Effective October 23, 2026

Privacy policy

This policy covers Tenfold, Calio, BowlUp, Stagely, Rankify and Págame Ya, personal projects operated by Andres Guerra (Andres Apps). Contact: andresguerrademos@gmail.com.

Account information and Google sign-in

Our shared account service stores your account identifier, email address, sign-in identities and the apps you activate. When you choose Google sign-in, Google provides basic profile information, such as your name and profile picture, email address and Google account identifier. We use this information to authenticate you, maintain your account and populate app profiles. Google sign-in does not grant access to your Gmail messages, Drive files or Google Calendar.

Information used by each app

• Tenfold stores learning progress, interests, quiz results, review timing, streaks, saved paths and preferences. Feedback sharing happens when you choose to share it.
• Calio stores calendar blocks, recurrence and reminder settings, companies, clients and preferences. Local notifications provide reminders, and widgets display schedule information on your device.
• BowlUp stores teams, seasons, player names, scorecards and statistics.
• Stagely stores profiles, squad memberships, festival selections, itineraries, meetups and comments. Information you contribute to shared squads is visible to the relevant participants; festival catalog content can be public.
• Rankify stores profiles, music rankings, drafts, follows and sharing preferences. Public profiles and rankings can be viewed by others; drafts remain private. Anyone with a shared ranking link may access that ranking.
• Págame Ya stores group membership, guest names and nicknames, shared expenses and their saved currency conversions, repayment records, receipt items and quantities, participant selections, shared change history, optional dates and optional bank details. Group members can see this shared information to coordinate expenses and transfers. Personal trip expenses are private to your account, as described below. Only you can edit your own bank details. The app records payments you report; it does not make bank transfers.

Native apps keep local account data and synchronize with Supabase. They use Supabase for account syncing rather than iCloud. Exported backups and data you deliberately share are under your control.

Págame Ya personal trip expenses

Personal expense descriptions, amounts and saved currency conversions are visible only to your account. They contribute to your private spending summary and are not included in group debts, shared change history or group notifications. Other group members cannot see these personal expenses.

Deleting a personal expense removes its description, amount and conversion from our backend. A content-free deletion marker remains with user, group and record identifiers, the creation time, revision and deletion status. Completed request records retain an intent fingerprint, request and account identifiers, result revision and time to prevent duplicate changes; they do not retain the expense content or cost. This metadata may remain while your account and group exist. Deleting your account or the group removes the associated personal records and request records.

Unconfirmed changes are different: the app may retain the exact personal expense description, amount and conversion in protected, account-specific storage on your device until the server confirms the change or definitively rejects it. Signing out does not remove these pending changes, so they can be recovered when you return to that account. Deleting your account removes its local storage; device backups and independently saved copies may remain as described below.

The Págame Ya web app uses secure, HttpOnly cookies to keep you signed in. It saves the exact input for an unconfirmed change in account-specific browser storage so you can retry it safely. Signing out retains that pending input; shared-device users should confirm pending changes and clear site data when finished. Confirmed expenses are fetched from the backend rather than cached for offline use. The browser app does not currently offer receipt or voice analysis.

Págame Ya receipts, voice and shared links

Receipt text recognition uses Apple Vision on your device. Optional voice capture uses Apple speech recognition, which may send audio to Apple’s service depending on device and language support. The app does not retain recorded audio. When you explicitly choose AI analysis, the selected receipt photo and scanned text, or the voice transcript and active group member names and nicknames, are sent through our authenticated Supabase backend to OpenAI to suggest an editable draft. Voice audio is not sent to OpenAI. Manual entry and Apple-only recognition do not send this information to OpenAI. Review every suggestion before saving; AI analysis does not automatically create or share an expense.

For receipt and voice analysis, our backend does not store the uploaded receipt photo or transcript. Request fingerprints and private draft results handle retries and prevent duplicate analysis. Draft results expire after seven days and are removed by cleanup; deleting your shared account removes your AI records. An approved request may be retained in protected, account-specific storage on your device until confirmed or discarded; it is excluded from device backups and removed on sign-out. OpenAI requests disable response storage, but this does not eliminate provider abuse-monitoring retention, generally up to 30 days with possible legal or security exceptions. API data is not used to train OpenAI models by default. Currency quotes use Frankfurter with currency codes; your expense amounts, participants and bank details are not sent for these requests.

An expiring receipt link lets anyone holding it view that receipt and assign quantities for the named guest, without an account. The link does not expose bank details or other group records. Organizers can revoke links, and reviewing a receipt again invalidates previous links. Group change history and balances retain anonymized entries when an account is deleted, so remaining participants’ records remain correct. When you delete your account, groups with another active registered member continue with a new organizer. Groups where only you have an active account are deleted. Device tokens may be stored for group notifications when remote notifications are enabled; individual receipt selections do not generate notifications.

Págame Ya transfer screenshots

When you choose to check a transfer screenshot and agree to analysis, the app sends a compressed image through our authenticated Supabase backend to OpenAI to read the amount, currency and transfer status. The screenshot may contain bank, account or personal details. It is retained as private payment evidence, accessible only to the currently authorized payer and recipient. It is not included in ordinary group lists or shared history, and organizers do not receive access merely because they manage a group. A screenshot match does not establish authenticity or confirm bank settlement. Cash acknowledgments do not require an image and can only be recorded by the receiving account.

Unattached screenshots expire after 24 hours and are removed by scheduled cleanup. Screenshots used for a payment remain with its history, including corrected or annulled payments, until the group or the uploading account is deleted. A financial record can therefore remain without its screenshot after an account deletion. Provider backups and copies saved independently by participants follow the retention described below. OpenAI requests disable response storage; the separate provider retention described above still applies.

Optional Spotify connection

When you connect Spotify to Rankify, Spotify provides your account identity and authorized access to your music library and playlists. Rankify uses access and refresh tokens to read the music you select and create a playlist when you request it. We do not receive your Spotify password. You can revoke permission in your Spotify account settings.

Optional Calio voice creation

When you choose voice creation, Calio uses Apple speech recognition to transcribe your spoken plan. Recognition uses on-device processing when supported and may otherwise use Apple’s service. Calio does not store recorded audio. The transcript, capture time, time zone and relevant company/client names and identifiers are sent through the authenticated Supabase backend to OpenAI to propose a calendar block. Review and edit the proposal before saving; manual calendar entry does not send these details to OpenAI.

The backend does not store the transcript. Draft results may be retained for up to 24 hours to handle retries, while request identifiers and fingerprints prevent duplicate processing. Deleting your shared account removes these records. OpenAI requests disable response storage, but provider security logs and backups follow their own retention practices.

Optional BowlUp AI reading

When you request scoreboard reading, BowlUp sends your selected cropped photo or prepared score-grid images, roster names, scores and reading instructions through its authenticated Supabase backend to OpenAI. Results are editable drafts; check them before saving. Manual score entry does not send photos to OpenAI. Camera and photo selection are used only for images you choose.

Uploaded AI files are scheduled for deletion after use and configured to expire after one hour. Private results may be retained for up to 24 hours to handle retries. Request identifiers, Apple App Attest records and hashed IP buckets help prevent abuse and duplicate requests. Provider security logs and backups follow their own retention practices.

Service providers and email

Supabase provides authentication, databases and synchronization. Vercel hosts the websites. Brevo sends account confirmation and password-reset messages. Brevo currently processes delivery events, opens and link clicks and may rewrite email links. Google, Spotify and Apple process information when you use their services; OpenAI processes optional scoreboard reading, Calio voice interpretation and Págame Ya receipt, voice and transfer-screenshot interpretation. Data may be processed outside your country, including in the United States.

Google user information is used for the sign-in and account features described here, not for advertising or training AI models. It is not sent to OpenAI for scoreboard reading. We do not sell personal data or use these apps for targeted advertising. Service providers may process technical logs needed to operate and protect their services.

Keeping and deleting information

Account and app data are retained while needed to provide the features you use. You can delete supported records in each app and delete your shared account from Account settings after a recent sign-in and explicit confirmation. Shared account deletion affects every app using your shared account. Stagely squads or festivals you own must first be transferred or removed. Backup copies may persist for the provider’s retention period; offline devices, screenshots and user-exported files can retain copies until removed. We cannot remove copies held independently by people you shared with.

Your choices

You can skip optional AI features, revoke provider connections, change device permissions, use available export tools, and request access, correction or deletion by contacting us. We may verify your identity before acting. Depending on where you live, you may have additional privacy rights and may contact your local data protection authority.

Children and information about other people

Only add information about other people when you have permission to do so. Avoid uploading sensitive personal information in names, calendar notes or scoreboard photos. Contact us if you believe a child’s information has been provided without required permission so we can investigate and remove it where appropriate.

Changes and contact

We will update this page when these practices change and identify the effective date. Send privacy questions to andresguerrademos@gmail.com.