Legal

Privacy Policy

How Splitsimple handles your information, in plain terms. Last updated 5 September 2026.

The short version

Splitsimple stores the expenses you record, the people you share them with, and your account details. That is the product.

Splitsimple never moves money and never connects to your bank. A payment handle is text you choose to store.

Your phone number is used to match you with people already in the app. It is never shown to anyone you have not shared an expense with.

Nothing is sold. No advertising, no ad identifiers, no third-party trackers in the app.

What we collect

Only what the app needs to do its job. Each item below exists because a feature depends on it.

Account details

Your name and email address. If you sign in with Apple or Google, we receive these from them and never see your password. If you sign up with email, your password is stored only as a salted hash.

Phone number

Used to match you with people who already have your number, so a shared expense finds the right person. It is not verified by text message and is not used for marketing. You can change or remove it in Settings.

Expense data

Amounts, descriptions, categories, dates, who paid, who owes, and the settlements you record. Visible to the people on the expense and to nobody else.

Receipt photos

Only when you photograph a receipt. The image is processed to read the line items and prices, then kept attached to that expense so you can check it later. Delete the expense and the image goes with it. Camera access is requested the first time you scan and can be withdrawn in iOS Settings.

Payment handle

Whatever you type in — a payment link, a username, an email. Shown to people settling up with you so they know where to send money. Stored as text; we never see the transfer.

Profile photo

Optional. If you don't set one, the app shows your initial.

Diagnostics

Crash reports and error logs, which include your device model and OS version but not the contents of your expenses. Used to fix defects.

What we don't collect

No bank credentials, card numbers or transaction history — Splitsimple has no connection to any financial institution. No location data. No contact list upload: matching happens on the number you enter, not by reading your address book. No advertising identifiers, and no analytics that follow you between apps.

Who can see your data

People you share an expense with can see that expense, your name, your profile photo, and — when you're settling up — your payment handle. They cannot see your other groups, your other expenses, your email, or your phone number.

A balance stands whether or not the other person has joined. If you add someone who isn't on Splitsimple yet, the invite carries only your name and the expense you added them to.

Service providers

We use a small number of companies to run the app — hosting and database, authentication, receipt text recognition, crash reporting, and email delivery for invites and password resets. Each receives only what it needs to perform its function, is bound by contract to use it for nothing else, and none of them are permitted to sell it.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

How long we keep it

Your data stays while your account is open, because a shared ledger has to keep its history to stay correct. Delete an expense and it goes immediately. Delete your account and your profile, phone number, payment handle and receipt images are removed within 30 days.

One exception, and it's the honest one: expenses you shared with other people remain visible to them, with your name replaced by "Removed user". Erasing them would silently change what those people owe each other. Anything you recorded alone is deleted outright.

Your rights

You can ask for a copy of your data, correct anything wrong, or have your account deleted. Deletion is available in the app under Settings, and by email if you'd rather. Depending on where you live you may also have the right to object to certain processing, or to complain to your local data protection authority.

We answer requests within 30 days and don't charge for them.

Security

Data is encrypted in transit and at rest. Passwords are hashed, never stored in a readable form. Access to production data is limited to the people who need it to operate the service. No system is perfect, and we'll tell you promptly if a breach affects your information.

Children

Splitsimple isn't intended for anyone under 13, and we don't knowingly collect their information. If you believe a child has created an account, write to us and we'll remove it.

Changes

If this policy changes in a way that affects you, we'll say so in the app before the change takes effect. The date at the top always reflects the current version.

Contact

Privacy questions and data requests: privacy@splitsimple.app. Anything else: Support.

Before you publish

This is a complete draft written from how the app actually works, not legal advice — have a lawyer read it. Five things still need your specifics: the legal entity name and postal address, the country your data is stored in and how transfers out of it are handled, your named service providers, the CCPA and GDPR clauses that apply to your markets, and confirmation of whether receipt text recognition runs on-device or on a server. Delete this panel once it's filled in.