SplitPay Privacy Policy
Last updated: 13 October 2026
SplitPay ("the app") is an expense-splitting utility. This policy explains what data the app handles, who can see it, how long it is kept and how to have it removed.
What we collect
SplitPay has no user accounts. We do not collect email addresses or location data, and the app never reads your address book.
Content you create. The app stores what you type or attach:
- Group names, descriptions and member names
- A member's phone number, only if you choose to add one
- Expense records (title, amount, date, category, notes, who paid, how it is split)
- Settlement records and, in "Pay through one person" groups, the details you enter for that person (name, account or UPI reference, notes)
- Optional receipt photos you attach to expenses
- The group's activity history (who added, changed or removed what)
When adding a group member you can optionally use your device's contact picker. The picker is provided by the operating system; the app receives only the single contact you choose (name, and on iOS the phone number) and stores it as that group member's details. The app has no access to the rest of your contacts.
Device identifiers for notifications. To notify you when something changes in a group, the app stores a Firebase Cloud Messaging device token together with a random install id, once for every group the device has joined. The install id is generated by the app on first launch; it is not your advertising id and is not linked to your identity. Entries you make in a group carry this install id so that your own device is not notified of your own changes.
Crash reports. The app uses Firebase Crashlytics. A crash report contains the device model, the operating system version, the app version and the technical state of the app at the moment of the crash. Crash reports are not linked to your identity.
Usage statistics. The app uses Firebase Analytics to collect anonymous usage statistics: screens viewed and feature usage such as "a group was created" or "an expense was added", with counts and option names only. No names, titles, amounts or group contents are sent to Analytics. This data is not linked to your identity.
Who can see a group
Everything in a group is visible to anyone who has that group's invite code or invite link. That includes member names, a member's phone number where one was added, every expense, settlement, receipt photo and the activity history. Anyone with the code or link can also add to and change the group. Share a code only with the people the group is for. A group's invite code can be reset in the app, which stops the old code from working in current versions of the app; people who already joined stay in the group.
Where it is stored
Content is stored in Google Firebase (Cloud Firestore and Cloud Storage), operated by Google LLC. Data is encrypted in transit (TLS) and at rest. A copy is cached on your device so the app works offline.
How it is used
Your content is used solely to provide the app's functionality: showing expenses, computing balances, syncing between devices and sending group notifications. We do not sell your data, share it with third parties for their own purposes, or use it for advertising. Google processes it on our behalf as the provider of Firebase.
Retention
- Group content and activity history are kept for as long as the group exists.
- Receipt photos are kept for as long as the group exists, including the photo of an expense that was later deleted from the group.
- Notification tokens are kept until the device leaves the group, the token stops being valid, or the group is removed.
- Deleted groups are kept for 7 days so they can be restored, then removed permanently together with their expenses, settlements, activity history, receipt photos, notification tokens and invite codes.
- Backups. We do not keep our own backup copies of group data. After deletion, data can remain in Google's systems for a limited time under Google's own deletion process.
- Crash reports and usage statistics are kept under Google's standard retention for Crashlytics (90 days) and Analytics (up to 14 months).
Deletion
- Leaving a group removes the group from your device and deletes your device's notification token for it. The group and what you added to it stay for the remaining members.
- "Delete for everyone" marks the group as deleted for all members. It can be restored for 7 days; after that all of the group's data is removed from our servers.
- Deleting an expense removes it from the group.
- Uninstalling the app removes the copy cached on your device.
For any deletion or data request, write to admin@shubhpanchang.com with the group's invite code. Because the app has no accounts, the invite code is how we identify the data.
Children
SplitPay is a general-audience finance utility and is not directed at children under 13.
Changes
We may update this policy; the "Last updated" date will change when we do.