Privacy Policy

Privacy Policy

Effective date: March 27, 2026. Pangu is an anonymous-first shared expense app. This page explains what information the app processes, where it is stored, and how it is used.

1. What Pangu stores

  • Group information such as group names, join codes, members, expenses, splits, settlements, reminders, and comments.
  • Personal Locker entries, including expense details, categories, currency preferences, receipt attachments, and linked personal receipt line items when you choose to save them.
  • Optional payment handles and region-specific payment details such as Venmo usernames, PayPal handles, Zelle identifiers, UPI IDs, Interac emails, Pix keys, Wise details, or similar payment aliases if you add them, plus an optional saved payment region selection.
  • Optional account recovery email if you choose to save one for restoring your groups and Personal Locker data later.
  • Local app preferences such as theme, onboarding state, app lock state, and locally cached group data.

2. Authentication model

Pangu does not require a visible sign-in flow before you can start. The app uses an anonymous backend identity to connect a device session to group membership, Personal Locker data, and group activity.

3. Where data is stored

  • Shared group data and Personal Locker data are stored in Pangu's backend infrastructure so group members can access shared records and recover access later.
  • Some app state is also cached locally on your device for performance and continuity.
  • Deleting the app removes local device storage, but does not automatically delete remote shared data tied to your group history.

4. Camera, photo library, and receipts

If you choose to scan or attach a receipt, Pangu may request camera or photo library access. Receipt images may be processed by AI-powered receipt parsing to extract merchant, total, date, discounts, and line-item details. Receipt images and parsed receipt details are used only for expense tracking features you initiate, including linked Personal Locker line items when you choose that flow.

5. Notifications

If you allow notifications, Pangu may store a push token and send local or remote notifications for reminders, settlements, approval flows, or group-related updates.

6. App lock and biometrics

If you enable App Lock, Pangu uses your device's built-in Face ID, Touch ID, or passcode system. Pangu does not collect or store biometric data itself.

7. Recovery and support features

Pangu may use join codes for normal group entry, plus an optional account recovery email with one-time code verification to help reconnect a person to earlier group history after a reinstall, device change, or lost local session. Separate merge tools may also be used by group owners when duplicate member records need cleanup.

8. How data is used

  • To create and manage groups, members, expenses, splits, settlements, reminders, receipts, and insights.
  • To support approval flows, merge flows, and account recovery workflows.
  • To generate PDF exports and help present group history clearly inside the app.

9. Data retention

Shared group records are retained to preserve accounting history for the group unless they are explicitly deleted through app functionality or a support-assisted deletion process.

10. Your choices

  • You can delete the app to remove local device data.
  • You can use the in-app local purge/reset tools when available on your device build.
  • You can contact support for questions about remote group data or deletion requests.

11. Contact

For privacy questions or support requests, email support@udo-apps.com or visit udo-apps.com/pangu.