Privacy policy

Version 2 — last updated 11 August 2026. This policy describes how SplitPie (“we”, “us”) handles information when you use the SplitPie mobile apps and related services at splitpie.app. It is written for App Store and Google Play transparency requirements. It is not a substitute for formal legal advice; we may update it as features and laws change.

Who we are

SplitPie is an expense-splitting and personal budget-tracking product. Contact: feedback@splitpie.app.

Information we collect

Account & profile

When you create an account we store what you provide: name, email and/or phone number, default currency, and (if you sign in with Google) basic profile information Google returns. Password credentials are stored as salted Argon2id hashes, never as plaintext.

Expense, group & budget data

We store the data you enter to make splitting and budgeting work: expenses, groups, friends, splits, settlements, comments, budget categories, personal transactions, recurring expense rules, and related activity. Friends and group members you share with can see the expense and settlement data in those shared spaces.

Receipts

If you scan a receipt, we process the image to extract line items for splitting. We do not sell receipt images. Processing may use on-device and/or server-side extraction depending on the feature path.

Contacts matching (optional)

If you use “Add from contacts”, phone numbers you select are sent to our servers only to check which are already on SplitPie. We do not store your full address book. Matching is on-demand and rate-limited.

Statement uploads & unlock hints

If you upload bank, credit-card, payslip, or similar documents, we store the file and derived transactions so spending tracking works. Optional statement-unlock hints (for example DOB, PAN, name as on card) are stored encrypted and used only to try unlocking password-protected PDFs. Document bytes and unlock hints are not included in the offline delta-sync stream sent to other devices as ordinary business rows.

Gmail sync (when enabled)

When Gmail connect is available and you opt in, we request gmail.readonly access to scan finance-related mail for statement attachments. Refresh tokens are encrypted at rest. We do not sell email content. Until Google’s restricted-scope verification is complete, this feature may be unavailable or limited to approved testers.

Device, diagnostics & push

We may collect device identifiers needed for push notifications, crash reports (for example Firebase Crashlytics), and server error monitoring (for example Sentry when configured). These help us fix bugs and keep the service reliable.

How we use information

• Provide and sync expense splitting, budgets, and related features
• Authenticate you and secure accounts (including refresh-token rotation)
• Send the notification types you enable (expenses, settlements, budgets, etc.)
• Import and categorize personal finance documents you choose to upload
• Show ads that fund the free product (see Ads below)
• Detect abuse, debug crashes, and improve reliability

How sync works

SplitPie is offline-first: much of your data lives on your device. When online, changes sync to SplitPie servers so groups and expenses stay consistent across your devices and with people you share them with. Scope is derived from your authenticated identity; we do not sell your expense or financial data to advertisers or data brokers.

Ads

SplitPie is free and ad-supported (Google AdMob or similar). Ad networks process device and advertising identifiers under their own policies. We do not share your expense amounts, group contents, or statement files with ad networks for their targeting.

Sharing

We share data with: (1) other SplitPie users you explicitly share with (friends / group members); (2) infrastructure providers that host our API, database, object storage, and push delivery, under contractual limits; (3) authentication providers you choose (e.g. Google Sign-In); (4) ad and crash/diagnostics vendors as above. We may disclose information if required by law or to protect users and the service from fraud or abuse.

Retention & your choices

You can edit or delete expenses, leave groups, disconnect Gmail (when available), and delete uploaded documents from within the app. You can turn notification categories off in Account → Notifications.

You can edit or delete expenses, leave groups, and delete your account from Account → Delete account once every friend and group balance is settled. Deleting your account anonymizes your profile (“Deleted user”), removes you from friendships and groups, and revokes sign-in; shared expense history stays for others. You can also email feedback@splitpie.app from the address on your account for help.

Children

SplitPie is not directed at children under 13 (or the minimum age required in your country). Do not create an account if you are under that age.

International transfers

Servers and processors may be located outside your country. By using SplitPie you understand your information may be processed in those locations with appropriate safeguards we put in place with providers.

Changes

We may update this policy. The “last updated” date above will change; continued use after an update means you accept the revised policy. Material changes may also be called out in the app or by email when practical.

Contact

Privacy questions: feedback@splitpie.app. Related: Terms of use.