Privacy policy
Who we are
Splishare is operated by Keshav Khatri, an individual based in India, who is the data fiduciary under the Digital Personal Data Protection Act, 2023. Contact: grievance@splishare.com.
What we collect
Account: your name and email address from your Google account when you sign in, and, if you choose to add them, a UPI ID and a profile photo.
Group data: group names and photos, members' names, expenses (description, amount, category, date, who paid, how it is split), recorded payments, receipt photos and comments.
Technical: sign-in sessions, a device token if you allow notifications, and basic server logs (without expense content) needed to run and secure the service.
We do not collect your contacts, location, bank details or payment credentials, and we never move money. Your language, theme and text size are stored on your phone.
Why we use it
To provide the service: sign you in, keep your groups in sync across devices and calculate balances.
To keep it secure and to enforce plan limits. We do not sell your data, show ads, or use third-party trackers.
Who can see it
Members of a group see that group's data, including the names and UPI IDs shown in it. Your email address is never shown to other members.
Service providers process data on our behalf: Google (sign-in, and notifications through Firebase Cloud Messaging), Google Cloud (the app server), Neon (the database) and Vercel (this website). Google Play processes subscription payments.
How long we keep it
While your account is active.
When you delete your account, your email, name, UPI ID, profile photo and sign-in data are erased immediately. What you added to groups (expenses, payments, receipt photos and comments) remains there under "Deleted user" so others' balances stay correct.
Your rights
You can access and correct your data in the app, export it, and delete your account from Profile. You can also write to the grievance officer to exercise your rights under the DPDP Act, including nominating someone to act for you.
If you are not satisfied with our response you may complain to the Data Protection Board of India.
Security
Data is encrypted in transit (TLS) and at rest. On your phone, sign-in tokens are kept in Android's secure storage.
Children
The app is not meant for children under 18.