ShareLah
Effective 27 October 2026 · Version 2.3
ShareLah ("we", "us") provides a group expense splitting pilot for Malaysia, Singapore, Indonesia, and Thailand. Contact: justinyww@sharelah.app.
This Privacy Policy explains what we collect, how we use it, and how it is shared with processors. It is written to help you understand our practices under Malaysia's Personal Data Protection Act (PDPA) framing for a small pilot — it is not a substitute for legal advice.
We have assessed PDPA data protection officer appointment guidance for this pilot’s scale and have not appointed a separate DPO at this time. Privacy and PDPA enquiries: justinyww@sharelah.app.
Account data: email address, password (handled by our auth provider), and profile fields you choose to save — display name, gender, city, country, home currency (derived from that country), custom avatar choice, default payment method label, optional monthly spending budget and the month it applies to, receive method, bank name, bank account number, phone number for DuitNow / Touch 'n Go, and records of Terms acceptance (timestamp and version). Date of birth is required at signup (to confirm you are 18 or older) and may also be updated later in Settings. Country is required at signup.
Expense and group data: group name, invite code, base currency, appearance, and your sort order; merchant name, description, category, payment method, totals (amounts and tax, including the original currency amount and the locked exchange rate and source), expense date, split type, line items (names, prices, quantities, assignees), whether the expense was entered via OCR or manually and OCR confidence when applicable, balances, pending and confirmed settlements, expense removal requests, and display-name snapshots taken when someone joins a group. Hangouts store a title, place names, an optional map link you paste, and who voted. Reminders and in-app notifications store who acted, the related amount or title, and whether you have read or dismissed them. We also store a daily count of your OCR and categorisation requests so we can enforce rate limits.
Kira Sekejap data: the host's session (merchant, amounts, tax, date, category, line items, whether repayment details are shown, and when the link expires or closes) and each guest's display name, amount owed, and paid timestamp.
Receipt images: when you use OCR, the image is sent ephemerally to our AI processor for extraction. ShareLah does not store receipt images in our database after the scan request completes.
Technical data: authentication session data (including cookies used to keep you signed in), a Cloudflare Turnstile token when you sign up, sign in, or reset a password, cookieless page-view data from Vercel Web Analytics, password-reset emails sent via our auth provider, and operational logs needed to run and secure the service. Opening a group settlement link while signed out sends you to signup or sign-in, which is protected by Cloudflare Turnstile. Group settlement links do not expose group names, balances, or repayment details in link previews or to people who are not members of that group.
ShareLah securely transfers and processes personal data via global cloud infrastructure. Our third-party data processors currently include Supabase, Vercel, Groq, Cloudflare.
Supabase provides authentication, database hosting, and live updates for groups you belong to. Vercel hosts the application and serverless functions. Vercel Web Analytics, which is separate from hosting, records cookieless page views such as the path you open. Groq provides AI inference for receipt OCR and categorisation. Cloudflare Turnstile checks signup, sign-in, and password reset for bots, including when a signed-out visitor opens a group settlement link and is sent to that form.
Processing may occur outside Malaysia (including in the United States and other regions where these providers operate). By creating an account you consent to this overseas transfer for the purposes of providing ShareLah.
Exchange-rate refreshes fetch public mid-market snapshots from Frankfurter (European Central Bank reference data) or, if that source fails and a key is configured, ExchangeRate-API. Those requests are made from our servers and do not include your account or expense data. A map link saved on a hangout is opened by your browser only if you choose to open it.
Uploaded receipt inputs and model outputs are processed by Groq under a zero data training posture: Groq does not use your inputs or outputs to train or fine-tune models unless you separately permit that (ShareLah does not grant training permission).
Inputs and outputs may still be retained transiently in Groq's secure logs for up to 30 days solely for system abuse detection and reliability monitoring, unless Zero Data Retention is enabled on the Groq account. ShareLah does not claim that Zero Data Retention is enabled by default.
OCR requests are stateless from ShareLah's side: we send only the current receipt (or text for categorisation), not your historical expenses or past receipt images.
We save expense descriptions, categories, totals, payment methods, merchants, line items, currencies, locked exchange rates, settlements, and related group data so members can split bills and view history — not only item prices and totals.
About six months after an expense date, we anonymise free-text fields (merchant, description, and line-item names). Amounts, currencies, and related numeric fields may remain so open balances can still be calculated. Expenses in fully settled groups that are older than about six months, and closed groups past the six-month window, are hard-deleted by our retention job. That delete waits while a settle-up or expense removal for the group is still pending.
A Kira Sekejap link expires within 28 days. After it closes, we hard-delete the session, including guest names, about 30 days later. The host can delete a closed session sooner. Hangouts, reminders, and in-app notifications stay until you dismiss a notification or the related group or session is deleted.
Profile data — including bank account numbers, receive phone numbers, gender, date of birth, country, home currency, and optional monthly budget — is not auto-purged by the expense retention job. It remains until you update or clear it in Settings or delete your account. Settlement and expense-removal records are retained while the related group or expense history exists (and may be removed when a group is deleted or cascaded).
You can delete your account in Settings by typing DELETE and confirming with your password. Deletion removes your login and personal profile data. It is blocked while you have unsettled balances (you owe or are owed) in an open group with other members, or any pending settle-up involving you. Shared group expense history may remain for other members with anonymised or empty attribution where your profile was removed. Stats views are limited to a rolling six-month window and are derived in the app from your stored expense shares.
To create and secure your account, run groups and balances, convert expenses into a group's base currency, provide OCR and categorisation, enforce rate limits, require receive-setup before expenses where local repayment instructions apply, show repayment instructions during settle-up and on a Kira Sekejap link when the host leaves that on, run retention jobs, send in-app reminders and notifications, improve reliability, and communicate about the service when needed.
We do not sell your personal data.
Group members can see expenses, balances, settlement status, and expense details you save (including description, category, payment method type such as Credit Card, merchant, line items, currency, and the locked conversion into the group currency). They can also see hangout titles, place names, optional map links, votes, and reminders and notifications for that group. Receipt images are not shared with other members. Creators may edit expense metadata in open groups; removal requests are visible to members involved in confirmation.
In a group, other members can see your display name, custom avatar, country, and repayment instructions (bank name and account number, or phone for DuitNow / Touch 'n Go). Those repayment details are shown in settle-up so members can pay you outside the app. Your date of birth, gender, city, default payment method, monthly budget, and email stay on your own account and are not provided to other members through the app. We aim to avoid storing card digit sequences; merchant payment method is stored as a category label (for example Cash or Credit Card), not as a card number.
A group settlement link is different from a Kira Sekejap link. Only a signed-in ShareLah account that is already a member of that group can see the group's settle-up view, balances, and repayment instructions after opening it. Anyone who is signed out is sent to signup or sign-in. Anyone signed in who is not a member of that group sees that they do not have access, without group names, balances, or repayment details.
Kira Sekejap is different. Anyone with the link can open it without an account and see the bill, guest names, amounts, and who has marked paid. If the host leaves show-payment-details on (the default), the link also shows the host's bank name and account number or DuitNow / Touch 'n Go phone. The host can turn that off when creating the link.
If we become aware of a personal data breach, we will notify the Personal Data Protection Commissioner within 72 hours of the breach's occurrence. We will also notify affected individuals without unnecessary delay if the breach causes or is likely to cause significant harm.
We keep an internal incident log recording when a suspected breach is identified, how it is assessed, and what notification and remediation steps were taken, so we can demonstrate that response.
You can update profile, country, and receive preferences in Settings. A complete Malaysian receive method is required while a Malaysia account is active. You can leave or close groups according to in-app controls (multi-member groups must be settled before close; sole-member groups may close with a residual balance; group creators may delete closed groups), and delete your account in Settings by typing DELETE and confirming with your password (blocked while you have unsettled balances — owe or owed — in an open shared group, or any pending settle-up involving you). You may also contact us to request access or other assistance where applicable under Malaysian law.
A host can turn repayment details off for a Kira Sekejap link, close the link, or delete a closed session. A guest can mark their share paid, or undo that mark, while the link is open. Guest names are not tied to an account, so deleting an account does not remove a name on someone else's link. That name is removed when the session is deleted.
The optional demo tour stores progress only on your device. Appearance (light or dark), the last group you opened, items you hide from your recent list, a monthly budget cache, and an in-progress expense draft (kept for about a day) stay on your device and are not uploaded as profile data. A receipt scan result may be cached in that browser tab until you close it; the receipt image is not stored. Choosing your name on a Kira Sekejap link is remembered in that browser so you can reopen it.
Contact: justinyww@sharelah.app.
We may update this Privacy Policy for the pilot. The effective date and version will be updated on this page. Effective date: 27 October 2026. Version: 2.3.
