This policy explains what personal data the Splitty app and website collect, why, who else receives it, how long it is kept, and what you can do about it. It covers the Splitty iOS app and this website.
Who is responsible
Splitty is run by Gabriel Trzimajewski, an individual based in Brazil, who is the controller of your personal data under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018) and, where it applies, the EU and UK General Data Protection Regulation (GDPR).
For anything about your data, write to privacy@splitty.app. That address reaches the person responsible for handling data protection requests.
The short version
- Splitty records shared expenses. To do that it needs your name, your email address and the expenses you and your groups enter.
- There are no ads, no analytics or tracking tools, and no data brokers. We don’t sell your data or use it for advertising.
- The people in your groups can see your name, email address, profile photo and the expenses you share with them.
- You can delete your account in the app at any time.
What we collect
Account details. When you sign in with Google, Google sends us your name, email address, whether the email is verified, a link to your Google profile photo, and a stable account identifier. Splitty never sees your Google password. We store the name, email, photo link and identifier. You can change your name in the app.
Profile photo. If you upload a photo, we store that image. If you don’t, the app shows your Google photo or a generated drawing.
What you put in Splitty. Groups (name and description), group memberships, expenses (description, amount, category, date, who paid, how it was split), payments you record between members, recurring schedules and invite codes. Amounts are whatever you type: Splitty doesn’t connect to banks or cards and doesn’t know your real balances.
Sign-in sessions. To keep you signed in, we issue tokens to your device. We store only a hashed form of the long-lived token, never the token itself.
Crash and error reports. When the app crashes, freezes or gets an unexpected error from our server, it sends a report: the kind of problem, technical details such as a stack trace or the failing request, the app version, the iOS version and the device model. Reports are sent without your account and contain no name, email or expense data. They aren’t linked to you.
Server logs. Our server records technical events, such as errors and request identifiers, to keep the service running and secure. These logs can include your account number and your device’s IP address.
On your device only. Your theme and language choice are stored on your phone and never sent to us.
We don’t collect your location, contacts, photo library (beyond the one photo you choose to upload), payment details, or any data from other apps.
Why we use it, and on what legal basis
| What we do | Data | Legal basis |
|---|---|---|
| Create your account and sign you in | Account details, sessions | Performing our contract with you (LGPD art. 7, V; GDPR art. 6(1)(b)) |
| Run the service: keep your groups, calculate balances, show members to each other | Account details, profile photo, what you put in Splitty | Performing our contract with you |
| Find and fix crashes and bugs | Crash and error reports, server logs | Our legitimate interest in a working app (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
| Keep the service secure and stop abuse, such as guessing invite codes | Server logs | Our legitimate interest in security |
| Answer your messages | What you write to us | Performing our contract, or your request |
| Meet legal obligations | Whatever the obligation requires | Legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)) |
We don’t use your data for automated decisions that have legal or similarly significant effects on you, and we don’t build advertising profiles.
Who else sees your data
Members of your groups. Splitty is shared by design. Anyone in a group with you can see your name, email address and profile photo, and every expense and payment in that group, including ones you added. Any member can edit or delete the group’s expenses. Only invite people you trust, and only join groups you trust.
Service providers that process data on our behalf, under contracts that limit them to that purpose:
- Google (Google Sign-In): verifies your identity when you sign in. Google’s own privacy policy covers what Google does as your account provider.
- Cloudflare (R2 storage): stores uploaded profile photos.
- DiceBear: when you have no photo, the app loads a generated drawing from DiceBear’s service. The request carries your Splitty account number as the drawing’s seed, never your name or email, and DiceBear sees your device’s IP address, as any website does.
- Hosting: our server, database and logs run on infrastructure we operate.
Your Google profile photo is loaded from Google’s servers, which see your device’s IP address when it loads.
Apple distributes the app. If you agreed to share analytics with app developers in iOS settings, Apple may give us aggregated crash and usage statistics under Apple’s own privacy policy.
Authorities, if the law requires it, and only what is required.
We never sell or rent personal data.
International transfers
Some providers above process data outside Brazil, for example in the United States or the European Union. When that happens we rely on the safeguards the LGPD allows (art. 33), such as the provider’s standard contractual clauses and security commitments, and on equivalent GDPR mechanisms for users in the EU and UK.
How long we keep it
- Account details, profile photo and the content you add: while your account exists.
- When you delete your account: your name, email, photos and sign-in links are erased straight away, and all your sessions end. Expenses and payments you shared stay in your groups because other members’ balances depend on them, but they show “Removed member” instead of you. Groups where nobody remains are deleted.
- When you deactivate your account: nothing is deleted. Your sessions end, and signing in again restores the account.
- Sign-in sessions: expire after 90 days without use, or when you sign out.
- Crash reports and server logs: kept for up to 30 days, then deleted.
- Emails with us: as long as needed to deal with your request, and for any period the law requires.
Your rights
Under the LGPD (art. 18) you can ask us to:
- confirm whether we process your data, and give you access to it;
- correct incomplete, inaccurate or outdated data;
- anonymize, block or delete data that is unnecessary, excessive or processed unlawfully;
- give you a portable copy of your data;
- delete data processed with your consent, and tell you what happens if you refuse consent;
- tell you who we share your data with;
- review a decision made solely by automated means.
If you are in the EU or UK, the GDPR gives you similar rights: access, rectification, erasure, restriction, portability and objection, including objecting to processing based on legitimate interests.
In the app, you can change your name and photo, export a group’s expenses as a CSV file, and deactivate or delete your account in Settings. For anything else, email privacy@splitty.app. We reply within 15 days. We may ask you to confirm the request from the email address on your account.
You also have the right to complain to Brazil’s data protection authority, the ANPD (gov.br/anpd), or to the supervisory authority where you live in the EU or UK.
Security
Connections to Splitty are encrypted with TLS. There are no passwords to leak: sign-in goes through Google, and the long-lived sign-in tokens are stored only as hashes. Access to servers and databases is restricted to the operator. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the ANPD as the law requires.
Children
Splitty is not intended for children under 13, and we don’t knowingly collect their data. If you believe a child under 13 has created an account, write to privacy@splitty.app and we will delete it. Teenagers under 18 should use Splitty with a parent or guardian’s permission.
This website
The website sets no cookies, has no analytics and loads no third-party trackers. Our hosting provider may keep standard access logs (such as IP address and pages requested) for security, for a short period.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect.