Privacy Policy | SplitOo

1. Introduction

Welcome to SplitOo ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expense splitting application and services (collectively, the "Service"). Please read this Privacy Policy carefully. By using SplitOo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Service:

Account Information: Name, email address, password, and profile information
Expense Data: Expense descriptions, amounts, dates, categories, and participant information
Group Information: Group names, descriptions, member lists, and settings
Communication Data: Messages, feedback, and support inquiries you send to us
AI Input Data: Natural language text you provide to our AI expense creation feature

2.2 Information Automatically Collected

When you access our Service, we automatically collect certain information:

Device Information: Device type, operating system, browser type, and version
Usage Data: Pages visited, features used, time spent on pages, and interaction patterns
Log Data: IP address, access times, and error logs
Cookies and Tracking: Session cookies, preferences, and analytics data

2.3 Information from Third Parties

If you choose to sign in using third-party authentication providers (e.g., Google, GitHub), we may receive:

Name and email address from your social media profile
Profile picture (if you choose to share it)
Other information you authorize the third-party provider to share

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide and Maintain the Service: To enable expense tracking, splitting calculations, and group management
AI Processing: To process natural language input and generate structured expense data
Account Management: To create, maintain, and secure your account
Communication: To send service-related notifications, updates, and respond to inquiries
Improve the Service: To analyze usage patterns, fix bugs, and develop new features
Security: To detect, prevent, and address fraud, security issues, and technical problems
Legal Compliance: To comply with legal obligations and enforce our Terms and Conditions
Analytics: To understand how users interact with our Service and improve user experience

4. How We Share Your Information

4.1 With Other Users

When you add expenses or join groups, certain information (such as your name, expenses you've added, and your share of group expenses) will be visible to other members of those groups. This is necessary for the core functionality of the Service.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf:

Hosting Providers: To store data and host the application
AI Services: To process natural language input (e.g., OpenAI)
Analytics Providers: To analyze usage and improve the Service (e.g., Google Analytics)
Authentication Services: To enable social login functionality

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (e.g., subpoenas, court orders)
Requests from law enforcement or government authorities
Circumstances where disclosure is necessary to protect our rights, property, or safety, or that of our users or the public

4.4 Business Transfers

If SplitOo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

Encryption: We use industry-standard encryption (HTTPS/TLS) to protect data in transit
Password Security: Passwords are hashed using bcrypt before storage
Access Controls: We limit access to personal information to authorized personnel only
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: We use reputable cloud providers with robust security measures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. We will retain and use your information to the extent necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, except where we are required by law to retain certain information or where information is necessary for legitimate business purposes (e.g., dispute resolution).

7. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request access to the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Data Portability: Request a copy of your data in a structured, machine-readable format
Objection: Object to processing of your personal information for certain purposes
Restriction: Request restriction of processing under certain circumstances
Withdraw Consent: Withdraw consent for processing based on consent (without affecting lawfulness of prior processing)

To exercise these rights, please contact us at privacy@splitoo.app. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking Technologies

8.1 What We Use

We use cookies and similar tracking technologies to track activity on our Service:

Essential Cookies: Required for the Service to function (e.g., authentication, security)
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how you use the Service (e.g., Google Analytics)
Session Cookies: Maintain your session while using the Service

8.2 Your Choices

Most web browsers are set to accept cookies by default. You can choose to set your browser to remove or reject cookies. Please note that if you choose to remove or reject cookies, this may affect the availability and functionality of our Service.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the jurisdiction where our servers are located and choose to provide information to us, we will transfer your information to that jurisdiction and process it there. By using the Service, you consent to such transfer.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us
Right to opt-out of sale of personal information (Note: We do not sell personal information)
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at privacy@splitoo.app. We will verify your identity before processing your request.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
Data Protection Officer: You may contact our DPO at dpo@splitoo.app
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority

14. AI Processing and Third-Party AI Services

SplitOo uses artificial intelligence to process natural language input and create structured expense data:

We use OpenAI's API to process your text input when you use the AI expense creation feature
The text you provide is sent to OpenAI's servers for processing
OpenAI has its own privacy policy and data handling practices, which you can review at their website
We do not store your raw AI input longer than necessary to process your request
We recommend not including sensitive personal information in AI input beyond what is necessary for expense tracking

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide more prominent notice (such as email notification). You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Do Not Track Signals

We do not currently respond to "Do Not Track" (DNT) signals sent by web browsers. We follow the standards outlined in this Privacy Policy regarding collection and use of information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Inquiries: support@splitoo.app

Privacy Concerns: privacy@splitoo.app

Data Protection Officer: dpo@splitoo.app

Website: https://splitoo.app

By using SplitOo, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.