SplitSync privacy policy
Last updated November 3, 2026.
SplitSync helps roommates share expenses and see who owes whom. It only keeps track of balances: it never moves money. This page explains what SplitSync stores, who can see it, and how to delete it.
What we store
- Your account: the name you choose and your email address. If you sign in with Apple or Google, we get the name and email address they share (Apple may give a private relay address). Your password is handled by Google Firebase Authentication; SplitSync never sees or stores it. Our server keeps your email address only once it's verified, to send the emails you ask for.
- What you and your groups enter: group names and emoji, expenses (description, amount, currency, date, category, notes, who paid and how it was split), recurring expenses, recorded repayments, saved splits, comments on expenses, reminders, and the history of every change. Deleted expenses and repayments are kept so they can be restored.
- Receipt photos you add: stored privately. The app removes the photo's location and other embedded details before uploading it. Deleting a photo deletes the file within a day.
- Payment details you choose to add: your Bit and PayBox numbers and your bank transfer details (account holder, bank, branch and account number), so people who owe you know where to pay.
- Splitwise imports: the expenses and repayments in a file you choose to import, including the names of the people in it.
- Your settings: which push notifications and emails you want, and which groups you've muted or archived.
- Notification token (phone apps only, if you allow notifications): an ID for your phone from Firebase Cloud Messaging, so SplitSync can notify you. It's removed when you sign out.
- App details: the app's version and platform (iPhone, Android or web) are sent with each request, so we can tell you when an update is needed. The phone apps also send a random install ID, the app version and the platform to Capgo to download updates.
- Security records: invite codes are stored only in scrambled (hashed) form, failed attempts to join a group with a code are kept for a day to stop guessing, and each request's retry key is kept for a day so a retry can't add something twice.
- On your device: a copy of your groups, so the app opens quickly and works with a weak signal. It's removed when you sign out.
Who can see it
- Members of a group can see its members, expenses, repayments, comments, receipt photos and history, and can export the group's history as a spreadsheet. People who leave a group keep their name on its past records.
- Your payment details are shown only to people who are in a group with you right now. They're never included in search, exports or notifications.
- Your email address is never shown to other people.
- Nobody outside your groups can see your data.
Notifications and emails
Push notifications and emails tell you when, for example, someone adds an expense you're part of, pays you, comments or adds you to a group. They include the names, descriptions, amounts and comment text they're about. Push notifications go through Firebase Cloud Messaging (and Apple's push service on iPhone); emails go only to a verified address. You can turn each kind off in Account → Notifications, mute a group, or use the unsubscribe link in any email.
Sponsored cards
The Account screen may show a sponsored card. Which card appears depends only on where it's shown, never on who you are or what you've entered. We count how often each card is seen and tapped, without recording who saw or tapped it. A card's picture may load from the advertiser's server, and tapping it opens the advertiser's website, which has its own privacy policy.
What we don't do
No ads targeted at you, no tracking across other apps or websites, and we never sell your data. Our server doesn't log what you send it; it logs only unexpected errors and counts of notifications sent.
Services we use
- Google Firebase Authentication, for sign-in (including Sign in with Apple and Google), and Firebase Cloud Messaging, for push notifications.
- Vercel, which runs the SplitSync server.
- Neon, which hosts the SplitSync database.
- Cloudflare R2, which stores receipt photos.
- Zoho Mail, which sends notification emails.
- Netlify, which hosts the website and web app.
- Capgo, which delivers updates to the phone apps.
Deleting your account
In the app, go to Account → Delete account. You'll need to settle your balances first. Deleting your account removes you from every group and deletes your sign-in account, email address, payment details, notification settings and phone tokens. Your name is replaced with "Deleted user". Expenses, repayments, comments and receipt photos you were part of stay in the group, so your roommates' balances still add up. When the last member leaves a group, the group and everything in it are deleted. See how to delete your account.
Contact
Questions or requests: support@splitsyncapp.com