Privacy policy

Mutally is run by Rustam Samandarov, Tashkent, Nurafshon 38, 5, Uzbekistan. For any question about your data, write to support@rsteam.uz.

• Your account: your name, email address, language and home currency. If you sign in with a code and give no name, Mutally uses the part of your email address before the @ as your name. If you set a password, only a one-way hash of it. If you sign in with Google or Apple, also the profile picture it gives and the sign-in tokens it issues for your account.
• Sign-in codes and links: the one-time code, email-confirmation link or password-reset link Mutally sends you, stored with your email address until it expires.
• Sign-in sessions: each time you sign in on mutally.rsteam.uz, a session with the IP address and browser it came from.
• The connection to your assistant: when you connect Mutally in ChatGPT or Claude, the app registration the assistant creates (its name, web addresses and contact details), the access you approved and the access tokens it uses.
• Your settings: the language and home currency you choose. When you sign up, Mutally reads the language list your browser sends and picks a first home currency and the language of its emails from it. It keeps the currency, not the list.
• Your contacts: the name you use for each person you keep debts with, which may be a person who does not use Mutally, the invite links you make for them, and which of them have connected their account to yours.
• Your entries: for each loan, repayment, gift or other amount, the person, which way the money went, the amount, currency, date, due date and note, its state (private, pending, confirmed or disputed), the other person's answer and note, and its project, or its group and round. For money you hold for someone, also the name of the person you collected it from or paid it to, and any fee. A shared bill also keeps its description and total. Entries brought in from a file are marked as imported.
• Recurring debts, installment plans and projects you save, and the groups you create or join, with their members' names, roles, order, rounds, shares, pledges and payments.
• Corrections: every change or undo of an entry, with the value it replaced, including the old text of a note.
• Times: when each account, session, entry, answer, correction, deletion, connection and group member was created or changed.
• Server logs: the web server in front of Mutally logs each request: the IP address, the time, the address requested, the response, the page you came from and the browser or app that sent it. The address requested can contain an invite link, a group link or an export link. Mutally's own program also writes error messages and the counts of its daily jobs to its log. Mutally keeps no record of the questions you ask or the tools your assistant calls beyond these request lines.

All of it is kept in Mutally's database on the operator's server in Germany (Contabo). Mutally keeps no scheduled backups of your data.

Cross-border transfer: Mutally's operator is in Uzbekistan and its server is in Germany, so the data you send Mutally leaves Uzbekistan and is stored and processed in Germany.

• To keep the shared record: to save your entries, ask the other person to approve them, show balances and totals in your home currency, tell you what is due, run your recurring debts and group rounds, and build the exports you ask for.
• To sign you in and keep you signed in, and to send the sign-in code, email-confirmation and password-reset emails. Mutally sends no other email, and no message or notification to the people you record.
• To let the assistant you connected work with your Mutally data on your behalf.
• To show the people you are connected to, and the members of your groups, what they are meant to see, as described below.
• To keep Mutally secure and working: the IP address and browser of your sessions and the server logs are used only to protect your account and find faults.

Mutally does not sell your data, show advertising, build profiles of you, track you across other sites, or use your data to train AI models. It uses no analytics.

When you record a debt with someone who has no Mutally account, Mutally keeps only the name you give them and the entries you record about them, including any note you write. It has no email address, phone number or other detail of theirs, and it never contacts them.

If someone opens your invite link and signs in, they see every entry you recorded about the person it was made for, except gifts, with its amount, dates and note, and can approve it or dispute it with a note. The link works for whoever opens it first, so share it only with that person. Until someone opens the link, nobody but you sees those entries.

If you record money you hold for one person that you collected from or paid to another, the name you gave the other person is shown to the first person once you are connected.

In a group, a member who has not joined yet is kept under the name the group's admin gave them, with their shares and payments, until they join and take that place. The group's members see that name and those shares and payments.

• Contabo runs the server in Germany that holds everything Mutally stores.
• Resend sends Mutally's emails (sign-in codes, email confirmation and password reset), so it receives your email address and the message.
• Google or Apple signs you in only when the sign-in page offers it and you choose it.
• ChatGPT or Claude, whichever assistant you use, receives what Mutally's tools return to it, described above, under its own privacy terms.
• Other Mutally users see only the parts of your data described below, where this page says who can see your data.

No other service receives your data. Mutally takes no payments, shows no advertising and uses no analytics.

Your chat messages are not stored. Mutally receives only what your assistant sends when it uses a Mutally tool.

What the assistant sends: names of people, groups and projects, amounts, currencies, dates, due dates and notes, a bill's description and total, group settings and terms, your answers to requests and the note of a dispute, your choice of language or currency, and the rows it read from a file you uploaded. It also passes the language of your chat, which Mutally uses for that reply only and does not store.

A file you upload to bring in your history is read by your assistant in the chat. Mutally receives only the rows it sends. A preview saves nothing; the rows are saved only in a second step.

What Mutally's answers put into your chat: the names you gave your contacts, your entries with their amounts, dates, notes and states, the note another person wrote when they disputed your entry, balances and totals, group members' names, shares and payment status, the name a connected person gave a third person when they hold money for them, and the invite links, group links and export download links you ask for. Each link works for whoever has it.

Your conversation, including Mutally's answers in it, stays with ChatGPT or Claude under their own privacy terms.

You sign in with a one-time code sent to your email address, with a password, or with Google or Apple when the sign-in page offers them. A sign-in code expires after 5 minutes; an email-confirmation or password-reset link expires after 1 hour. These sign-in, confirmation and reset emails are the only emails Mutally sends.

When you sign in with Google or Apple, it gives Mutally your name, your email address and, if it has one, your profile picture. If the provider reports the email address as verified and a Mutally account already uses it, that sign-in joins that account.

mutally.rsteam.uz uses cookies only to sign you in and keep you signed in. Its pages load no analytics or advertising scripts, and its fonts are served from mutally.rsteam.uz itself.

Mutally's pages keep no language choice in your browser. They follow your browser's language list, or the language you saved in Mutally once you are signed in.

Your contacts, your private entries, your projects and the gifts in them are yours alone. Each person's name for the other stays their own. Your email address is never shown to other people. Your account name is shown on an invite link you make and, by default, as your name in the contact list of the person who joins; in a group you create it is your member name.

Once you and another person are connected, you both see the entries and recurring debts between the two of you, each with its state and note, and the answer and note of whoever disputed one. When you connect, entries either of you had kept private about the other become visible to the other as waiting for approval. Neither of you sees the other's other contacts or entries. If you correct an entry the other person already answered, they are asked to answer again.

Members of a group see its members under the names the admin gave them, its rounds and roles, each member's share and whether it is paid, and the shares and payments recorded in it, including ones the two people have not confirmed. Joining a group connects you with the other members who have joined, without an invite link, so what you record with each of them is shared as described above.

An invite link works once and for 7 days. Before the person signs in it shows only the name on your account. It stops working when you make a new one or when the person says it is not them. A group link never expires: anyone signed in who has it sees the group's name and terms and the names of members who have not joined, and can take any of those places. It works until an admin makes a new one or the group is closed, so share it only with the members.

When a connection ends, each side keeps its own contact and its own entries, and each stops seeing the other's. Entries still waiting for approval go back to private. Entries already approved or disputed keep their state. If you report the wrong person instead, every approval and dispute given through the connection is discarded and those entries go back to private. Mutally keeps a record that the connection existed, with its dates and how it ended, and both sides see those dates in their history.

• Your entries and their corrections: until you delete them or delete your account.
• An entry you delete: kept for 30 days so you can restore it, then erased with its corrections by a daily clean-up.
• Your contacts, projects, recurring debts and bill records: until you delete your account. Archiving a contact only hides it, and merging two contacts deletes the one folded in.
• Groups, with their members, rounds, shares and payments: kept. Mutally has no way to delete a group, and closing one keeps its record.
• The record of a connection, with its dates and how it ended: kept after the connection ends and after either account is deleted, without a link to a deleted account.
• Your account and the connection to your assistant: until you delete your account.
• A session signs you in for 7 days and is extended whenever you use it. An assistant's access token works for 1 hour and its refresh token for 30 days.
• Expired sessions, tokens, codes and links can no longer be used. Mutally has no scheduled job that clears them, so they can stay in the database until you delete your account.
• An invite link: 7 days. A group link: until an admin makes a new one or the group is closed. Export download links: 24 hours.
• Web server logs: about 15 weeks; they are rotated weekly and the oldest are erased.

• See your contacts, entries, balances, requests, projects and groups in your chat or on mutally.rsteam.uz, and the entries you deleted in the last 30 days.
• Correct an entry's amount, currency, date, due date or note, undo a correction, and rename, merge or archive a contact.
• Approve or dispute, with a note, an entry another person recorded about you.
• Delete an entry you recorded and restore it within 30 days.
• End a connection, report it as the wrong person, or leave a group.
• Choose Mutally's language and your home currency.
• Disconnect Mutally in your assistant's settings at any time. Its access then ends within 30 days as its tokens expire; to end it at once, email support@rsteam.uz.

Ask your assistant for an export, or use a person's page on mutally.rsteam.uz, and Mutally gives you an Excel file and a CSV of your entries, for one person or everyone, as a download link that works for 24 hours for whoever has it. Each file is built from your data at the moment the link is opened and includes the entries other people recorded between you and them, with their notes and states.

Only the person who recorded an entry can delete it or restore it. A deleted entry disappears at once for you and for the other person, who is not told. It can be restored for 30 days; after that it is erased for good, with its corrections. You cannot delete an entry another person recorded about you; you can dispute it or end the connection.

Contacts, projects, recurring debts and groups cannot be deleted one by one. They go with your account, except groups, which stay as described below.

You can delete your account from the chat or on the Account page of mutally.rsteam.uz. Mutally shows what goes and what stays and deletes only after you confirm. It erases your sign-in, sessions, the access you approved for your assistant and its tokens, contacts, projects, recurring debts, bill records and every entry you recorded, including deleted ones still in their 30 days, at once, and this cannot be undone.

People you were connected to keep their own contact for you and the entries they recorded, and the connection is ended; Mutally keeps its record without a link to your account. In a group, your place stays under the name you had there, with its shares and rounds and the entries other members hold for it, with no account behind it. Server logs stay for their 15 weeks. Nothing is copied to anyone.

This policy is governed by the law of the Republic of Uzbekistan.