Last updated September 9, 2026
Privacy Policy
SplitRound is a mobile app for splitting shared expenses between friends, housemates and travel groups. This policy explains what data the app and this website collect, why, who it is shared with, and what control you have over it.
The data controller is João Abreu, Portugal. For any privacy question or request, contact joaoabreu.wd@gmail.com.
What we collect
| Data | Why |
|---|---|
| Name | To identify you to other members of your groups. |
| Email address and/or phone number | To sign you in, send account emails, and let people you know invite you to a group. At least one is required. |
| Password | Stored only as a cryptographic hash. We never store or can read your password. |
| Google account identifier | Only if you choose “Sign in with Google”. We receive your Google ID and verified email; we never receive your Google password. |
| Expenses, groups, payments, comments and balances | The core function of the app — the shared ledger you and your group create. |
| Receipt photos and group icons | Only images you choose to attach. See “Images” below. |
| Device push tokens | To deliver notifications. Removed when you disable notifications. |
| Notification and visibility preferences | To respect your choices, including whether others may find you by email or phone. |
What we do not do
- No advertising, and no ad identifiers.
- No analytics or tracking SDKs of any kind in the mobile app — it contains none. This website is a separate matter, covered below.
- No selling or renting of personal data, ever.
- No access to your contacts, location, or files beyond images you explicitly pick.
- No bank account or card connection. SplitRound records who owes what; it never moves money.
Cookies and analytics on this website
This website uses one essential cookie, NEXT_LOCALE, which remembers the language you chose so you are not sent back to English on the next page. Your light or dark preference is kept in your browser’s local storage rather than in a cookie. Neither is shared with anyone, and neither can be switched off, because without them the site cannot do what you asked it to.
Beyond that we would like to use Google Analytics to count visits and see which pages get read. It sets its own cookies, and it sends your IP address, the pages you view and general details of your device to Google, who may process them outside the European Economic Area. It is not used for advertising, and it is never linked to your SplitRound account.
Analytics only runs if you say yes. The banner on your first visit asks, and until it is answered nothing is loaded. Choosing “Essential only” means no analytics at all — not a reduced version of it. You can change your mind at any time through Cookie choices in the footer of every page; withdrawing consent deletes the analytics cookies straight away. Your answer is remembered in your browser for six months, after which we ask again.
The mobile app has none of this. It contains no analytics of any kind, and the choice you make here applies only to the website.
Images, and an important limitation
Receipt photos and group icons are stored with our image host (Cloudinary) and delivered over HTTPS from URLs that are not individually access-controlled. Anyone who obtains an image’s URL can view that image without signing in.
Who your data is shared with
Data you enter into a group is visible to the other members of that group — that is the purpose of a shared ledger. Beyond that, we use these processors to run the service:
| Service | Purpose |
|---|---|
| Render | Application hosting. |
| MongoDB | Database storage. |
| Cloudinary | Storage and delivery of receipt and group images. |
| Resend | Sending account emails (invitations, password resets). |
| Expo | Delivering push notifications to your device. |
| Verifying your identity, only if you use “Sign in with Google”. | |
| Google Analytics | Counting visits to this website — and only if you agree to it. Not used by the app. |
Currency exchange rates are fetched from the public Frankfurter API. No personal data is sent in those requests.
These providers may process data outside your country, including outside the European Economic Area. We rely on the safeguards offered by each provider for such transfers.
Stored on your device
The app keeps your sign-in token, a cached copy of your groups and expenses for offline use, and your theme, language and app-lock preferences on the device itself. If you enable the app lock, biometric and passcode verification is handled entirely by your operating system — SplitRound never receives your fingerprint, face data or passcode. Uninstalling the app removes all of this local data.
Your rights and choices
You can, from within the app: change your name, email and phone; change your password; turn each category of notification on or off; and stop others from finding you by email or phone.
You may also delete your account from within the app, under Account → Close account. That empties the account at once: your email address, phone number, password and Google link stop working, your devices and friendships go, and nobody can find you any more. Those contacts and credentials are then kept out of sight for 30 days, so that a closure can still be undone if you ask us to, and are deleted permanently once the 30 days are up.
Expenses and payments you shared with others remain visible to those group members, because a shared ledger cannot be made accurate for some participants and erased for others — every other member’s balance is worked out from the very rows you appear in. Your name stays on those rows, and on the group history you leave behind, because it is what makes them readable to the people still in the group; the app shows the account as closed. The account deletion page sets out exactly what is deleted, what is kept and for how long, and how to request deletion by email instead.
If you want a copy of your data, email joaoabreu.wd@gmail.com and we will act on your request within 30 days.
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, erase, restrict, object to the processing of, and receive a portable copy of your personal data, and to complain to your national data protection authority. We process your data to perform our contract with you (running the service), and on the basis of legitimate interests for security and abuse prevention.
Retention
We keep your account data for as long as your account exists. When you delete your account, your contacts and credentials — email address, phone number, password hash and Google link — are hidden immediately and held for 30 days so that the closure can be undone, then deleted permanently. The shared expense records that other members’ balances depend on are kept, with your name on them, for as long as those groups exist. Residual copies may remain in routine database backups until those backups are rotated out, within 30 days.
Children
SplitRound is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect data from children.
Security
All traffic between the app and our servers is encrypted with HTTPS. Passwords are stored only as hashes. No system is perfectly secure, and we cannot guarantee absolute security — please use a strong, unique password.
Changes to this policy
If we change this policy materially we will update the date at the top and, where appropriate, notify you in the app.