Pikeworks
Privacy policy
Last updated 26 September 2026.
Clementine is made by Pikeworks, a sole trader in Northern Ireland. It splits bills between friends, so some of what you put in has to be shared with the people you split with. This is what it keeps, where, and why.
On your phone
Your groups, bills, payments, comments and settings are saved on your phone first, so the app works without a signal. If you never share a group or sign in, that is the only place they are, and nothing about them is sent anywhere.
On the Clementine server
When you share a group, sign in or make a recovery key, the app keeps a copy of your groups on the Clementine server, which I run in the United Kingdom. That is what lets friends add bills to the same group and what brings everything back on a new phone. The server holds:
- your account: the name you use, and your email address if you sign in with Google, Apple or an email code. With Apple you can hide your real address, and the server only ever sees the one Apple gives it;
- the account number Google or Apple gives the server when you sign in with them, never your password;
- a sign-in key for each phone, and your recovery key if you make one, both stored only in a scrambled form that cannot be turned back into the key;
- each group you are in: its name, picture and currency, the people in it, their bills, payments and comments, and who added what;
- for the people in a group: the name you give them, and their email address or mobile number if you choose to add one;
- photos of receipts you attach. Your phone shrinks each one and saves it again from the picture alone before sending it, so details a camera records, such as where it was taken, are not in it;
- how you like to be paid, such as a PayPal.me name or bank details, if you add them. These are shown to the people in your groups so they can pay you, and to no one else.
Everyone in a group can see everything in that group. People who are not in it see nothing, unless you share its invite link: anyone with that link can see the group's name, the people in it, who owes whom and its recent bills, and can join it. You can make a new link at any time, which stops the old one working.
People you add
If you add a friend by email address or mobile number, it is stored with the group so the app can match them up when they join. If they later sign in with that email address, the group appears in their app. Their number is only used on your phone, to start a text to them when you choose to send an invite. If you have been added to a group and want your details taken out, email me at the address below.
Reading receipts
When you scan a receipt, the text is read on your phone, by Google's ML Kit on Android and Apple's Vision on iPhone, both of which run inside the app. The picture is not sent to Google, Apple or me for that.
Reports
If you report a comment or a bill, the server keeps a copy of it, which group it was in and which account reported it, so I can look at it. The report is deleted once I have dealt with it, and straight away if you delete your account.
Exchange rates
For bills in another currency, the Clementine server fetches the day's reference rates from the European Central Bank through Frankfurter, a free public service. It asks only for the rates, never anything about you.
Email codes
If you sign in with an email code, the code is sent through Resend, an email delivery service, which receives your email address and the message to deliver it.
What Clementine does not do
There are no adverts, no analytics and no tracking of any kind. Nothing is sold or shared with anyone for any other purpose. Connections to the server go through Cloudflare, which protects it from attacks. Your IP address is used only to stop abuse, such as too many sign-in attempts, and is not stored.
Purchases
Clementine Plus is a one-off purchase through Google Play or the App Store. They handle the payment and tell me only the totals I need for accounts and tax. I never see your card details.
Permissions
Clementine asks for the camera only when you tap to photograph a receipt. Choosing a saved photo uses your phone's own picker, which gives the app only the photo you pick. It does not ask for your location or your contacts.
Age
Clementine is not aimed at children, and is for people aged 13 and over.
Deleting your information
In the app, open You, then Delete account. That deletes your account, your sign-in methods and your recovery key straight away, along with any group only you could see and its receipt photos. Groups you share with others stay for them, because they are their records too, with your name kept on the bills you were part of. Uninstalling the app removes everything on your phone. Nightly backups of the server are kept for 14 days, so deleted data is gone from those within 14 days. If you cannot open the app any more, email me and I will delete it for you.
Your rights
You can ask for a copy of what the server holds about you, and ask for it to be corrected or deleted. Clementine relies on providing the service you asked for, and on my legitimate interest in keeping it safe. You can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, the date at the top changes and the new version replaces this one.
Contact
Email me at clementine@pikeworks.co.uk.