Privacy
Last updated 21 September 2026
Mull keeps track of who paid and who owes. To do that it needs a little about you and the money you split. It does not need anything else, so it does not ask for anything else.
The short version
- We collect your email, your name, your UPI ID if you add one, and the groups and expenses you put in.
- People in a group with you see your name, your UPI ID and your shares. Your email is only seen by friends you connect with. Your phone number is never shown to anyone.
- Mull never touches your money. Payments happen in your own UPI app, and we never see your bank details.
- Everything is stored in India, in Mumbai.
- No ads, no tracking, no selling your data. Ever.
- You can delete your account from inside the app at any time.
Who we are
Mull is published on the App Store by Dilip Khanna, in India, who is responsible for your data under this policy. You can reach us about anything here at mullapp.official@gmail.com.
What we collect
Your account
- Email address, to sign you in with a one-time code and so friends can find you.
- Name, shown next to your share of a bill.
- UPI ID, if you add it, so people can pay you back in one tap. It is optional.
What you put in
- Groups, expenses, amounts, notes, repeating expenses, and payments you record or confirm.
- People you add to a group who are not on Mull yet: the name you type for them, and their email or phone if you add one so they can join later. Please only add details of people who are happy for you to.
- Notifications Mull sends between people in a group, such as reminders.
From your phone
- A notification token, if you allow notifications, so we can tell you when someone pays you or adds an expense. It identifies the app on your phone, not you.
- Error reports: when the app hits an error, a note of what went wrong in the code, the app version and your iOS version. These are not linked to your account, and email addresses and account ids are removed from them before they are stored.
What we do not collect
Your contacts, your location, your photos, your bank or card details, your UPI PIN, or anything about what you do in other apps. Mull has no advertising and no analytics that follow you around.
Who can see what
| Your | Who can see it |
|---|---|
| Name | People you share a group with, and your friends on Mull |
| UPI ID | People you share a group with, and friends who have accepted your request |
| People you have sent a friend request to or received one from | |
| Phone number | Nobody |
| Expenses and payments in a group | Everyone in that group |
| Your notifications | Only you |
These rules are enforced by the database itself, not only by the app. We (the people who run Mull) can access the database to keep it running and to fix problems. We do not look at your data otherwise, and access is limited and protected by two-factor authentication.
Reporting and blocking
You can report or block anyone you are connected to, from Friends. A report, with the reason and any note you add, goes only to the people who run Mull; the person you report is not told. Blocking stops their friend requests, reminders and notifications reaching you, and they are not told either.
Why we use it
Only to run Mull: signing you in, keeping your groups in sync between your phones and the people you split with, telling you when something needs your attention, and fixing bugs. We do not use your data for advertising, and we do not sell it or share it with anyone for their own purposes.
Where your data lives
Your account, your ledgers, your notifications and error reports are all stored in one database in Mumbai, India. A few companies process data on our behalf, only to provide Mull:
| Service | What for | Where |
|---|---|---|
| Supabase | The database, sign-in and error reports | Mumbai, India |
| Resend | Emailing you your sign-in code. It sees only your email address and the code. | United States |
| Apple | Delivering notifications to your iPhone | Apple's servers |
How long we keep it
- Your account and ledgers, for as long as you have an account.
- Notifications you have read, for 90 days. Any notification, at most a year.
- Error reports, for 90 days after the error last happened.
- Reports about other users, for as long as needed to deal with them, and at most a year.
- Backup copies of the database, for up to 30 days.
Deleting your account
In Mull, open your profile and tap Delete account. This removes your email, phone number and UPI ID, your friends list, your notifications and your sign-in, straight away.
One thing stays: expenses in groups you shared with other people. They are part of those people's records too, so your share stays on their ledgers under the name you used, with no way left to contact or pay you. If you want your name removed from a shared group as well, email us and we will replace it.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw your consent, and nominate someone to exercise these rights for you. Most of this you can do in the app. For anything else, or to raise a grievance, email mullapp.official@gmail.com. We reply within 7 days, and resolve grievances within 30.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Keeping it safe
Everything travels over encrypted connections and is stored encrypted. The database checks who is allowed to see each row on every request, so one person's data cannot be read by another, even through a modified app. No system is perfectly secure, and if we ever learn of a breach that affects you, we will tell you and the Data Protection Board as the law requires.
Children
Mull is meant for adults. If you are under 18, use it only with your parent's or guardian's permission.
Changes
If we change this policy in a way that matters, we will say so in the app before it takes effect. The date at the top is when it last changed.