SplitSmart helps friends split shared costs. We only use your data to make that work. We don't show ads, don't track you across apps, and never sell your data. Your data is stored in the EU, and you can delete your account in the app at any time.
SplitSmart is made by Marijn Ploeg in the Netherlands, who is the data controller for the app. For any privacy question or request, email marijnploeg@gmail.com.
| Data | Why we use it |
|---|---|
| Sign in with Apple | To create your account. We receive an Apple user identifier and, if you choose to share them, your name and email (which can be an Apple relay address). |
| Profile | Your display name, an optional profile photo and your language, so your friends recognise you. |
| Groups and expenses | Groups you create or join, their members, expenses, splits, settlements and notes. This is the core of the app, shared only with members of the same group. |
| Receipts and screenshots | Photos of bills and screenshots of delivery orders that you choose to scan, and the items read from them, so everyone can claim what they had. |
| Payment details | Optional: your IBAN, account holder name or payment link, shown only to members of your groups so they can pay you back. |
| Guests on a bill | A first name you or a guest enters for one bill, and that guest's share. Guests don't need an account. |
| Bank transactions (optional) | Only if you connect a bank: card payments from the accounts you choose, used to suggest expenses to split. Read-only. You confirm every suggestion. |
| Bookkeeper's email (optional) | Only if you add it: the address your receipts and shares are sent to, so you don't have to type it each time. |
| Contacts (only who you pick) | When you add a friend from Contacts, the iPhone's contact picker hands SplitSmart only the person you pick: their name is added to the group, and their phone number is used only on your iPhone to open WhatsApp or Messages with the invite. We never read or upload your contact list. |
| Device token | To send you notifications you asked for, such as a bill being ready to claim or someone paying you back. The App Clip can get a short-lived notification when a bill you claimed is final. |
We do not collect your location, your contact list, health data or advertising identifiers, and we do not use advertising or tracking tools. Anonymous usage statistics are described in section 3.
What stays on your iPhone. Insights (your food profile, tips per country and trip spending) are worked out on your iPhone from data you can already see in your groups, and a trip budget you set is stored only on your iPhone. Apple Pay suggestions read only the amount and merchant that your own Shortcuts automation passes on, and nothing leaves your iPhone unless you choose to save the expense. Shortcuts, Siri and Control Center actions use the same account and data as the app, and anything that saves or sends asks you first.
To see which features help and where people get stuck, the app counts how it is used with TelemetryDeck, a privacy-first analytics service hosted in the EU. It receives events such as "a group was created" or "a bill was split", with simple labels (the kind of group, how a bill was read, about how many people), plus the app version, iOS version, device model and language.
We never send names, amounts, merchants, receipt contents, anything you type, or your account. Events carry a random number made on your iPhone for this purpose only, which is hashed on your iPhone and again on TelemetryDeck's server, so they can't be linked to you. No IP address is stored, nothing is used for advertising or tracking, and nothing is sold.
You can turn this off at any time in the app: Profile, App, "Share anonymous usage stats". It then stops at once, in the app, its App Clip and its share extension. Our website counts visits with TelemetryDeck's cookieless script, without cookies or personal data.
We process your data to provide the service you signed up for (performance of a contract, GDPR article 6(1)(b)). Connecting a bank and enabling notifications are based on your consent (article 6(1)(a)), which you can withdraw at any time in the app or in iOS Settings. Anonymous usage statistics rely on our legitimate interest in improving the app (article 6(1)(f)); you can switch them off in Profile.
Most receipts are read entirely on your iPhone and never leave it for this purpose. When data is processed outside the EU, it is protected by the safeguards the GDPR requires, such as the EU Standard Contractual Clauses.
Members of a group see that group's expenses, receipts, balances, names and photos, and the payment details you chose to add. People you share a group with can also see the badges you earned, with their tiers and counts, on your page in the app; your insights and trip budgets stay on your iPhone and only you see them. People outside your groups see nothing, except that a guest scanning a bill's QR code sees that one bill's items and the first names of the people on it. People in the app only lists people you already share a group with.
We keep your data while you have an account. When you delete your account in the app (Profile, Delete account), your profile, photo, payment details, device tokens and badges are deleted. Expenses you shared with a group stay visible to the other members under the name "Deleted user", so their balances remain correct. Bank connections expire automatically after the consent period your bank allows (usually 90 or 180 days) or when you disconnect.
Receipt photos and screenshots are kept while their group exists. For your bookkeeping or an expense claim, send a copy to your bookkeeper and keep it in your own records.
You can ask to access, correct, export or delete your data, or object to or restrict how we use it. Most of this you can do in the app; for anything else, email marijnploeg@gmail.com and we'll respond within one month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Data is encrypted in transit, access is restricted per group in the database, and server keys never reach the app. No system is perfectly secure, and we will inform you if a breach affects your data.
SplitSmart is not meant for children under 16.
If we change this policy in a meaningful way, we'll tell you in the app before the change takes effect.