PRIVACY

13 OCTOBER 2026

Pezzo has no account, no analytics, no advertising and no tracking. This page lists everything that leaves your phone, and what happens to it.

Receipt photos, screenshots and PDFs

When you scan a receipt, or bring one in as a screenshot, photo or PDF, and your phone is online, the image is sent to Pezzo's reader (read.pezzo.app), which passes it to Google's Gemini model on Google Cloud (Vertex AI) to read the items and amounts. The answer comes straight back to your phone.
A PDF is turned into images on your phone first; only those images are sent. Pezzo does not store them, and they are never written to Pezzo's logs. Google processes them under Google Cloud's terms for Vertex AI, which do not allow them to be used to train Google's models.
Before sending, each image is resized and compressed, and signed so that only the genuine app can use the reader: by Apple App Attest on iPhone, and by Google Play Integrity on Android.
When your phone is offline, or the reader can't be reached, the receipt is read entirely on your phone and nothing is sent.

Your splits, the names of the people you split with, and your payment details are stored only on your phone.
If your phone backs itself up (to iCloud on iPhone, to your Google account on Android), they are part of that backup, which belongs to you and which Pezzo cannot see.
If you delete the app, they are deleted from your phone with it. A phone backup may bring them back if you install Pezzo again.

When you send someone their share, Pezzo stores that one request (the bill's name, the two names, the amounts and your payment details) on its pay page server (pezzo.app), so the link can be short.
It is encrypted on your phone first, with a key that exists only in the link you send. The server never receives the key, so it cannot read the request. Stored requests are deleted automatically after one year.
If your phone is offline, the request travels inside the link instead, and nothing is stored.

Like any website, Pezzo's servers see the IP address of each request. The reader uses it only to limit how many receipts one connection can send per minute, to stop abuse. Pezzo's hosting provider, Cloudflare, keeps standard request logs (addresses, times and errors, never photos or request contents) for a short time.
On iPhone, the reader keeps a random key for each installation of the app, created by Apple App Attest. On Android, Google Play checks that the app and the phone are genuine and tells the reader the result. Neither identifies you.

Purchases are handled by Apple on iPhone and by Google Play on Android. Pezzo never sees your payment details.
To know whether Pezzo Pro is active, the app shares the record of your Pezzo Pro purchase (which plan, when, and its App Store or Google Play transaction details) with RevenueCat, the service that manages subscriptions for Pezzo. It is filed under a random ID made up for your installation of the app, with no name, email or account attached.
Payment links open other apps and services (such as Venmo, Cash App, PayPal, Monzo, Revolut, Pix or UPI apps, or your bank). Pezzo never moves money, and those services have their own privacy policies.

Pezzo is not directed at children under 13 and does not knowingly collect their data.

If Pezzo starts storing anything new, this page will say so before that version of the app is released.

SPLIT WITH PEZZO