Privacy notice

Who we are

Splitzer is run by Gokul G, an individual based in India. Gokul G decides why and how personal data in Splitzer is used, and is the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act). In this notice, “we” and “us” mean Gokul G.

This notice covers people who sign in to Splitzer and people whom a Splitzer user adds by name. It applies to the Splitzer website and web app.

What we collect and why

We collect only what Splitzer needs to record shared expenses. We use your data on the basis of the consent you give when you continue with Google, and only for the purposes below.

Account and sign-in details

Your name, email address and basic Google profile, received through our sign-in provider, Clerk. Google sign-in asks only for the openid, email and profile permissions. We use these details to create your account, sign you in, and recognise you if someone has added you by email.

Profile and preferences

Your display name, default currency, time zone (taken from your browser at first) and notification choices. We use them to show your name to your groups and to set up new expenses. Notifications aren’t delivered yet; we only save your choices.

Shared expense records

Group names and types; the names of the people in your groups; expenses with their descriptions, amounts, currencies, dates, categories, splits, items and notes; payments you record, with their method and optional reference number; and comments, edit history and activity. We use these to calculate, show and explain balances to the people who share them.

People you add

The name, and optionally one email address, that you enter for someone who isn’t on Splitzer yet. We use the email address only to recognise that person when they sign in with it, and to suggest an existing friend instead of adding the same person twice.

Consent records

Your confirmation that you are 18 or older, the notice version you accepted and when, and your analytics choice. We keep these as a record of your consent.

Error reports and optional analytics

Error reports, and usage events only if you allow analytics. These contain identifiers, codes, categories and counts, never your name, email address, amounts, notes or comments. The sections below explain both.

Technical data

Like any website, our hosting, database and sign-in providers handle technical details such as IP addresses and browser type to deliver Splitzer and keep it secure.

We don’t sell your data or use it for advertising. We also count overall activity from our own database, such as how many groups were active in a week. These reports show totals only.

What we don’t do

• We don’t import your address book or contacts. People are added one at a time.
• We don’t send SMS, and Splitzer doesn’t email the people you add. You share invite and claim links yourself.
• We don’t collect your location, card details or bank account details.
• There are no ads in Splitzer, and the landing page and these legal pages run no analytics.

Who can see your information

Members of a group see your display name and the records in the groups you share with them, as the terms describe. They don’t see your email address. The email address you enter for a name-only friend is visible only to you, and to that person once they claim their place.

When someone shares an invite link, its preview and landing page show the group’s name, the inviter’s display name and the number of members. A claim link also shows the name given to the person being invited. Neither shows amounts, balances, other members’ names or contact details.

The service providers listed below process data for us. We may also disclose information when Indian law requires it, for example in response to a valid legal order.

If someone added you to Splitzer

A Splitzer user may have added you by name, and perhaps with your email address, to record expenses you shared with them. We use those details only to show your share to the group and to let you claim your place. Splitzer doesn’t contact you; the person who added you may share a link with you.

If you sign in with that email address, Splitzer asks whether the place is yours before linking anything. If nobody claims the place and there is no activity involving it for 12 months, we remove the email address and cancel its claim links. The name and the shared records stay for the group.

You can ask the person who added you to correct or remove your details, or contact us using the details at the end of this notice.

Where your data is stored

Your account and shared expense data is stored in the United States, in Convex’s US East region. Splitzer is run from India, so your data is stored and processed outside India.

The DPDP Act allows personal data to be processed outside India, except in countries that the Government of India restricts. We will follow any such restriction.

Our other providers process data in the regions listed in the next section. PostHog analytics is set up in the European Union.

Services that process data

These providers help us run Splitzer. Each one processes data only for the purpose shown.

• Convex

  United States (US East)

  Account and shared expense data storage.

• Cloudflare

  Global delivery network

  Website hosting and secure delivery.

• Clerk

  Provider-managed infrastructure

  Google sign-in and account identity.

• PostHog

  European Union (EU)

  Optional analytics and masked session replay, only with analytics consent.

• Sentry

  Provider-managed infrastructure

  Error diagnostics without personal data.

Optional analytics

Analytics is off unless you turn it on. It helps us understand which features are used. Splitzer works the same whether you allow it or not.

If you allow it, PostHog (EU) receives events from a fixed list, with your Splitzer account identifier, categories and counts. Events never include your name, email address, amounts, notes, comments or invite and claim links, and they don’t include your IP address. Analytics keeps nothing on your device. Session replay is switched off; if we ever switch it on, it will run only with your analytics consent and will hide all text and images.

To turn analytics on or off, open the You tab and, under Privacy, change “Allow product analytics”. Turning it off stops analytics straight away. When you delete your account, we also ask PostHog to delete any analytics data linked to it.

Error reports

When something goes wrong, Splitzer sends an error report to Sentry so that we can find and fix the problem. Error reports are part of running the service, so they are sent whether or not you allow analytics, but only after you have accepted the terms and this notice.

Error reports contain error codes and technical details, such as where in the app the error happened, and, for errors on our servers, your Splitzer account identifier. They never include your name, email address, amounts, notes, comments or invite and claim links.

Cookies and storage on your device

Clerk uses cookies to keep you signed in. Splitzer keeps changes you haven’t saved yet, and actions still in progress, in your browser so that they survive a refresh, and it stores app files so that it loads quickly and can show a message when you are offline. That offline cache holds app files only, never your expense data. We don’t use advertising or tracking cookies.

How long we keep data

We keep your account and shared records while your account is open, so that you and your groups can keep using them.

When you delete your account

Your name becomes “Former member”, and your email address and other contact details are removed. Your data exports are deleted, and we delete your sign-in record at Clerk and any analytics data at PostHog, retrying if a provider is briefly unavailable. Your past shares, payments and comments, and your place in your groups, stay, because other members need them for correct balances and history. We keep a closed account record without your name or email address, and your consent records, as evidence of what you agreed to.

Name-only friends who never join

If a person added by name hasn’t claimed their place and there has been no activity involving them for 12 months, we remove their email address and cancel their claim links. Their name and the shared records stay.

Backups

We back up the production database every night and before each update, and keep each backup in private storage for 30 days. Data you delete may remain in a backup until that backup expires.

Error reports and analytics

Sentry and PostHog keep error reports and analytics events for their standard retention periods.

Your rights

Under the DPDP Act, you have the following rights. Using them is free of charge.

Access

Ask for a summary of the personal data we process about you, how we process it, and who we share it with. You can also download your expenses yourself in the You tab, under Your data.

Correction and updating

Change your display name and preferences in the You tab, and correct shared records in your groups. Your email address comes from your Google account. For anything you can’t change yourself, contact us.

Erasure

Delete your account in the You tab, or ask us to erase your personal data. Shared records stay as described above, because other members need them.

Withdrawing consent

Turn analytics off at any time. To withdraw your consent for the core service, delete your account. Withdrawing consent doesn’t affect anything we did before you withdrew it.

Grievance redressal

Raise a complaint with our grievance contact below. If you aren’t satisfied with our response, you can complain to the Data Protection Board of India.

Nomination

Nominate another person to use these rights for you if you die or become unable to use them yourself. Email us with their name and contact details.

How to use your rights

Email the privacy and grievance contact below, ideally from the email address you use with Splitzer, and tell us which right you want to use. We may ask for information to confirm your identity before we act.

We will reply as soon as we can, and within the time that the DPDP Act and its rules allow.

Splitzer is for adults

Splitzer is only for people aged 18 or older. We don’t knowingly collect personal data from children, and we ask users not to add children’s contact details. If you believe a child is using Splitzer, contact us and we will delete the account.

Keeping data secure

Data is encrypted in transit between your device and our providers. Sign-in is handled by Clerk with Google, every request for group data is checked on our servers against your group membership, and invite and claim links are stored only in a scrambled (hashed) form.

No service can be completely secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

Changes to this notice

When we change this notice in a way that matters, we publish the new version here with a new notice version and effective date, and Splitzer asks you to read and accept it the next time you use the app.

Privacy and grievance contact

For privacy questions, requests to use your rights, or complaints, write to our privacy and grievance contact: