Splitceipt
Split expenses, not friendships
Splitceipt ("we", "our", or "us") is a mobile application that helps you split expenses with friends and groups. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have regarding your personal data. By using Splitceipt you agree to the practices described below.
1. Information We Collect
1.1 Account & Profile Information
When you create or update your account we collect:
- Email address – used for authentication (OTP codes) and transactional notifications.
- Display name – shown to you and participants in shared bills.
- Username – an optionally unique handle used to identify you when others invite you to bills.
- Profile photo – sourced from your Google or Apple account if you sign in with those providers; otherwise no photo is stored.
- Payment handle – an optional free-text field you may fill in (e.g. a Venmo or PayPal username) so other participants know how to pay you. We do not process or facilitate any payment transactions.
1.2 Bill & Expense Data
Bills you create – including titles, amounts, currencies, item breakdowns, participant shares, and payment status – are stored on our servers so they can be shared with other participants and persisted across your devices.
1.3 Device Contacts
If you grant contact permission, Splitceipt reads contact names and email addresses on your device so you can browse and select people. We do not upload or store your complete address book. When you select a contact, their email address is sent to our server to determine whether they already have a Splitceipt account. If no active account is found and you add them to a bill, the selected name and email address may be stored with that bill, and the email address is used to send an invitation after the bill is created. Contact access is optional, and Splitceipt does not use contact information for advertising or marketing.
1.4 Receipt Images
When you use the Scan Receipt feature, a photo you take or select from your gallery is transmitted over an encrypted connection to Google Gemini, a third-party AI service, so it can extract the merchant, line items, prices, tax, tip, total, and currency. Google processes this content under the applicable Gemini API terms and Google Privacy Policy. Please review the Gemini API terms and Google Privacy Policy for details about Google's data handling.
Splitceipt Pro also lets you retain the original receipt as an attachment to a bill. A scanned image is selected automatically for attachment, but you can remove it before creating the bill; you can also attach an image directly from your camera or gallery. Attached receipts are stored privately with our storage provider and are made available only through short-lived access links to people who are authorized to view the bill. Free-plan receipt scans do not retain the original image as a bill attachment.
We may offer an optional scan-quality review prompt to test and improve extraction accuracy. Splitceipt does not save a review copy merely because you scan a receipt or see this prompt. If you affirmatively choose Share feedback and submit an accuracy rating, we store an encrypted copy of that receipt image and its original extracted result together with your account identifier, the AI provider and model used, the scan date, and your rating. Both the image and extracted result are encrypted by Splitceipt before being written to our database. Choosing Not now, closing the prompt, or leaving the screen does not create a review record. When review mode is disabled, the prompt is not offered and Splitceipt does not save a review copy.
1.5 Device & Usage Data
- Crash reports – anonymised stack traces collected via Firebase Crashlytics to help us fix bugs.
- Analytics events – screen views and feature interactions collected via Firebase Analytics (no personally identifiable information is attached to these events).
- Push notification token – a device token used solely to deliver in-app notifications. You can opt out at any time in your device settings or in the app's notification preferences.
- Default currency preference – stored locally on your device and synced with your account so it remains available across devices.
1.6 Subscription & Purchase Information
If you subscribe to Splitceipt Pro, the purchase is processed entirely by Google Play Billing or Apple App Store. We never see or store your payment card details. Subscription status is managed by RevenueCat; they receive your Google/Apple subscriber ID and entitlement data. See RevenueCat's privacy policy.
1.7 Feature Requests, Feedback & Support Communications
When you submit a feature request, feedback, or support inquiry, we collect the content of your submission along with relevant account information, such as your email address, display name, username, and the date of submission.
We use this information to review and respond to your submission, ask follow-up questions, improve Splitceipt, and notify you of updates directly related to your request. These communications are service-related and are not used to enrol you in marketing communications.
You may ask us not to contact you further regarding your submission by replying to the email or contacting support@splitceipt.com.
Feature requests and feedback are retained for as long as reasonably necessary to evaluate the submission and improve the Service, after which they may be deleted or anonymised.
2. How We Use Your Information
Provide bill creation, itemisation, participant invitations, and payment tracking.
Verify your identity via one-time email codes, Google Sign-In, or Apple Sign-In.
Send push notifications and emails about bills and payment status per your preferences.
Use aggregate analytics, crash data, and limited encrypted scan-quality review records to diagnose issues and improve the app.
Confirm Pro entitlement and apply the correct feature set to your account.
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only in the following circumstances:
3.1 With Other Participants
Your display name, username (if set), and (if set) payment handle are visible to other participants in bills you join or create. Your email address is not shown to other participants.
3.2 With Service Providers
- Google Gemini – receipt images and generated extraction results for AI-powered receipt parsing.
- Google Firebase – crash reporting (Crashlytics) and usage analytics.
- RevenueCat – subscription status management.
- Resend – transactional email delivery (OTP codes, bill invitations).
- Neon / PostgreSQL – our database provider, used to store your account and bill data and, while scan-quality review mode is enabled, encrypted receipt review records.
These providers process information under their applicable agreements, terms, and privacy policies. We only provide the information reasonably necessary for them to deliver their services to us.
3.3 Legal Requirements
We may disclose information when required to do so by law or in response to valid legal process (e.g. a court order or subpoena).
4. Data Retention
We retain your account data and bills for as long as your account is active. When you request account deletion (via the Profile screen in the app or by emailing us), the following two-phase process occurs:
If scan-quality review mode is enabled, encrypted receipt images, extracted results, provider/model metadata, and accuracy feedback are retained until the relevant testing and manual review is complete. There is no automatic deletion schedule for these review records; we delete them manually after the relevant review work is complete. You may request earlier deletion by contacting support@splitceipt.com.
Your account is deactivated the moment you confirm deletion. You are logged out, your account is removed from user search, and push notifications are disabled. A 30-day recovery window begins.
After 30 days the following account and profile information is permanently and irreversibly erased:
- Email address, display name, username, profile photo URL, and payment handle.
- Google and Apple sign-in identifiers.
Financial records (bill amounts, participant shares, and balances) are retained under a neutral “Deleted User” label so that other participants can continue to reconcile shared expenses. This retention is required under GDPR Article 17(3)(e) and equivalent financial-record-keeping obligations.
Receipt scan-quality review records follow the separate manual-review retention process described above. You may request deletion of those records at any time by contacting us.
If you log back in within the 30-day window, the scheduled deletion is cancelled and your account is fully restored. After 30 days no recovery is possible. Anonymised analytics and crash data that cannot be linked back to your account may also be retained.
5. Cookies & Tracking
Splitceipt is a mobile application and does not use browser cookies. Firebase Analytics and Crashlytics use anonymous device identifiers; these are not shared with advertisers.
6. Children's Privacy
Splitceipt is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
7. Your Rights
Depending on your jurisdiction you may have the right to access, correct, port, or delete your personal data. You can:
- Update your profile information directly in the app.
- Request account deletion from the Profile screen. Your account will be deactivated immediately and the account and profile information listed above permanently erased after 30 days. You can cancel by logging back in within that window.
- Email us at support@splitceipt.com for any other data requests, erasure requests, or complaints.
8. Security
All data in transit is encrypted using TLS. Passwords are never stored - we use one-time codes and third-party OAuth. Receipt images and extraction results retained for scan-quality review are encrypted with authenticated application-level encryption before database storage, and the encryption key is stored separately from the database. We apply reasonable technical and organisational measures to protect your data, though no system is completely secure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Continued use of Splitceipt after the effective date constitutes acceptance of the revised Policy.
10. Contact Us
For privacy-related questions or requests, contact us at: