Welcome to Splitra. Your privacy is critically important to us. This policy explains how we collect, use, and protect your data when you use our mobile application and website.

1. Information We Collect

1.1. Personal Information

To provide our services, we use Supabase Auth for passwordless authentication. When you sign up via email OTP (One-Time Password), we collect your:

Email address
First Name or Nickname (max 10 characters)

1.2. App Content

To help you split expenses, we store the information you input into the app on Supabase servers:

Group names, participants, and group currency settings
Expense and refund titles, amounts, currencies, and dates
Settlement and payment records
Receipt photos or images that you upload or capture and attach to expenses or refunds, plus related file metadata

Receipt images may include merchant names, purchased items, prices, dates, locations, payment details, or other information visible in the image. Please avoid uploading unnecessary sensitive personal information.

1.3. Technical & Usage Data

We collect technical and usage data to operate, measure, secure, and improve the app:

Push Tokens: Used via Expo to send you notifications about group activity.
Error Reporting: We use Sentry to capture crash logs and performance issues. This helps us ensure app stability and a premium user experience. Collected data includes device type and basic OS version.
Analytics: We use Umami for anonymized website analytics. We do not use cookies or track personal behavior.
Product Analytics: We use PostHog to understand how people use Splitra and to improve the app experience. This may include events such as opening the app, creating a group, using the currency converter, sharing an invite link, viewing a paywall, dismissing a walkthrough, or creating an expense. These events may include technical details such as app version, build number, platform, app language, and approximate location inferred from IP address. We may associate analytics events with your internal Splitra user ID so we can understand usage across sessions and improve the app. We do not send your name, email address, group names, expense titles, friend names, receipt details or images, or exact expense amounts to PostHog.
Marketing Attribution and Campaign Measurement: We use Singular for mobile attribution, campaign and referral measurement, selected post-install event measurement, and attribution-fraud prevention. Singular may receive your internal Splitra user ID; device and app identifiers such as IDFV; app version, build number, platform, language, and session data; approximate location inferred from IP address; campaign or referral information; App Tracking Transparency (ATT) status; and selected events such as registration completion, group creation, invite sharing, paywall interactions, and subscription start. On iOS, Splitra does not request ATT permission and does not access IDFA. iOS attribution uses IDFV, SKAdNetwork, and other privacy-preserving attribution methods. On Android, Singular may use Google Advertising ID where available and permitted. We do not send Singular your name, email address, group names, expense titles, friend names, receipt images or details, or exact expense amounts. Singular may send limited attribution and selected event postbacks to configured advertising partners such as Meta and TikTok Ads to measure campaign performance.
Local Storage: A copy of your data is stored in a SQLite database on your device for offline access.
Device Identifiers: We may collect app instance identifiers, device information, and session identifiers used for analytics, marketing attribution, subscription management, fraud prevention, and diagnostics.

1.4. Purchase Information

If you subscribe to a premium plan, your payment is processed by the Apple App Store or Google Play Store. We do not collect or store your credit card or billing information. We only receive confirmation of your subscription status via RevenueCat.

2. How We Use Your Information

We use your data strictly to:

Provide the core bill-splitting functionality.
Store and display receipt images that you attach to expenses or refunds.
Calculate and display multi-currency group balances using exchange-rate conversion.
Synchronize your expenses across multiple devices.
Send you important notifications (e.g., when a friend adds an expense).
Improve app performance and fix bugs.
Measure mobile marketing attribution, referrals, and campaign effectiveness.
Measure selected post-install conversions, including subscription starts.
Detect and prevent attribution fraud.

We do not display third-party advertising or sell your personal data for monetary consideration. Depending on applicable law, disclosures for advertising measurement may be considered "sharing" even when no money is exchanged. We may disclose limited attribution and selected event data through Singular to configured advertising partners such as Meta and TikTok Ads, as described above.

3. Data Storage and Security

Your app data, including receipt images, is stored using cloud database and file storage infrastructure provided by Supabase. Access is controlled through the app and our infrastructure settings so that shared group content is available to the relevant group members. While we strive to protect your data, no method of transmission or storage is 100% secure.

4. Third-Party Services

We rely on trusted partners to provide our service:

Supabase: For cloud database storage, file storage for receipt images, synchronization, and secure authentication.
Sentry: For crash reporting and app performance monitoring.
Vercel: For hosting our landing page.
Expo: For maintaining the mobile app framework and push notifications.
RevenueCat: For managing in-app subscriptions and validating purchases.
PostHog: For product analytics, feature usage insights, and understanding how the app can be improved.
Umami: For anonymized website analytics. See the Umami Privacy Policy.
Singular: For mobile attribution, campaign measurement, selected app-event measurement, and attribution-fraud prevention. See the Singular Privacy Policy.
Configured Advertising Partners, such as Meta and TikTok Ads: These partners may receive limited attribution and selected event postbacks through Singular to measure campaign performance. See the Meta Privacy Policy and TikTok Privacy Policy.

5. Your Rights and Control

Depending on your location, you may have the following rights and controls:

Access & Portability: You can view your expenses, groups, refunds, and attached receipt images directly in the app where available, and you may request a copy of applicable personal data in a portable format.
Correction: You may correct certain information in the app or ask us to correct inaccurate personal data.
Deletion: You can delete your account via the Profile settings in the app. This will permanently remove your personal profile (Name and Email) from our systems.
Objection & Restriction: Where applicable, you may object to or request restriction of certain processing of your personal data.
Shared Data: To maintain the integrity of shared groups, your expense history, refund records, group contributions, and receipt images attached to shared records may remain visible to other group members but will no longer be associated with your name or email.
Manual Deletion Request: Alternatively, users can request account and data deletion, including associated analytics data and receipt images where applicable, by contacting us at contact@splitra.co. We will process these requests within 30 days.

6. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@splitra.co or via the support channels in the app.