Last updated: April 17, 2026

Privacy Policy

This Privacy Policy describes how Catalyst AI Consulting Inc. (“we,” “us,” or “Dibs”) collects, uses, and shares information when you use the Dibs mobile app, the website at getdibs.app, and any related services (collectively, the “Service”).

By using Dibs, you agree to the collection and use of information as described here. If you do not agree, do not use the Service.

1. Information We Collect

From hosts (account holders)

  • Name, phone number, and email address (via Apple, Google, or email sign-in)
  • Payment handles (Venmo, Zelle, CashApp usernames)
  • Profile photo (optional)
  • Receipt images you upload or capture
  • OCR text extracted from your receipts and parsed data (item names, prices, totals)
  • Any corrections you make to parsed receipt data
  • Device information (model, OS version, app version)
  • Push notification tokens

From claimers (no account required)

  • Name you enter when claiming items
  • Phone number (received via the SMS invite link)
  • Which items you claimed and payment status
  • First-party session cookies

Collected automatically

  • IP address, browser type, and device information
  • Crash reports and error logs (via Sentry)
  • Usage analytics such as screen views and feature usage (via PostHog)
  • Performance data

2. How We Use Your Information

We use the information we collect to:

  1. Operate the Service— process receipt scans, manage tabs, deliver SMS invites, and coordinate claims and payments.
  2. Improve receipt parsing— we use receipt images, OCR output, and your corrections as training data to improve our parsing accuracy. This is an ongoing use, not limited to any beta period.
  3. Communicate with you— send push notifications, in-app messages, and emails about the Service and new features.
  4. Display aggregated metrics— show anonymized, aggregated statistics in marketing materials (e.g., “10,000 tabs split”).
  5. Deliver relevant content— we may use your data to show you content, which may include sponsored content in the future. We do not sell your data to third parties for this purpose.
  6. Monitor and fix issues— crash reporting, performance monitoring, and debugging.
  7. Prevent abuse— detect and address fraud, spam, or misuse.

3. Third-Party Services

We use the following third-party services to operate Dibs:

  • Supabase— database, authentication, and file storage (US East)
  • Sentry— crash reporting and error tracking (US)
  • PostHog— product analytics (US)
  • Vercel— web hosting (US)
  • Apple— authentication and push notifications
  • Google— authentication

Each of these services has its own privacy policy governing how it handles data. We do not sell your personal data to any third party.

4. Data Storage and Security

All data is stored in the United States (US East region). Data is encrypted in transit using TLS and encrypted at rest. We use industry-standard security measures to protect your information, but no method of electronic storage is 100% secure.

5. Data Retention

  • Account data— retained while your account is active and for a reasonable period after deletion to fulfill legal obligations.
  • Receipt images (production)— deleted 7 days after the associated tab is closed.
  • OCR telemetry— receipt images and parser output used for product improvement are retained indefinitely.
  • Claimer data— retained as part of tab history for as long as the host’s account exists.

6. Your Rights and Choices

  • Delete your account — hosts can delete their account in Settings → Delete Account. This permanently removes your account and all associated tabs, items, claims, and telemetry data.
  • Request deletion — email hello@getdibs.app for manual deletion requests. We respond within 30 days.
  • Push notifications— you can disable push notifications in your device settings at any time.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights:

  • Right to know— you can request what personal information we have collected about you.
  • Right to delete— you can request that we delete your personal information.
  • Right to opt out of sale— we do not sell personal information.
  • Non-discrimination— we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, email hello@getdibs.app. We will verify your identity and respond within 45 days.

8. Children

Dibs is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected data from someone under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

10. Contact

If you have questions about this Privacy Policy, contact us at hello@getdibs.app.

Catalyst AI Consulting Inc.