Privacy Policy

What we collect

Your account email and display name; the expenses, groups, and settlements you record (descriptions, amounts, dates, and who shares them); a device token so your phone can receive notifications; basic usage events (like “expense added”) tied to your account, which we use to understand and improve the product; error reports when something in the app fails, which say which operation failed and a short technical reason and never carry your amounts, names, or the text of your expenses; only if you choose to save them, the phone number or email address of someone you invite; any receipt photo you attach to an expense and any profile photo you upload; and, if you use a guest link, an email address you save there to get reminders. That’s the whole list.

If you end up with two accounts

You can start out reading a group in the browser, confirm your email there, and later install the app and sign in with Apple or Google. If you choose to hide your email, that gives us no address in common and leaves you holding two accounts with half a ledger each. You can join them into one from the app. We ask for the other address and send a code to it: answering that code is the only proof accepted, so nobody can pull in an account by typing an address that isn’t theirs.

Joining them keeps the address the second account had confirmed, as another way to sign in to the one you keep. That is the point of doing it, and it is why signing in later with that same address brings you back to the same ledger instead of starting an empty one. The second account itself is deleted. We keep no other trace of it, and deleting your account still erases every address on it.

Contact details for people you invite

When you add someone to a group you can pick them from your phone’s contacts. On iPhone, the system shows the picker and hands back only the person you tap, so that one contact is all Splitee ever receives. On Android there is no such picker, so the app asks for permission and reads your contacts on the phone itself to show you a list. That list stays on the device, and only the person you pick is sent to us. Either way, if they have a phone number or email, we save it against them so you can re-send their invite without typing it out again.

Those details are visible only to you. Other members of the group don’t see them. They are used for one thing: filling in the invite you choose to send, from your own WhatsApp, Messages, or mail app.

They are deleted automatically when that person claims their invite and creates an account, when you delete your Splitee account, or after 12 months if the invite is never claimed. You can also remove them at any time under You → Privacy & data → Saved contact details.

What we never do

Splitee is a ledger, not a wallet. It never holds or moves money, and never asks for card or bank details. We don’t sell your data, don’t show ads, don’t use your data for advertising or tracking, and don’t train AI models on it. Splitee isn’t for children under 13, and we don’t knowingly collect their data.

Location & purchase insights (optional)

We ask for this on its own screen when you first set up the app, with the switch on. Turn it off there, or any time afterwards in the app (You → Privacy & data), and nothing below is collected. While “Local deals & insights” is on, adding an expense also records an approximate area about 5 km wide, a spending category (like “restaurant” or “groceries”), the currency, and a rough amount range. The category is worked out on your phone from what you typed. The text itself is never sent, and neither is your precise location: the app asks iOS for reduced-accuracy location, only while you’re using it, never in the background.

We use these coarse facts to build local deal and coupon recommendations. They are never sold or shared with data brokers, never used for advertising or cross-app tracking, and are deleted when you delete your account. Turn the toggle off any time to stop collection immediately.

Guests and group links

People who open a group link without an account are identified by the name the organizer typed, plus any contact detail that organizer chose to save (see above). A guest link shows that group’s ledger and nothing else. Links expire on their own after 7 days, and the organizer can turn a link off before then, from the invite screen in the app, and it stops working immediately.

Guest pages set only functional cookies: one that remembers who you said you are on that link, and, if you create an account, ones that keep you signed in. No analytics or advertising cookies, here or anywhere else.

Where it lives

Your data is processed by Supabase, our database provider, on Amazon Web Services servers currently located in Japan, and is transmitted using HTTPS in normal operation. We use technical and organizational safeguards designed to protect data, but no internet service or transmission is completely secure. Access controls are designed to limit group data to authorized participants; a person who has a valid group link may see the data available through that link. Notifications (which can include names and expense descriptions) are delivered through your platform’s push service (Apple’s on iPhone, Google’s on Android), like any other notification on your phone.

Splitee may be offered to people in the United States, Canada, and countries in Latin America and South America. By using the service, you understand that your personal data may be processed in Japan and in other countries where Splitee or its service providers operate. Those countries may have data-protection laws that differ from the laws where you live. We handle personal data as described in this policy and use appropriate safeguards for cross-border transfers where required by applicable law.

What deleting your account does

Deleting your account erases your sign-in, every email address on it (including one kept from joining two accounts), your devices, and every contact detail you saved. Expenses already shared with groups stay with those groups under your current name, so nobody else’s balances change: a shared ledger belongs to everyone on it. Usage events are kept anonymized, no longer tied to anyone, and the edit history of shared expenses stays with the group that shares them.

Your choices

Email privacy@splitee.io to request access to, correction of, or deletion of personal data, subject to applicable law and our need to retain certain information. You can also export available ledger data yourself from the app, under You → Privacy & data.

If you don’t use Splitee and believe someone has saved your phone number or email here, write to the same address and we will delete it. You don’t need an account to ask.

Changes

If this policy changes, the date above changes with it, and meaningful changes will be called out in the app. The current version always lives at this address, next to our Terms of Service.