Privacy policy
Last updated: 12 October 2026 · applies to the Splitlife apps for iPhone and Android, the web app and this website
Splitlife helps you share costs, bills and chores and keep track of your student job. It has no advertising, no analytics and no trackers, and your data is never sold or shared for marketing. This policy explains, in plain words, what is stored, where, and why.
- Who is responsible
- What stays on your phone
- Your account
- Groups and expenses with friends
- Inviting people and finding friends
- Notifications
- Scanning receipts
- Siri, Shortcuts and iPhone search
- Exchange rates
- The link to MoneyTrack
- Who processes data for Splitlife
- How long data is kept, and deleting it
- Your rights
- This website
- Children, security and changes
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is:
Meet PatelMünchener Str. 67
85051 Ingolstadt, Germany
Email: patelmeet.2905@gmail.com
Splitlife is a private, non-commercial project. There is no data protection officer, as none is required; write to the email address above with any question.
2. What stays on your phone
These are stored only in the app on your device (or in your browser, for the web app), never on Splitlife’s server:
- your profile: name, home country, the country you live in, currencies and the exchange rate;
- your work shifts, employers, wages, work limits and earnings;
- the tax details you enter for the pay estimate;
- your app settings (appearance, which parts of the app you use).
iCloud backup (iPhone, optional). If you turn it on in Settings, a copy of your profile and shifts is saved in your own iCloud account, so a new iPhone can restore them. Apple stores it under its own privacy terms; Splitlife cannot see it.
3. Your account
When you first open Splitlife it signs you in with a random account ID — no email, no password. If you later save your account, your email address and a password are stored so you can sign in on another device. The password is stored only in a protected (hashed) form; nobody, including the developer, can read it. Emails to confirm your address or reset your password are sent by the sign-in service (see section 11).
The same account also works for MoneyTrack, a separate app by the same developer. A small record notes which of the two apps you use, the name you use in them and when you last opened them, so each app can welcome you back.
Legal basis: Art. 6 (1) (b) GDPR — needed to provide the app you asked to use.
4. Groups and expenses with friends
What you add to a group, or to an expense with a friend outside a group, is stored on Splitlife’s server so the other people in it can see it. That is:
- the group’s name and invite code, the people in it and the display name each of them chose;
- expenses: what for, amount, currency, category, date, who paid, how it is split and each person’s share; repeating expenses; payments recorded between members (“settled up”);
- the shopping list, custom categories, shared bills (name, amount, due dates, who pays, contract end and notice period) and whether they were paid;
- chores: the rota, whose turn it is, turns done, skipped or swapped, and points;
- an activity history (“Nina added Groceries”, “Ben marked Rent as paid”) and reminders you send someone who owes you money.
All of this is visible to the members of that group (or to the people on that expense) and to nobody else. Bills you add under “My bills” are visible only to you. A deleted expense is hidden but kept, so it can be restored if it was deleted by mistake.
A nightly automatic check makes sure every group’s books add up; it records only technical IDs when something doesn’t.
Legal basis: Art. 6 (1) (b) GDPR.
5. Inviting people and finding friends
If you add someone to a group or an expense by their email address and they are not on Splitlife yet, their address is stored with the invitation and they receive one email from Splitlife: who invited them, to which group, or which expense and their share of it, and how to join. The email is sent through Splitlife’s Google email account. If they never join, you can withdraw the invitation and the address is removed.
When you look someone up by email to add them as a friend, Splitlife only tells you whether an account exists. To stop misuse, the time of each search is logged and the number of searches is limited; what you searched for is not stored.
Legal basis: Art. 6 (1) (f) GDPR — the legitimate interest of the person inviting in reaching the people they share costs with, and in preventing misuse.
6. Notifications
If you allow notifications, a device token is stored so Splitlife can tell you when someone adds an expense with you, pays you back, reminds you, when a bill or chore is due, or when a new version is out. The message travels through Apple’s Push Notification service (iPhone), Google’s Firebase Cloud Messaging (Android) or your browser’s push service (web), and contains the text you see. Turning notifications off in the app deletes the token; you can also turn them off in your phone’s settings at any time.
Legal basis: Art. 6 (1) (a) GDPR — your consent, which you can withdraw at any time.
7. Scanning receipts
Scanning a receipt uses your camera or a photo you pick, only when you tap “Scan a receipt”. The text on the receipt is read on your phone — by Apple’s text recognition on iPhone, and by Google’s on-device text recognition (part of Google Play services) on Android. The photo is not uploaded to Splitlife and is not kept by the app. Only what you then save in the expense (for example the total, the shop’s name and the lines) is stored, like any other expense.
8. Siri, Shortcuts and iPhone search
On iPhone you can ask Siri things like “who owes me in Splitlife” or add an expense by voice. Apple processes what you say under Apple’s privacy policy; Splitlife answers on your phone from your own data. Your groups can appear in iPhone search; that index is kept on your device by iOS.
9. Exchange rates
To show amounts in your home currency, the app asks open.er-api.com for a reference rate. The request contains only the currency codes; like any request on the internet, the service sees your device’s IP address.
10. The link to MoneyTrack
If you also use MoneyTrack with the same account and connect the two, MoneyTrack can show your Splitlife balances (what you owe or are owed, per person). Only you see them; nothing is shared with the other people in your groups.
11. Who processes data for Splitlife
| Service | What for | Where |
|---|---|---|
| Supabase Inc. | Database, sign-in, sending notifications and invitations (server) | EU (Ireland) |
| Apple | App distribution, iPhone notifications, iCloud backup, Siri | EU / USA |
| Android notifications (Firebase), invitation emails (Gmail), on-device text recognition | EU / USA | |
| GitHub Inc. | Hosting this website and the web app | USA |
| open.er-api.com | Exchange rates (no personal data apart from the IP address) | — |
Supabase processes data on Splitlife’s behalf under a data processing agreement (Art. 28 GDPR). Where data reaches the USA, the transfer relies on the EU–US Data Privacy Framework or the EU’s standard contractual clauses.
12. How long data is kept, and deleting it
- Data on your phone stays until you delete it (Settings → Export & import → Clear shifts) or uninstall the app.
- Group data is kept while the group exists. When you leave a group, your past expenses stay in its history, because they are part of everyone’s balances.
- Delete your account in the app: Profile → Delete account. Your account, email address, group memberships and notification tokens are deleted. Shared expenses stay with the group, but no longer show your name.
- You can also ask by email; it will be done within 30 days.
13. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). Consent can be withdrawn at any time, with effect for the future. Write to the email address in section 1.
You can also complain to a data protection authority — for example the one responsible for Splitlife: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de — or the one where you live.
Splitlife makes no automated decisions about you.
14. This website
This website sets no cookies, uses no analytics and loads nothing from other services — not even fonts. Like every web host, GitHub logs technical data when you visit (your IP address, the time and the page) to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). The web app stores your personal data (section 2) in your browser’s storage.
15. Children, security and changes
Splitlife is not meant for children under 16. All connections are encrypted (HTTPS), and the server only lets people see the groups they belong to. If this policy changes, the new version is published here with a new date.