Privacy
Updated 4 November 2026 · Current service implementation
Your private ledger
DebtApp stores your account name, email, password hash, timezone and authentication tokens, along with contacts you enter, debt amounts, currencies, deadlines, comments, repayment methods and financial history. Contacts do not need accounts. Your records belong to your account and are not automatically shared with those contacts or other users.
How records are used
We use these records to display your balances, record repayments and manual settlements, maintain financial history, authenticate you, and show deadline reminders. DebtApp does not transfer money or contact debtors on your behalf. Avoid entering information you do not need, especially sensitive details in comments.
Notifications and sign-in services
Current reminders are stored in your account inbox. Google, Facebook and Apple sign-in are not currently enabled. Verification and password-reset emails are sent through authenticated encrypted SMTP as debtapp@edata.lt. No advertising or analytics integrations are included in the current backend.
Storage and security
The service runs at debtapp.edata.lt with encrypted HTTPS connections. Passwords are hashed and application access tokens are stored hashed on the server. Hosting infrastructure processes operational information such as IP addresses, timestamps and request metadata. No system can guarantee absolute security; do not share passwords or verification/reset links.
Export, corrections and deletion
You can export your account records in the app. Contact and deadline details can be corrected. Financial corrections use reversal records rather than silently rewriting payment history. Account deletion is a separate privacy action: after confirmation it removes your active account records and tokens from the application database. Hosting backups, if maintained, have a separate lifecycle; a backup-retention schedule has not yet been published. Ask support before relying on a particular backup-erasure deadline.
Questions
For privacy questions or help accessing export/deletion, email justas@pukys.lt. Do not email your password, access token, or reset link.