Privacy Policy

Splityaar (“we”, “the app”) helps friends split trip expenses at splityaar.online. This policy explains what we collect, why, and your choices.

What we collect

• From Google sign-in: your name, email address, profile photo and Google account identifier. We request only the basic openid, email and profile scopes. We never see your Google password and never access your Gmail, Drive, contacts or any other Google data.
• What you add: trips, expenses (amounts, descriptions, dates, categories, who paid and how it is split), and the names of people you add who are not on the app.
• Your Splityaar code: a 3-letter code we generate so friends can add you to trips. If someone enters your code they can see your name and profile photo.
• Technical data: a session cookie that keeps you signed in, and standard server logs (such as IP address and request time) kept by our hosting provider for security and debugging.

How we use it

• To sign you in and show your trips, expenses and balances.
• To let other members of a trip see the trip’s expenses, member names and balances.
• To keep the service secure and fix problems.

We do not sell your data, show ads, or use it for profiling.

Who can see your information

• Trip members can see everything inside trips you share with them, including expenses you add.
• Other users cannot see your email address. They see your name, photo and (if they enter it) your code.
• If you add someone by name who is not on the app, their name is stored as a placeholder. If they later sign in with the email address you or they used, the placeholder is linked to their account.

Service providers

We use Google (sign-in), Vercel (hosting) and MongoDB Atlas (database). They process data only to provide their services to us.

Retention and deletion

We keep your data while your account exists. You can ask us to delete your account and personal data at any time; shared expense records in trips that other people still use may be kept in anonymised form so their balances stay correct.

Security

Traffic is encrypted with HTTPS, access to every page and API is restricted to signed-in users, and trip data is only returned to members of that trip. No system is perfectly secure, but we work to protect your data.

Children

Splityaar is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy. The “last updated” date above shows the latest version.

Contact

Questions or requests can be sent to the address of the person who invited you, or to the site operator at splityaar.online.