This Privacy Policy explains how Splitsies collects, uses, discloses, stores and protects personal data when you use the Splitsies iOS application and related services.
In this Privacy Policy, “Splitsies”, “we”, “us” and “our” refer to the operator of Splitsies identified in Section 12.
1. Information we collect
1.1 Account and profile information
When you create or use a Splitsies account, we may collect:
- Your name
- Display name
- Email address
- Username
- Country
- Birth year
- Generated avatar
- Account identifiers
- Authentication information
We collect your birth year to help confirm that you meet the minimum age requirement. Splitsies does not request your full date of birth.
Your username, display name and generated avatar may be visible to other Splitsies users who add you, invite you to a group or share a group with you.
Your email address, birth year, country, account identifiers and authentication information are not displayed to other users.
1.2 Sign-in information
You may create or access your Splitsies account using:
- Email authentication
- Sign in with Apple
- Google Sign-In
When you use Apple or Google to sign in, we receive information that the relevant provider makes available to us according to your settings and permissions. This may include your name, email address and a unique account identifier.
Apple and Google process information under their own privacy policies.
1.3 Group and expense information
When you use Splitsies, we collect information that you or other group members enter into the app, including:
- Group names and membership
- Expense descriptions
- Expense amounts
- Currencies
- Dates
- Categories
- Notes
- Who paid
- Who participated in an expense
- Who owes whom
- Settlement records
- Changes made to expenses and group records
This information is used to calculate and display balances between group members.
Expense information may be visible to every member of the relevant group. Group members may also be able to create, edit or delete expense records within that group.
You should not include sensitive personal information in expense descriptions, notes or group names unless it is necessary and you are comfortable sharing it with every member of the group.
1.4 Invitations and user discovery
Splitsies allows users to find or connect with one another through:
- Exact username searches
- Splitsies profile codes
- Group invitation links
Splitsies does not provide general public browsing of user profiles.
When you share an invitation link outside Splitsies, the third-party application you use to share the link may process information under its own privacy policy.
1.5 Camera access
Splitsies may request access to your device’s camera so you can scan another user’s Splitsies profile code.
Camera access is used only to scan supported Splitsies codes. It is not used for uploading photographs, recording video, advertising or any unrelated purpose.
Camera frames used to scan a profile code are processed only to recognise the code. They are not saved to your Splitsies account or retained by Splitsies after the scan is completed.
You can deny or withdraw camera access through your device settings. However, doing so will prevent you from scanning profile codes. You may still add another user through their username or an invitation link.
1.6 Notification information
If you enable push notifications, we may process:
- A notification or device token
- Your notification preferences
- Information needed to determine which notification to send
Notifications may include:
- Group invitations
- Settlement activity
- Important service or account notices
- Product and feature updates
- Optional marketing messages
Product announcements and marketing notifications are optional. You may turn them off through Splitsies or your iOS notification settings.
Turning off optional marketing notifications does not prevent Splitsies from displaying necessary service, security or account information inside the app.
Apple may process notification information when delivering notifications through the Apple Push Notification service.
1.7 Technical and security information
We and our infrastructure providers may automatically process limited technical information needed to operate and protect Splitsies, including:
- IP address
- Login and authentication timestamps
- App version
- Operating-system version
- Device type
- Error and request logs
- Security and account activity records
- Information about failed or suspicious login attempts
We do not currently use this information for behavioural advertising or advertising profiles.
2. How we use information
We use personal data to:
- Create, authenticate and manage your account
- Confirm that you meet the minimum account age
- Allow users to find one another using usernames or profile codes
- Create and manage groups
- Record and calculate shared expenses
- Calculate balances and suggested settlements
- Display relevant group activity to group members
- Send group invitations and service notifications
- Provide data exports
- Respond to support and privacy requests
- Detect, investigate and prevent fraud, misuse or security incidents
- Maintain, secure, troubleshoot and improve Splitsies
- Enforce our Terms of Service
- Comply with legal obligations
- Send optional product updates or marketing communications where you have permitted them
Splitsies does not currently use personal data to train artificial-intelligence models.
Splitsies does not currently provide AI-powered features.
3. How information is shared
3.1 Other group members
Information about a group and its expenses is shared with the members of that group.
Depending on their permissions, group members may be able to:
- View expenses and balances
- See who paid or participated
- Add new expenses
- Edit existing expenses
- Delete expenses
- Record settlements
You are responsible for sharing group invitations only with people who should have access to the relevant group.
3.2 Service providers
We use service providers to operate Splitsies.
Supabase
Supabase provides services including authentication, database hosting, backend infrastructure and data storage.
Apple
Apple may process information when you download or use the app, use Sign in with Apple, receive push notifications or make future in-app purchases.
Google may process information when you use Google Sign-In.
These providers process information according to their agreements with us and their own applicable privacy terms.
We do not authorise our service providers to sell your personal data or use it for their own targeted advertising.
3.3 Legal and safety disclosures
We may disclose information where reasonably necessary to:
- Comply with applicable laws, regulations, court orders or lawful requests
- Protect the rights, safety and security of users, Splitsies or others
- Investigate fraud, abuse, security incidents or violations of our Terms
- Establish, exercise or defend legal claims
3.4 Changes to the service operator
If Splitsies is incorporated, reorganised, transferred, financed, acquired or sold in the future, information may be transferred as part of that transaction.
Where required, users will be notified and appropriate protections will be applied.
4. What we do not currently do
Splitsies does not currently:
- Connect to bank accounts
- Connect to credit or debit cards
- Process payments between users
- Hold or transfer user funds
- Provide loans or credit
- Provide financial advice
- Upload receipt photographs
- Allow media or file uploads
- Collect your device contact list
- Collect precise location information
- Access your microphone
- Use advertising networks
- Sell personal data
- Use personal data for targeted advertising
- Use personal data to train AI models
If these practices change, this Privacy Policy and the relevant App Store privacy disclosures will be updated as appropriate.
5. International processing
Splitsies is operated from Singapore, but our service providers may process or store information in other countries.
Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred information receives a standard of protection comparable to that required under applicable Singapore data-protection law.
The countries in which information is processed may depend on the infrastructure regions and services used by Splitsies and its service providers.
6. Data retention
We retain account and profile information while your account remains active and for as long as reasonably necessary to provide Splitsies.
Group and expense information may be retained while it is required to maintain the shared records of the relevant group members.
6.1 Account deletion
You can initiate deletion of your Splitsies account from within the app.
When you delete your account:
- Your access to the account will end.
- Your identifying profile information will be anonymised in active Splitsies systems as part of the account-deletion process.
- Expense records needed to preserve other group members’ shared financial histories may remain.
- Your name, username, display name and generated avatar will be removed from retained shared records.
- Retained shared records will identify you using a generic label such as “Former member”.
- Information that is not required to maintain another user’s shared records will be deleted or anonymised.
- Residual copies in routine backups, technical logs or security systems will be deleted or anonymised within three months, unless longer retention is reasonably required by law, for security purposes or to resolve a dispute.
Deleting your account will not necessarily remove information that another user has independently exported, copied or retained outside Splitsies.
6.2 Legal and security retention
We may retain limited information for longer than the periods described above where reasonably necessary to:
- Comply with a legal obligation
- Prevent fraud or abuse
- Investigate a security incident
- Resolve a dispute
- Establish, exercise or defend a legal claim
Where possible, information retained for these purposes will be limited to what is reasonably necessary.
7. Data exports
You may generate or request an export of information associated with your account, including relevant groups, expenses and balances.
Some information may be excluded where providing it would:
- Reveal another person’s confidential information
- Compromise the security of Splitsies or another account
- Conflict with applicable law
- Reveal internal fraud-prevention or security information
You should store exported data securely because files exported from Splitsies are outside our control.
8. Security
Splitsies uses reasonable administrative and technical safeguards designed to protect your information.
These safeguards include:
- Secure account authentication
- Encryption of information in transit
- Encryption of stored information through our infrastructure provider
- Access controls
- Database security policies
- Security and account activity records where appropriate
- Measures designed to restrict group information to authorised group members
Splitsies uses Supabase Row Level Security, also known as RLS, to control access to information stored in the application database.
RLS policies restrict which database records an authenticated user may view, create, edit or delete based on that user’s account, group membership and permissions.
These controls are configured so that:
- Users can access only account information they are authorised to access.
- Only members of a group can access that group’s expenses and balances.
- Private account information, including email addresses, countries and birth years, is not available to other users.
- Group records can be created, edited or deleted only where the user has the relevant permission.
- Unauthenticated users cannot access private group or account information.
Supabase provides database hosting, authentication and Row Level Security infrastructure for Splitsies.
Although we use safeguards designed to protect personal data, no electronic storage or transmission system can be guaranteed to be completely secure.
You are responsible for keeping your login credentials secure. Contact support@splitsies.org promptly if you believe your account has been accessed without permission.
9. Your choices and requests
Depending on applicable law, you may ask us to:
- Provide access to personal data we hold about you
- Correct inaccurate or incomplete information
- Export your information
- Delete your account and associated personal data
- Withdraw consent for optional processing
- Stop sending marketing communications
- Explain how we have used or disclosed your personal data
You can update certain account information and notification preferences from within Splitsies.
You can initiate account deletion from within the app.
Withdrawing consent may prevent us from continuing to provide a feature that requires the relevant information.
We may need to verify your identity before completing a privacy request.
To submit a privacy request, contact privacy@splitsies.org.
10. Age rating and children
Splitsies has an App Store age rating of 4+.
The App Store age rating relates to the content and capabilities of the app. It does not determine the minimum age required to create a Splitsies account.
You must be at least 13 years old to create or use a Splitsies account.
Splitsies is not directed at children under 13, and children under 13 are not permitted to register.
We collect a user’s birth year to help determine whether the user meets the minimum account age. We do not request the user’s full date of birth.
If we reasonably believe that an account belongs to a child under 13, we may suspend or delete the account and delete or anonymise the associated personal data.
Where the law in a user’s country requires a higher minimum age or parental or guardian permission, the user may use Splitsies only after satisfying those requirements.
11. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to:
- Splitsies and its features
- Our data practices
- Our service providers
- Applicable legal or regulatory requirements
- Security requirements
Where a change is material, we may provide notice through the app or another appropriate method.
The effective date at the top of this Privacy Policy indicates when the latest version took effect.
12. Contact us
For questions, requests or concerns about this Privacy Policy or our handling of personal data, contact:
Operator and Data Protection Contact: Isaac Teo
Privacy email: privacy@splitsies.org
For general enquiries:
General email: hello@splitsies.org
For account or technical support:
Support email: support@splitsies.org