Privacy Policy

1. Overview

Splitter ("Splitter", "we", "us") helps you split shared expenses with friends and groups and keep track of your own spending. This policy applies to the Splitter mobile app and this website. It explains what information is collected, how it is used and shared, and the choices you have. We do not sell your personal information.

2. Information You Give Us

a. Account details

Your name, email address and, if you add one, a profile photo. If you sign up with email and password, the password is handled by Firebase Authentication — we never see or store it. If you sign in with Google, we receive your Google account's name, email address and photo (see Section 8).

b. What you add to the app

Groups (name, photo, currency), the people you add to them, group expenses (title, amount, category, date, who paid, how it is split, notes, tags, comments and receipt photos), payments you record between members (and payment reminders you send), your personal expenses and recurring expenses.

c. Receipt scanning

When you scan a receipt or screenshot, the text on it is read on your phone by Google ML Kit to fill in the expense. The image and its text are not sent to us or to Google for this. The photo is uploaded only if you save the expense with it attached, like any other receipt.

d. People you invite

When you add a friend or group member by email, we store that email address. If they don't have an account yet, we send them an invitation email that says it comes from you.

e. Invite links

When you share a group's invite link, we store its code with the group's name and your name. Anyone who has the link can see those and join the group until a member resets the link. When you share your own friend link, we store its code with your name; anyone who opens it can see your name and becomes your friend on Splitter. Invites you send on WhatsApp or by SMS go from your phone to the contact you pick there — Splitter doesn't see or store their number.

f. Payment details

If you add them, the JazzCash, Easypaisa, SadaPay, NayaPay, Raast or bank details you want to be paid to (mobile number, IBAN or account number, account title and bank name). Splitter only shows these to the people described in Section 5; it never moves money.

g. Feedback and requests

If you send feedback from the app, your email app sends us your message together with the app version and your device's platform. If you use the account deletion request form on this website, we store the name, email address and reason you enter, and a one-way hash of your IP address to limit abuse.

3. Information Collected Automatically

• Device information — a push-notification token for each device you sign in on, and your device's time-zone offset, so reminders and the daily summary arrive at the right local time.
• Crash reports — if the app crashes or an error occurs, Firebase Crashlytics sends a report with technical details (device model, operating system, app version, what went wrong) and your account ID so it can be fixed.
• Usage statistics — Google Analytics for Firebase records anonymous app events, such as whether the details filled in from a scanned receipt were kept or corrected. Crash reports and usage statistics never include the content of your expenses or receipts, and Analytics does not collect your advertising ID.
• Advertising — the app shows ads from Google AdMob. AdMob may collect your device's advertising ID, IP address, general device information and how you interact with ads. Where the law requires it (for example in the EEA and the UK), you are asked for consent first.

Settings such as your language and default currency are stored only on your device.

Device permissions

• Camera — only when you take a photo or scan a receipt.
• Notifications — to show push notifications.

Photos you choose come through your phone's photo picker, which needs no permission; Splitter receives only the image you pick. Splitter does not access your contacts, location, microphone or SMS messages.

4. How We Use Information

• To run the app — sign you in, sync your data across devices, calculate balances and suggested payments, and show your insights.
• To notify you — push and in-app notifications about group activity, payments, friend requests, recurring expenses and the daily summary (each can be turned off in Settings → Notifications), and emails such as the welcome email and invitations.
• To fix problems — crash reports and usage statistics help us find bugs and improve features.
• To show ads that help cover the cost of running Splitter.

We do not sell your personal information.

5. Who Can See Your Information

• Members of a group see your name, email address and photo, and the expenses, comments and payments in that group.
• Friends see your name, email address and photo.
• Payment details, if you add them, are visible to people you share a group with and to your friends, so they can pay you. You can change or remove them at any time in Profile → Payment details.
• Finding you — someone who types your exact email address can find your account (name and photo) to send you a friend request. Accounts can't be browsed or searched in any other way. You can block someone so they can't send you friend requests; the list of people you block is stored with your profile.
• Your personal expenses and recurring personal expenses are visible only to you.
• After you leave a group (or are removed from it), you can still see its history, read-only, and your spending there still counts in your Insights. The remaining members still see the expenses and payments you were part of.

6. Service Providers

Splitter is built on Google services that process data for us under their own privacy and security terms:

• Firebase Authentication — sign-in and account credentials.
• Cloud Firestore — storage of your account, groups, expenses and payments.
• Cloud Storage for Firebase — photos and receipts.
• Firebase Cloud Messaging — push notifications.
• Firebase Crashlytics — crash reports.
• Google Analytics for Firebase — anonymous usage statistics.
• Cloud Functions for Firebase — reminders, the daily summary and emails.
• Google Sign-In — signing in with your Google account.
• Google ML Kit — reading receipts on your phone (nothing is sent to Google).
• Google AdMob — ads.
• Gmail — sending emails such as invitations.

Google's privacy policy: policies.google.com/privacy. We do not share your information with data brokers.

7. Storage & Security

Your data is stored on Google Cloud infrastructure and is sent over encrypted connections. Access rules on our servers limit each piece of information to the people it is shared with, as described in Section 5. The app also keeps a copy of your data on your device so it keeps working offline. Because Splitter runs on Google's infrastructure, your data may be processed on servers outside your country. No method of transmission or storage is completely secure, but we work to protect your information.

8. Sign in with Google

If you choose "Sign in with Google," Google shares your name, email address and profile photo with Splitter so we can create or match your account. We never receive your Google password. You can review or revoke Splitter's access at any time from your Google Account permissions.

9. Keeping & Deleting Your Information

We keep your information while your account exists. An account created with an email address that isn't verified within 7 days is deleted automatically, together with its profile.

You can delete your account at any time in the app: Profile → Settings → Delete Account. This deletes your profile and payment details, personal expenses, recurring expenses, notifications, device registrations, friendships and friend requests, friend invites you sent, your friend link, payment reminders and groups that only you use. Groups you created that other people still use are handed to another member. Expenses and payments you were part of in shared groups stay in those groups' history, because the other members rely on them for their balances.

If you no longer have the app, use the account deletion request form or email abuzarbasit536@gmail.com from the address you signed up with. We verify these requests, complete them within 30 days and confirm by email.

10. Your Choices

• Edit or delete expenses, groups and personal records you created.
• Update your name and photo in Edit Profile.
• Leave a group, remove a friend, or block someone.
• Turn each kind of notification on or off in Settings → Notifications.
• Change your ad consent in Settings → Ad privacy choices (where offered), and reset or delete your advertising ID in your device's settings.
• Export a group's expenses, or your personal expenses, as a CSV file from the app.
• Ask for a copy of your data, or ask what we hold, by contacting us (Section 13).

11. Children

Splitter is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

12. Changes to This Policy

If this policy changes, we will update the date at the top and, for significant changes, let you know in the app.

13. Contact Us

Questions about this policy, or requests about your data, can be sent to abuzarbasit536@gmail.com.