Privacy Policy

1. Introduction

Welcome to Splitsies ("we," "us," or "our"). Splitsies is a mobile application (Bundle ID: uk.splitsies.app) that helps friends and groups split expenses, track shared costs, and settle debts easily.

Splitsies is operated by [Your Legal Entity Name].

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Splitsies app on iOS, Android, or the web. By using Splitsies, you agree to the practices described in this policy.

We are committed to transparency about our data practices. Splitsies does not use advertising SDKs, analytics or tracking services, and we do not sell your personal data to third parties.

2. Information We Collect

Account Information

When you create a Splitsies account, we collect:

• Email address -- used as your login identifier
• First name and last name -- used for your profile display
• Username -- automatically generated, can be customized
• Password -- if you sign up with email/password (securely hashed; we never store plain-text passwords)

If you sign in with Google Sign-In or Apple Sign-In, we receive your email address and basic profile information (name) from the respective provider. When using Apple Sign-In, your email may be an Apple relay address if you choose to hide your email.

Profile Information

• Avatar image -- optionally uploaded profile photo, stored in our cloud storage
• Avatar color -- a color preference for your profile display

Financial and Expense Data

To provide expense splitting and settlement tracking, we collect and store:

• Expense details -- names, descriptions, amounts, currencies, categories, dates, and split method (equal, percentage, exact, or item-based)
• Split information -- how each expense is divided among participants, including amounts owed by each person
• Item-level details -- individual item names, amounts, quantities, and participant assignments (when using item-based splitting)
• Settlement records -- payment amounts, currency, and notes between users

All monetary values are stored as integer cents (not floating-point numbers) to ensure precision in financial calculations.

Social and Group Data

• Friend connections -- your friendships with other Splitsies users
• Group memberships -- groups you create or belong to, including group names and emoji icons
• Placeholder friend entries -- when tracking expenses with people who are not yet Splitsies users, you may store a name and optionally an email address or phone number for invite purposes. This data is only visible to you, the creator.

Receipt Data

• Receipt images -- photos of receipts you upload, stored in our cloud storage
• OCR-extracted text -- text and item data extracted from receipt images using AI-powered optical character recognition (a premium feature)

Subscription Information

• Subscription status -- whether you have a free or premium account
• Plan type -- monthly or yearly subscription plan
• Billing period -- current subscription period and trial information

We do not process or store your payment card details or billing information directly. All payment processing is handled by Apple (App Store) or Google (Play Store) through their respective in-app purchase systems.

Device and Technical Data

• Device locale and currency preference -- detected via your device settings to display amounts in your local currency
• Local session data -- authentication tokens stored locally on your device for session management

We do not collect device identifiers, IP addresses for tracking, location data, contacts, or any other device information beyond locale and currency preferences.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account management -- to create, authenticate, and maintain your account
• Core functionality -- to enable expense creation, splitting, tracking, and settlement between friends and group members
• Social features -- to manage friend connections, group memberships, and expense sharing
• Receipt processing -- to extract item and amount data from receipt images using OCR (premium feature)
• Currency conversion -- to display expense amounts in your preferred currency using publicly available exchange rates
• Subscription management -- to manage your premium subscription status and feature access
• Invite system -- to generate invite links for placeholder friends to claim their accounts and associated expense history
• Service improvement -- to maintain and improve the reliability and performance of the app

We do not use your data for advertising, profiling, behavioral targeting, or any purpose unrelated to providing the Splitsies service.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers, solely to operate the Splitsies app:

Sharing With Other Users

Certain information is visible to other Splitsies users you interact with:

• Your profile information (name, username, avatar) is visible to other authenticated users when they search for friends or view shared groups and expenses.
• Your expense and settlement data is visible to other participants in the same expense or group.
• Placeholder friend data (name, email, phone) is only visible to the user who created the placeholder entry.

5. Data Storage and Security

Data Storage

Your data is stored in a Supabase-hosted PostgreSQL database with the following security measures:

• Row-Level Security (RLS) is enabled on all database tables. This means users can only access their own data and data explicitly shared with them through friendships, group memberships, or expense participation.
• Authentication tokens are stored locally on your device using secure local storage and are never transmitted to third parties.
• Passwords are securely hashed by Supabase's authentication system and are never stored in plain text.
• File storage (avatars and receipt images) uses Supabase Storage with access policies that restrict file operations to authenticated and authorized users.

Security Measures

We implement the following measures to protect your data:

• All data transmission between the app and our servers uses HTTPS encryption
• Database access is controlled through Row-Level Security policies that enforce data isolation between users
• Sensitive operations (such as expense creation with multiple related records) use secure database functions with restricted execution contexts
• Authentication is managed through industry-standard protocols (OAuth 2.0 for Google and Apple sign-in)

6. Your Rights and Choices

You have the following rights regarding your personal data:

Account Deletion

You may request deletion of your account and all associated data at any time by contacting us at privacy@splitsies.uk. Upon receiving your request, we will permanently delete your account, profile, expenses, settlements, group memberships, and all related data from our systems.

Data Export

You may request an export of your personal data by contacting us at privacy@splitsies.uk. We will provide your data in a commonly used, machine-readable format.

Profile Management

You can update your profile information (name, username, avatar) at any time through the app's settings screen.

Optional Features

You can choose to opt out of certain features:

• Receipt scanning -- you are not required to upload receipts. This is an optional premium feature. If you do not use it, no receipt data is sent to OpenAI.
• Third-party sign-in -- you can use email/password authentication instead of Google or Apple sign-in.
• Placeholder friends -- storing email or phone numbers for placeholder friend entries is optional; only a name is required.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data will be permanently removed from our systems. Expense and settlement records that involve other users may be retained in anonymized form to preserve the financial integrity of other users' records.

7. Children's Privacy

Splitsies is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@splitsies.uk so we can take appropriate action.

8. International Data Transfers

Splitsies is available to users worldwide. Your data may be processed and stored in regions where our service providers operate, which may be outside your country of residence. Specifically:

• Supabase infrastructure may process data in the United States or other regions depending on the project configuration.
• OpenAI processes receipt image data in the United States.
• RevenueCat processes subscription data in the United States.
• Google and Apple process authentication data in accordance with their respective privacy policies and may transfer data internationally.

By using Splitsies, you consent to the transfer and processing of your data in these regions. We ensure that our service providers maintain appropriate data protection standards.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the features of the Splitsies app. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify users through the app or via email for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of Splitsies after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@splitsies.uk

We will respond to your inquiry as soon as reasonably possible.