Last updated October 16, 2026
Privacy Policy
SplitRound is a mobile app for splitting shared expenses between friends, housemates and travel groups. This policy explains what data the app and this website collect, why, who it is shared with, and what control you have over it.
The data controller is João Abreu, Portugal. For any privacy question or request, contact support@splitround.pt.
What we collect
| Data | Why |
|---|---|
| Name | To identify you to other members of your groups. |
| Email address and/or phone number | To sign you in, send account emails, and let people you know invite you to a group. At least one is required. |
| Password | Stored only as a cryptographic hash. We never store or can read your password. |
| Google account identifier | Only if you choose “Sign in with Google”. We receive your Google ID and verified email; we never receive your Google password. |
| Microsoft account identifier | Only if you choose “Sign in with Microsoft”, which takes personal accounts (Outlook.com, Hotmail, Live). We receive your Microsoft ID, your name and the account's email; we never receive your Microsoft password. |
| Apple account identifier | Only if you choose “Sign in with Apple”. We receive an identifier Apple makes for SplitRound, and either your email or, if you choose to hide it, an address of Apple's that forwards to it; your name only if you agree to share it. We never receive your Apple password. |
| Expenses, groups, payments, comments and balances | The core function of the app — the shared ledger you and your group create. |
| Receipt photos, documents, profile and group photos | Only images and PDFs you choose to attach or upload. A PDF is turned into an image on your phone before it is sent. See “Images” below. |
| Contact details you pick from your phone | Only if you choose to pick a friend from your contacts. The address book is read on the phone to show you the list; only the name, email or phone of the person you pick is sent, to add or invite them. |
| What you say to add an expense | Only while you are using the microphone. Your phone’s speech recogniser turns it into text, and the app reads the expense out of that text. SplitRound does not record, store or upload the audio. See “Voice entry” below. |
| Subscription and trial status | Whether the account has Premium, since when and until when, and a record of each purchase and renewal the stores report to us. Payment itself is handled by Apple or Google; we never see your card. |
| Usage analytics from the app | Only if you agree to it: which screens are opened and which options are chosen, to learn which parts of the app get used. See “Analytics in the app” below. |
| Reports, blocks and reasons for leaving | If you report or block somebody, what you wrote; and, if you give one, why you left a group or closed your account. Used for moderation and support. |
| Device push tokens | To deliver notifications. Removed when you disable notifications. |
| Notification and visibility preferences | To respect your choices, including whether others may find you by email or phone. |
What we do not do
- No advertising, and no ad identifiers.
- No tracking across other apps or websites, and no advertising or attribution SDKs. The app’s own usage analytics are described below, and run only if you say yes.
- No selling or renting of personal data, ever.
- No access to your location, and no access to your contacts, microphone, photos or files except when you use a feature that needs them — and then only after your phone asks you.
- No bank account or card connection. SplitRound records who owes what; it never moves money.
Cookies and analytics on this website
This website uses one essential cookie, NEXT_LOCALE, which remembers the language you chose so you are not sent back to English on the next page. Your light or dark preference is kept in your browser’s local storage rather than in a cookie. Neither is shared with anyone, and neither can be switched off, because without them the site cannot do what you asked it to.
Beyond that we would like to use Google Analytics to count visits and see which pages get read. It sets its own cookies, and it sends your IP address, the pages you view and general details of your device to Google, who may process them outside the European Economic Area. It is not used for advertising, and it is never linked to your SplitRound account.
Analytics only runs if you say yes. The banner on your first visit asks, and until it is answered nothing is loaded. Choosing “Essential only” means no analytics at all — not a reduced version of it. You can change your mind at any time through Cookie choices in the footer of every page; withdrawing consent deletes the analytics cookies straight away. Your answer is remembered in your browser for six months, after which we ask again.
The choice you make here applies only to this website. The app asks for its own, described next.
Analytics in the app
If you agree to it, the app, on the phone and in the web version, reports to Google Analytics which screens are opened and which options are chosen — for example whether an expense was typed, read off a receipt or spoken. Each event carries a random identifier for the installation, the platform, and the app’s own account ID while you are signed in, so that the same person on a phone and in a browser is counted once. It never includes amounts, balances, names, expense descriptions, email addresses, phone numbers or anything read off a receipt, and it is not used for advertising.
It only runs if you say yes. After you sign in, the app asks once, and until you answer nothing is sent and no identifier is stored on your device. Saying no, or never answering, means no analytics at all. You can change your mind at any time under Account → Usage analytics; switching it off sends one last event saying so, then nothing more from that device, and deletes the installation’s identifier. Your answer is remembered on the device. Google may process this data outside the European Economic Area.
Voice entry
When you tap the microphone, the speech is recognised by your phone’s own recogniser — Apple’s on iPhone, and on Android whichever service the phone uses, usually Google’s. If the phone cannot recognise that language by itself, the recogniser may send the audio to Apple or Google to be turned into text, under their own privacy terms. SplitRound receives only the text, uses it to fill in the expense on your phone, and never records or stores the audio. Nothing is heard unless you have tapped the microphone and allowed access to it.
Images, and an important limitation
Receipt photos, documents, profile photos and group icons are stored with our image host (Cloudinary) and delivered over HTTPS from URLs that are not individually access-controlled. Anyone who obtains an image’s URL can view that image without signing in.
Who your data is shared with
Data you enter into a group is visible to the other members of that group — that is the purpose of a shared ledger. Beyond that, we use these processors to run the service:
| Service | Purpose |
|---|---|
| Fly.io | Application hosting. |
| MongoDB | Database storage. |
| Cloudinary | Storage and delivery of receipt and group images. |
| Resend | Sending account emails (sign-up codes, invitations, password resets). |
| RevenueCat | Keeping track of Premium subscriptions bought in the App Store or Google Play. |
| Apple | Verifying your identity if you use “Sign in with Apple”, and forwarding our emails if you hid your address; payment for subscriptions bought in the App Store; delivering notifications to iPhones; and speech recognition on iPhone when you use voice entry. |
| Expo | Delivering push notifications to your device. |
| Microsoft | Verifying your identity if you use “Sign in with Microsoft”. |
| Verifying your identity if you use “Sign in with Google”; payment for subscriptions bought in Google Play; and speech recognition on Android when you use voice entry. | |
| Google Analytics | Counting visits to this website, and usage analytics from the app — each only if you agree to it. |
Currency exchange rates are fetched from the public Frankfurter API. No personal data is sent in those requests.
These providers may process data outside your country, including outside the European Economic Area. We rely on the safeguards offered by each provider for such transfers.
Stored on your device
The app keeps your sign-in token, a cached copy of your groups and expenses for offline use, your theme, language and app-lock preferences, your usage-analytics answer and — only if that answer is yes — the random analytics identifier on the device itself. If you enable the app lock, biometric and passcode verification is handled entirely by your operating system — SplitRound never receives your fingerprint, face data or passcode. Uninstalling the app removes all of this local data.
Your rights and choices
You can, from within the app: change your name, email, phone and photo; change your password; turn each category of notification on or off; turn usage analytics on or off; and stop others from finding you by email or phone.
You may also delete your account from within the app, under Account → Close account. That empties the account at once: your email address, phone number, password and Google link stop working, your photo is removed, your devices and friendships go, and nobody can find you any more. Those contacts and credentials are then kept out of sight for 30 days, so that a closure can still be undone if you ask us to, and are deleted permanently once the 30 days are up.
Expenses and payments you shared with others remain visible to those group members, because a shared ledger cannot be made accurate for some participants and erased for others — every other member’s balance is worked out from the very rows you appear in. Your name stays on those rows, and on the group history you leave behind, because it is what makes them readable to the people still in the group; the app shows the account as closed. The account deletion page sets out exactly what is deleted, what is kept and for how long, and how to request deletion by email instead.
If you want a copy of your data, email support@splitround.pt and we will act on your request within 30 days.
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, erase, restrict, object to the processing of, and receive a portable copy of your personal data, and to complain to your national data protection authority. We process your data to perform our contract with you (running the service), and on the basis of legitimate interests for security and abuse prevention. Usage analytics, in the app and on this website, run only with your consent, which you can withdraw at any time without affecting anything already sent while it was given.
Retention
We keep your account data for as long as your account exists. When you delete your account, your contacts and credentials — email address, phone number, password hash and Google link — are hidden immediately and held for 30 days so that the closure can be undone, then deleted permanently. The shared expense records that other members’ balances depend on are kept, with your name on them, for as long as those groups exist. The record of Premium purchases and renewals is kept as a record of payments, even after the account is closed. Residual copies may remain in routine database backups until those backups are rotated out, within 30 days.
Children
SplitRound is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect data from children.
Security
All traffic between the app and our servers is encrypted with HTTPS. Passwords are stored only as hashes. No system is perfectly secure, and we cannot guarantee absolute security — please use a strong, unique password.
Changes to this policy
If we change this policy materially we will update the date at the top and, where appropriate, notify you in the app.