retention period, the app automatically clears the trashed content.

The server removes web ledgers and inboxes that have not been updated for one year. This does not affect app ledgers on your device. Manage iCloud data through your Apple Account and iCloud settings.

Contact & feedback

Existing testers can send feedback through TestFlight or return to the website and use the WeChat QR code under Contact & feedback to contact cowe, mentioning “TripTab”. Do not include real invitation links, children's information or ledger decryption keys in public feedback.