Privacy Policy

Split The Bill ("we", "us", "our") operates the website split-the-bill.app and the related web application (together, the "Service"). This policy explains what personal information we collect, why we collect it, and the choices you have.

For the purposes of the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA"), we act as the data controller for the personal information described here. You can contact us at [email protected].

Under the GDPR we rely on the following legal bases:

• Consent (Art. 6(1)(a)) — for sending optional product-update emails, for push notifications (only after you explicitly opt in), and for analytics cookies and the country/device profiling tied to them (see our Cookies Policy).
• Contract (Art. 6(1)(b)) — for providing the account and features (Free or Pro) you sign up for, and for sending an invite you ask us to send on your behalf.
• Legitimate interests (Art. 6(1)(f)) — for basic security logging, spam prevention, aggregate service metrics, and measuring when accounts were last active (visit/retention analytics) so we can maintain and improve the Service. You can object to this at any time — see §7.

We do not sell your personal information. We do not share it with advertisers. We share it only with:

Shared links are served with noindex and X-Robots-Tag: noindex headers so search engines do not index them. Links use long random tokens that are not guessable and can be revoked at any time from your account.

• Our infrastructure and email providers, strictly as processors acting on our instructions under a data processing agreement (DPA)
• Cloudflare — our network and security provider. The free try on our homepage is protected by Cloudflare Turnstile, which checks in the background that a visitor is a person and not a bot, without showing a puzzle. Cloudflare processes the technical data this needs as described in the Turnstile Privacy Addendum.
• Google (Gemini API) and Anthropic — AI providers we use to read and understand the content you submit for extraction: receipts, bills, invoices, wishlists, menus, official notices, and chat messages. They process this content as our processor, under their own data processing terms, solely to return the extracted result to our servers — never to train their models on your data, and never to contact you directly. All calculations (totals, splits, balances) are performed by our own code, never by an AI model.
• TypeSafe AI (Jev) — an AI provider we use to classify a bill we have already read into a fixed set of options (bill type, spending category, item categories), and to help route and match items in messages you type to our chat assistant, with a confidence score. It receives only the already-extracted bill fields (merchant name, item names, total, currency) and the text of messages you type to the assistant — truncated, with email addresses and phone numbers removed. It never receives your receipt image, email attachments, or your contacts. It generates no text and acts as our processor under its own data processing terms, solely to return the classification to our servers.
• BugLens — our issue-tracking widget, present on every page, so you can report a bug or request straight from the app. If you submit a report, we receive its content and basic technical context (page, browser). It acts as our processor and does not use your data for anything else.
• Government authorities where we are legally required (court order, lawful subpoena, or equivalent)
• People you explicitly share a bill or collection with — via a shareable link or a private invite you send from inside the app

Our servers are located in the European Union. If your data needs to leave the EU (for example, to a support tool based elsewhere), we rely on the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.

When you delete a bill, or your whole account, we delete the files you uploaded for it (receipt photos, PDFs, item photos) along with the record.

• Product-update emails: until you unsubscribe.
• Account data and receipts: while your account is active, plus up to 90 days after account deletion to complete backups and handle disputes.
• Billing records: kept as required by tax and accounting law after a subscription ends, handled by our payment provider as merchant of record.
• Server logs: up to 30 days, then deleted automatically.
• Visit activity (last-used date): kept while your account is active, deleted with the account.
• Country, device type, and Google Analytics identifiers: kept only while Analytics consent is granted — turning Analytics off deletes them immediately (see our Cookies Policy).
• Content you send to our AI features (receipts, bills, invoices, wishlists, menus, official notices, and chat messages — from a signed-in account or the anonymous "try it now" tool on our homepage) is retained so we can debug and improve parsing quality, along with basic technical metadata about the request (timestamps, success/failure, processing time). We do not use it for advertising or sell it. You can ask us to delete any of it at any time — email [email protected] and we will remove it.
• The anonymous "try it now" tool does not require an account, so we have no way to contact you about your upload except an email address you choose to leave us. Anonymous tries and splits that are never saved to an account — including the names and email addresses added to a split — are deleted after 90 days; we keep only aggregate counts with no personal data. If you sign up afterward, your free try or split becomes a normal bill in your account and follows the retention rules above instead. If someone unsubscribes from split emails, we keep only a one-way hash of their address so we never email it again.

If you are in the EU, UK, Switzerland, or California, you have the following rights in relation to your personal information. You can exercise any of them by emailing [email protected].

Under the CCPA, California residents have the right to know, delete, and opt out of the sale of their personal information. We do not sell personal information.

• Access — ask for a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — temporarily limit how we use your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — withdraw consent at any time
• Complaint — lodge a complaint with your local data protection authority

The Service uses only strictly necessary cookies — a session cookie to keep you signed in, and a theme preference in your browser's local storage. We do not use advertising or cross-site tracking cookies. No consent banner is required for these essential cookies under ePrivacy rules. See our Cookies Policy for the full list.

We use industry-standard measures — TLS in transit, hashed passwords, encrypted backups, and least-privilege access for our team. No system is perfectly secure, so we encourage you to choose a strong, unique password.

We may update this policy to reflect changes in the Service or the law. When we do, we will change the "Last updated" date at the top and, if the change is material, notify you by email or a banner inside the app.

Questions or requests? Email [email protected]. We respond within 30 days.