Privacy
One Artifex exists to divide a restaurant bill. This page says plainly what it collects, where each piece goes, and how long it stays there.
This website
The page you are reading ships no JavaScript, sets no cookies, and runs no analytics. Visiting oneartifex.com puts nothing on your device and tells us nothing about you beyond the ordinary server logs any website receives.
Everything below describes the app at app.oneartifex.com, which is where the actual bill splitting happens.
The receipt photo
- When you scan, your phone shrinks the photo and sends it to our server, which forwards it to Google Gemini to read the items and prices. We have no reader of our own.
- Google processes that image under its own terms. On the free tier Google may use submitted content to improve its models. Do not scan a receipt you would not want read by a third party.
- Our server keeps no copy of the image. The only record a scan leaves is a row of measurements: how long it took, how many items were found, whether the totals reconciled, and token counts. No item names, no prices, no image.
- The photo is stored on your own device while a scan is in progress, as part of the saved draft, so closing the app mid-split does not lose your work. Saving the split clears that draft. An abandoned scan leaves the photo on your device until you start another one.
- Enter manually splits a bill with no photo and no scan, if you would rather not send one at all.
Names and amounts
- Names are whatever you type. We never ask for a real name, an email, a phone number or a contact list, and the app cannot read your contacts.
- Your split history is stored on your device. It is only copied to our server if you sign in, which is optional and off by default.
- We never handle money. Settle up shows who owes whom. No payment ever passes through the app.
Links you create
- A share link or a claim link stores that bill on our server: the merchant name, the items, the amounts and the names on it. That is what lets someone else open it.
- Anyone holding the link can read it. The address is long and random so it cannot be guessed, but it is not password-protected. Send it only to the people on the bill.
- Claim links stop accepting claims after 24 hours. Share links expire after 180 days. Both are excluded from search engines.
- If you never create a link, nothing about your bill leaves your device except the scan itself.
What we do not do
- No advertising, no trackers, no analytics that follow you between apps or sites.
- Your data is not sold, and not shared with anyone beyond what is described above.
- No account is required to use any part of the app.
Removing your data
- Clearing history in the app, or clearing the site's data in your browser, removes everything held on your device.
- Links expire on the schedule above. To have one removed sooner, write to the address below and include the link.
Getting in touch
Questions about any of this, or a request to delete something, go to hello@oneartifex.com.
This policy covers One Artifex only. Google Gemini processes receipt images
under Google's own privacy terms, which are not ours to set.
← Back to One Artifex