BedamuPrivacy policy
Last updated 12 November 2026
- No accounts, no email, no phone number, no ads and no tracking.
- We keep what you put on a bill: names, items, prices, the photo if you keep it, and "paid" ticks.
- Anyone with a bill link can see that bill. Only share it with the people on it.
- Bill photos are read by Anthropic's Claude AI service. Anthropic does not use them to train its models.
- Bills and groups are deleted a year after anyone last used them, or sooner if you delete them.
1. Who we are
Bedamu is run by LankaByte, a Sri Lankan business (lankabyte.com). LankaByte decides how and why the personal data in Bedamu is used, so we are the "controller" under Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA).
Contact us about anything in this policy at support@lankabyte.com.
2. What we collect
| What | Where it comes from | Why |
|---|---|---|
| A random device key | Made by Bedamu the first time you open it. Your phone keeps the key; we keep only a scrambled (hashed) copy. | To know which bills and groups are yours, without an account. |
| Names | The name you type, and names you or your friends add for other people. | To show who had what and who owes whom. |
| Bill details | Items, quantities, prices, charges, the place, the date and the total, read from your photo or typed in. | To work out each person's share. |
| Bill photo | The photo you take or choose. | To read the items. If you choose to keep it, so friends can check the prices. |
| "How to pay" note | Optional text the person who paid adds, such as a bank account. | So friends know how to pay them back. |
| Ticks | Which items each person picked, and who has marked themselves as paid or confirmed money arrived. | To show who owes what and who is settled. |
| Technical data | Your IP address and the time of each request. | To keep Bedamu working and to stop abuse, for example limiting how many bills one network can scan in a day. |
We do not use cookies, analytics, advertising or tracking tools. Your phone stores the device key and your name in the browser's local storage so Bedamu remembers you.
You do not have to give us anything you do not want to. You need a name for the split to make sense, but it can be a nickname. A photo is optional: you can type the bill in instead.
Please do not put sensitive details in names, item names or notes. If your bill shows something you would rather keep private, such as the last digits of a card, type the bill in or choose not to keep the photo.
3. Our legal basis
- Providing the service you asked for. We need the details above to split your bill and show it to the people you share it with.
- Legitimate interests. We use technical data to keep Bedamu secure, prevent abuse and fix problems. You can reasonably expect this, and it is kept short-lived.
4. Reading bills with AI
When you scan a bill, the photo is sent to the Claude API run by Anthropic, PBC (United States), which reads the items and totals and sends them back to us. You check and correct the result before anything is shared. No decision about you is made automatically: the AI only reads the bill.
Under Anthropic's commercial terms, Anthropic acts as our service provider (processor), does not train its models on the photos we send, and deletes them from its systems within 30 days. Anthropic may keep content longer only where it is flagged as breaking its usage policy or where the law requires it.
5. Who can see your data
- People with the link. A bill link shows that bill: its items, prices, the names on it, everyone's ticks, the "how to pay" note and the photo if it was kept. A group link shows the group's names, bills and balances. Links are long and random, so they cannot be guessed, but anyone you forward a link to can open it.
- Our service providers. HostHatch hosts our server in Singapore. Anthropic reads bill photos (section 4). They only process data on our instructions.
- Authorities. We share data only if Sri Lankan law requires it, for example under a court order.
We never sell your data or share it for advertising.
6. Where your data is stored
Bedamu's server is in Singapore, and bill photos you scan are processed by Anthropic in the United States. These transfers outside Sri Lanka are covered by our providers' contractual commitments, including Anthropic's data processing terms, and by the security measures in section 8.
7. How long we keep it
| Data | Kept for |
|---|---|
| Bills and groups (with their photos, names, notes and ticks) | Deleted 12 months after anyone last changed them, or when the person who made them deletes them. |
| Photos scanned but not used for a bill | Deleted within 24 hours. |
| Device keys | Deleted after 24 months without use, or when you choose "Delete my data". |
| Daily usage counts (used for limits) | 7 days. |
| Server logs and backups | Up to 30 days. |
8. How we protect it
All traffic uses HTTPS. Device keys are stored only in hashed form. Bill and group links are random and long enough that they cannot be guessed. Only LankaByte staff who run the service can reach the server. If a data breach puts your rights at risk, we will tell the Data Protection Authority and, where needed, the people affected, as the law requires.
9. Your rights
Under the PDPA you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong;
- delete your data;
- stop using your data, or withdraw consent where we rely on it.
You can do most of this yourself: edit or delete bills you made, and use Settings, "Delete my data". For anything else, email support@lankabyte.com. Because there are no accounts, send us the bill or group link (or your private device link from Settings) so we can find your data. We answer within one month. If a request is complicated we may need up to two more months, and we will tell you within the first month if so. There is no fee.
If you are not happy with how we handled your data, you can complain to the Data Protection Authority of Sri Lanka (dpa.gov.lk).
10. Children
Bedamu is meant for people aged 16 and over. If you are younger, please use it with a parent or guardian. If you think a child's data is in Bedamu without permission, contact us and we will delete it.
11. Changes to this policy
If we change how we use data, we will update this page and the date at the top. Important changes will also be shown in the app.