Antemate is a record of money between people who know each other, which makes it one of the more personal things on your phone. This page says what we hold, who else can see it, and how to make it go away. It is written to be read, not to be defensible.
Antemate is a product of Yanvara Pty Ltd, Melbourne, Australia. Any question about anything below: [email protected].
Your name and the email address or phone number you signed up with. The groups you are in and the people in them. Every expense you or they record: what it was, what it cost, who paid, how it split, and anything written in its comments. The devices you are signed in on, with the date each was last used. If you have bought Pro, a receipt from the store confirming it — never a card number, which we are never shown.
Your bank. Your card. Your contacts — finding a friend compares scrambled codes and stores none of them, so an address book never leaves your phone. Your location. Your other apps. We do not buy data about you and we have nothing to sell about you.
Everyone in a group sees its expenses, its balances, who paid what, and every edit anybody made. That is the product working. It also means an expense you add is not private to you, and the person you add by email will be able to read the whole group's history once they join.
The app reports crashes and some usage to three services, so we can find out that it broke before you have to tell us, and see which parts of it people actually use. It is switched on by default and you can switch it off in Settings, on the phone, whenever you like.
Sentry receives a report when the app crashes or hits an error: what went wrong, where in the code, which version and what kind of device. PostHog and Firebase Analytics receive events like "opened a group" or "added an expense", with a random identifier for your install so two events can be known to come from the same phone.
What none of them receive is the ledger. Not an amount, not a description, not a group or a person's name, not an email address or a phone number. We do not sell any of it, we do not use it for advertising, and there is no advertising SDK in the app. If that ever changes it will be on this page before it is in a release.
Turning it off in Settings stops the app sending anything to all three. Crash reports are the one thing worth leaving on if you are undecided — a crash we never hear about is a crash that stays.
Scanning a receipt or translating a menu sends that one image to OpenAI, which reads it and sends back text. It is the only time anything you capture goes anywhere, it only happens when you tap the button, and we do not keep the image afterwards — you confirm the reading and the photograph is done with. Nothing else in the app sends anything to a model: the ledger itself never leaves our servers.
Amazon Web Services hosts the servers and sends our email, in Sydney. OpenAI reads a photograph when you ask it to. Apple and Google take the payment for Pro and tell us only that it happened. Sentry takes the crash reports, and PostHog and Firebase Analytics take the usage events described above — none of them ever sees the ledger. That is the whole list. If you link Yanvara, the two apps exchange exactly what you switched on and nothing else — you can see it and revoke it in the app.
We keep what you have recorded for as long as your account exists, because a ledger with a gap in it is not a ledger. When you delete your account it goes, apart from the part described above. We will change this page when the product changes, and the change will be the product catching up with the page rather than the other way round.