Privacy Policy

dink is operated by the provider of the dink app and letsdink.co. For any privacy question, or to exercise any right described in this policy, contact us at hello@letsdink.co. For the purposes of the UK and EU GDPR, we are the data controller for the information described here.

When you join the waitlist on the Site

The email address you provide. If you take part in the referral programme, a referral code associated with your email and a count of successful referrals. If you submit a feature request, the text you submit.

When you create an account in the App

Your email address and a password, handled by our authentication provider. We never see or store your password in readable form. We also store the first name you give us, an internal account identifier, and optionally the relationship status and “money personality” you select during setup.

What you enter in the App

dink has no bank connection. Every financial figure in the App is one you typed. Depending on what you use, that can include:

• Accounts you create by hand: a nickname, whether it is debit or credit, a balance and credit limit you enter, and optionally an institution name and the last four digits you choose to type.
• Transactions: description, amount, category, date, who paid, and whether it is split, settled, or private.
• Budgets and savings goals: names, limits, targets, amounts saved, and contributions.
• Shared items: a calendar of events, paydays, rent and bill dates, a grocery list, and to-dos agreed with your partner.
• Activity in the App: your daily streak, challenges you complete, and the outcome of duels with your partner.

We do not receive, request, or store bank login details, card numbers, or account numbers. The “last four digits” field is a label you type so you can tell your own cards apart; it is not validated against anything and gives no access to any account.

Technical information

If you enable notifications, we store a push notification token so we can deliver messages to your device. On the Site, we automatically collect limited technical and usage information such as approximate location, device and browser type, pages viewed, and how you interact with the page, through the analytics tools described below.

The App itself contains no advertising SDKs and no third-party analytics or tracking software.

To be unambiguous, the App does not collect or access any of the following:

• Bank credentials, card numbers, or account numbers, and no connection to any financial institution.
• Your device location.
• Your contacts, photo library, camera, or microphone.
• Your Face ID, Touch ID, or any other biometric data. See “Face ID and app lock” below.
• Any data used for advertising, ad targeting, or cross-app tracking. We do not track you across other companies’ apps or websites.

• To provide the App: storing what you enter, keeping it in sync between you and your partner, and showing you your budgets, goals and balances.
• To operate the social features you opt into, as described below.
• To send notifications you have enabled, such as a daily reminder or a nudge from your partner.
• To notify waitlist subscribers about launch, send product updates, and run the referral programme.
• To keep the Services secure, diagnose problems, and prevent abuse.
• To respond when you contact us.

If you are in the UK or EU, our legal bases are: performance of a contract for operating your account and the App; consent for waitlist and marketing email, push notifications, and analytics cookies, each of which you can withdraw; and legitimate interests for security, troubleshooting, and improving the Services.

dink is built for two people, so this deserves its own section. When you pair with a partner, you and they share a joint space. Your partner can see anything in that shared space, which includes transactions you mark as shared or split, IOUs and duels between you, shared budgets and shared goals, the shared calendar, grocery list and to-dos, and joint figures such as who owes whom.

Items you keep personal rather than shared — personal goals and personal budgets — are not shown to your partner, and our servers are configured not to send them to your partner’s device. The bank accounts you create are visible only to you.

Pairing is by invitation: nobody can join your space without a code you give them. Either of you can leave the couple at any time from Settings, after which your personal data leaves with you.

If you add another couple to your circle, and they accept, the two couples can see each other’s participation — a display name, how long you have used dink, your streak, and counts of daily challenges, completed goals, duels won and splits settled — plus a feed of activity describing the kind of thing you did, such as “Completed a goal”.

No money crosses that line, ever. The records shared with other couples contain no balances, no amounts, no transactions, no budgets and no goal values. This is enforced in the structure of our database, not only in the app: the shared records have no fields capable of holding a monetary amount. A couple saving $50 and a couple saving $5,000 appear identical.

Circles are mutual and opt-in. You can remove or block another couple at any time from their profile, which ends the sharing in both directions.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share information only with:

• Supabase — our hosting, database and authentication provider, which stores your account and App data on our behalf.
• Expo — which delivers push notifications to your device, if you enable them.
• Apple and Google — for app distribution and notification delivery, under their own privacy policies.
• Vercel — which hosts the Site.
• Google Analytics and Microsoft Clarity — on the Site only, as described below.

We may also disclose information if we are legally required to, or where necessary to protect our rights or someone’s safety. If dink is ever involved in a merger, acquisition or sale of assets, your information may transfer as part of that, and we will tell you before it becomes subject to a different policy.

We use Google Analytics to measure traffic and understand which pages visitors view, and Microsoft Clarity to capture anonymised session replays and heatmaps showing how visitors navigate. These services use cookies and similar technologies and process data on our behalf under Google’s and Microsoft’s own privacy policies. We configure them to avoid collecting directly identifying information wherever possible.

You can disable or delete cookies through your browser settings at any time. See our Cookie Policy for details. The App uses no cookies and no analytics.

If you turn notifications on, we store a push token that identifies your device so we can deliver reminders and messages from your partner. You can turn notifications off at any time in the App’s settings or in your device settings; turning them off in the App stops us sending them.

You can optionally lock dink behind Face ID, Touch ID or your device passcode. This check happens entirely on your device and is performed by your operating system. Your biometric data never leaves your device, and we never receive, see, or store it — we are told only whether the check succeeded.

The App keeps a copy of your data on your phone so it works quickly and without a connection. Some preferences never leave your device at all, including the colour you assign to each couple in your circle and whether you have enabled the app lock. Deleting the App removes this local copy; to remove the data held on our servers, delete your account as described below.

Your data is stored with Supabase over encrypted connections, and access is restricted at the database level so that each account can reach only its own data and the data its couple shares. Passwords are stored only as salted hashes by our authentication provider. We keep the number of people and systems able to reach production data to a minimum.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any relevant regulator as required by law.

We keep your account and App data for as long as your account exists. We keep waitlist email addresses until you ask us to remove them or unsubscribe. Analytics data is retained according to our providers’ default retention periods. When you delete your account we remove your data as described below, except where we must keep something to comply with a legal obligation.

You can delete your account from Settings → Delete Account inside the App. This permanently removes your profile, your accounts, transactions, goals and budgets, and your authentication record. It cannot be undone.

If you have a partner, the shared space and the shared data in it remain with them, because it is theirs as much as yours; your published display name is cleared from their circle. If you are the only member, the space and everything in it is deleted with you. You can also email hello@letsdink.co and we will do it for you.

Wherever you live, you can email hello@letsdink.co to access, correct, export or delete the personal information we hold about you, and we will respond within a reasonable time and in any case within the period the law requires.

UK and EU (GDPR). You have the right to access, rectify, erase, restrict or object to our processing, the right to data portability, and the right to withdraw consent at any time without affecting processing already carried out. You also have the right to complain to your local supervisory authority.

California (CCPA/CPRA). You have the right to know what personal information we collect and how we use and disclose it, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CPRA, and we do not use sensitive personal information for purposes beyond providing the Services.

You can unsubscribe from our emails using the link in any message we send.

We and our providers may store and process your information in countries other than the one you live in, including the United States. Where information is transferred out of the UK or the European Economic Area, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, email us and we will delete it.

dink is a budgeting and organisation tool. It is not a bank, is not a money transmitter, does not hold or move funds, and does not provide financial, investment, tax or legal advice. Marking something as “settled” in the App records an agreement between you and your partner; it does not move any money.

We may update this policy as dink develops. When we do, we will revise the “last updated” date above. If the changes are significant, we will tell you by email or in the App before they take effect.

Questions about this policy or your data? Email hello@letsdink.co and we will reply within a day.