Privacy Policy

SplitRite ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

Information We Collect

Account Information

When you sign in, we collect:

• Name and email address (provided by your Google account)
• A unique user identifier for authentication

Trip and Expense Data

When you use the App, we store:

• Trip names and descriptions you create
• Expense details (amounts, descriptions, how they are split)
• Settlement records
• Participant lists (names and email addresses of people you invite)

Device Information

We generate and store:

• A random device identifier used for sync conflict resolution

We do not collect your IP address, location, device model, or any other device telemetry.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Sync your trip data across devices
• Enable group collaboration on shared trips
• Process invite links so others can join your trips
• Resolve sync conflicts between concurrent edits

How Data Is Stored

Trip data is stored locally on your device first (offline-first architecture) and synced to our cloud backend (Supabase) when an internet connection is available. Data is encrypted in transit using TLS.

Authentication tokens are stored securely on your device using platform-native secure storage (Keychain on iOS, Keystore on Android).

Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Trip participants: People you invite to a trip can see the trip's expenses, balances, and participant names.
• Service providers: We use Supabase for authentication, database, and file storage. Your data is processed on their infrastructure under their privacy policy.
• Legal requirements: We may disclose information if required by law or in response to valid legal requests.

Data Retention

We retain your trip data for as long as your account is active. Local data on your device persists until you uninstall the App or clear its storage. You may request deletion of your cloud data at any time.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Export your data in a portable format
• Object to or restrict certain processing

Third-Party Services

The App uses the following third-party services:

• Google Sign-In: For authentication. Subject to Google's Privacy Policy.
• Supabase: For cloud storage and authentication. Subject to Supabase's Privacy Policy.

Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.