Split! Privacy Policy

Last updated: December 7, 2025

Scope

Welcome to Split!'s Privacy Policy. Your right to privacy and online security is important to us. This Privacy Policy describes how Camellia Studios LLC ("we," "us," or "our") collects, protects, discloses, and uses the personal information provided to or collected through our Split! mobile application and related services (the "Service"). This Privacy Policy applies to all users of Split!.

If you do not agree with any of the practices described in this Privacy Policy, please do not use our Service.

Quick Overview

Split! is a shared expense tracking application for friends, roommates, and groups. You choose who you share your expenses with and what kind of expenses you want to share. When you share an expense, the details of those transactions are visible to those you share them with, whether an individual friend or a group. Anyone shared on an expense or seeing the expense in a group has the ability to edit, delete, and undelete the expenses that have been shared with them. Expenses you add in Split! are not made public.

In order to use Split!, you will need to create an account, which requires providing some registration information such as name and email address. We use this information to manage your account, including contacting you when necessary. The information can also be used so that your friends can find you and so you can access your account from anywhere.

In addition to sharing your personal information to set up your account, we collect some other information about you, such as the type of device you use and your IP address. We use this information to help secure our Service. We may also collect information about the type of expenses you add or the groups you create. We use this information to help improve and secure our Service. We use PostHog, a privacy-focused analytics platform, to understand how users interact with our app and to improve the user experience.

We don't share your personal information with third parties for marketing purposes. We will never share your information with other parties for use other than as described in this Privacy Policy without your consent.

Split! and its service providers maintain operations in the United States and may process your personal information outside the country where you are located. Some of those jurisdictions may not provide the same level of data protection as your home jurisdiction. By choosing our Service and providing information to us, you agree and consent to the transfer, storage, and processing of your personal information in countries other than your home country. Regardless of location, we apply technical, organizational, and contractual safeguards designed to protect your personal data and ensure it is processed in line with this Privacy Policy.

Split! is not intended for use by children under 13 years of age. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us at support@camellia.studio and we will promptly delete that information.


DATA WE COLLECT AND HOW WE USE IT

When you use Split!, we may collect the following information about you:

Information You Provide to Us

Registration Information:

When you sign up for an account with Split!, you will be asked for your name, email address, and a password. We require you to provide an email address so that we can contact you about your account and so you can access your data from any device. Friends will be able to add you as a contact in the application using your email address. You can make changes to this information at any time from your Account Settings or by emailing us at support@camellia.studio.

User-Generated Content:

When using the Service, you may provide us with information concerning shared expenses and payments, including group names, expense descriptions and amounts, payments, comments and notes, receipt images (for Premium users), and split configurations. This information will be shared with contacts you specify in the course of using the Service. For example, if you add an expense with a group of roommates, those roommates will be able to see the expense, the amount, the description, the currency, the category, the date, comments and edits, any attached receipts (if you're a Premium user), and the split information. You are solely responsible for which contacts you share this information with.

The Way You Use Our Service:

We collect information about how you use and interact with Split!. That information includes the features you use, the actions you take, and the time, frequency, and duration of your activities. We use PostHog, a privacy-focused product analytics platform, to collect and analyze usage data such as in-app activities, feature interactions, and session information. This helps us understand user behavior patterns, identify bugs, and improve app performance. The data collected does not include the actual content of your expenses (such as expense descriptions or amounts). We use that information to improve our Service, including the creation of new features.

Information Shared by Others:

Other Split! users may share information with you using your contact information (such as email address), and that information will be stored in the Service. For instance, if a contact of yours shares an expense with you or adds you to a group using your email address, Split! may notify you and store that information under your account.

Device and Location Information:

When you download or use Split!, we will receive information about your device and approximate location, your operating system and app version. We use that information to provide the Service, to improve our Service, and for account security and regulatory compliance. We do not track your precise location.

Billing Information:

Split! offers paid premium services ("Split! Premium") through the Apple App Store and Google Play Store. Payment processing is handled entirely by Apple and Google through RevenueCat, our subscription management provider. We do not collect or store your credit card information, debit card information, or any payment credentials. We only receive confirmation of your subscription status from RevenueCat.

Information from Other Sources:

We may use publicly available information about your email address to help you during support or to address fraud or security concerns. For instance, if you contact support, we may verify your account ownership using your email address.

Other Information:

We may request other information from you such as feedback, questions, comments, or suggestions. We will use that information to improve the Service or as otherwise specifically described at the time of collection.


MORE INFORMATION ABOUT HOW WE USE DATA

As described above, Split! is designed to help people share expenses and informal IOUs with friends. We process your information to provide, support, and secure our Service (both automatically and manually). For example, we may use your information in some of the following ways:

  • To record informal records of expenses, IOUs, and payments
  • To fulfill your requests for certain products and services
  • To help your Split! contacts manage their Split! relationship with you. For example, we may display your Split! email address to your Split! friends and group members so they may identify that they are sharing bills with the correct person
  • To respond to your inquiries about our services. For example, if you or a Split! friend of yours contacts us for support, we may access your account to help provide support to you or a friend
  • To detect and protect against errors, fraud, or other criminal activity
  • To use your information for internal security purposes. For example, we may use device information to monitor suspicious activity, such as detecting that a single account is being accessed from multiple devices
  • To verify your identity in the event you contact us for assistance
  • To analyze service usage, perform product development, troubleshooting problems, analysis of user behavior, or other efforts to improve our Service quality
  • To alert you to software compatibility issues and to improve our app design and functionality
  • To communicate with you. For example, we will email you when you have important account notifications. All optional emails can be controlled by going into your Account Settings. Some emails, such as updates to our Privacy Policy, information about your account, password resets, or other security issues are not optional
  • To enforce our Terms of Service

MORE INFORMATION ABOUT THIRD-PARTY SERVICES

Cloud Infrastructure and Database

Split! uses Supabase as our backend infrastructure provider. Supabase provides database hosting, authentication services, cloud storage for receipts (Premium feature), and real-time synchronization. Your data is stored on Supabase's servers, which are located in the United States. Supabase is SOC 2 Type II certified and compliant with GDPR. You can view Supabase's privacy policy at https://supabase.com/privacy.

Subscription Management

Split! uses RevenueCat to manage Premium subscriptions. RevenueCat processes subscription information from Apple App Store and Google Play Store and communicates your subscription status to Split!. RevenueCat does not have access to your payment information (which is handled entirely by Apple and Google). You can view RevenueCat's privacy policy at https://www.revenuecat.com/privacy.

Email Delivery

Split! uses Resend as our email service provider to send account-related emails such as password resets, account notifications, and support communications. Resend processes your email address and name solely for the purpose of delivering these emails. You can view Resend's privacy policy at https://resend.com/legal/privacy-policy.

Product Analytics

Split! uses PostHog, a privacy-focused analytics platform, to collect usage data such as in-app activities, device information, and session data. This helps us understand how users interact with our app, identify bugs, and improve performance. PostHog does not collect the actual content of your expenses (such as descriptions or amounts), receipt images, or payment information. PostHog is GDPR compliant and SOC 2 Type II certified. You can view PostHog's privacy policy at https://posthog.com/privacy.

We do not use Google Analytics, Facebook SDK, or other invasive tracking services. We do not track your behavior across other websites or apps. We do not use advertising identifiers or participate in ad networks.

Third-Party API Usage

Split! does not currently provide a third-party API. We do not allow other applications to access your Split! account data.


MORE INFORMATION ABOUT HOW WE SHARE YOUR INFORMATION

Vendors

We use third-party service providers to help provide, support, and improve our services. Our vendors include:

  • Supabase: Cloud hosting, database management, authentication, and file storage
  • RevenueCat: Subscription management and payment processing coordination
  • Resend: Email delivery services
  • PostHog: Product analytics and user behavior analysis

Our vendors are contractually obligated to protect your information in keeping with the terms of this Privacy Policy and applicable data protection laws. We do not allow our vendors to use your data for their own purposes or to share it with third parties.

We Don't Share for Marketing

We don't share your personal information with third parties for marketing purposes. We do not sell, rent, or trade your personal information to third parties.

For Legal Matters

We will disclose personal information when required by applicable law and will do our best to ensure that such disclosures are limited and proportionate. For example, we may disclose information:

  • To respond to subpoenas, court orders, or bona fide legal processes
  • In order to investigate, prevent, defend against, or take other action regarding violations of our Terms of Service, illegal activities, suspected fraud, or situations involving potential threats to the legal rights or physical safety of any person or the security of our network or Service
  • To respond to claims that any posting or other content violates the rights of third parties
  • In an emergency, to protect the health and safety of our users
  • As otherwise required by any applicable law

Business Transfer

If our company or our assets are acquired by another company, the transfer may include our customer information. In that case, the acquiring party will assume the rights and obligations regarding such information as described in this Privacy Policy.

Non-Identifiable Information

We may disclose non-personal, aggregated information to help us determine how we can improve our Service. For example, we may analyze aggregate usage patterns to improve app performance. This information cannot be used to identify you personally.


SECURITY

How We Protect the Information We Collect

We take the security of your information seriously. We use technical and administrative security measures such as:

  • Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL encryption
  • Authentication: Your password is hashed using bcrypt before storage. We never store passwords in plain text
  • Access Controls: We implement role-based access controls and Row Level Security (RLS) policies in our database to ensure users can only access data they're authorized to see
  • Rate Limiting: We implement rate limiting on sensitive operations to prevent abuse and brute-force attacks
  • Abuse Detection: We monitor for suspicious activity patterns and automatically flag potential security threats
  • Regular Security Audits: We regularly review our security practices and update them as needed

Please understand, however, that while we try our best to safeguard your personal information once we receive it, no transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.

You can help protect the privacy of your own information by:

  • Using a strong, unique password for your Split! account
  • Not sharing your password with others
  • Logging out of your account when using shared devices
  • Keeping your device's operating system and the Split! app updated

We will contact you as required by applicable law in the event of a breach of the security, confidentiality, or integrity of our systems.


COOKIES AND TRACKING TECHNOLOGIES

Split! is a mobile application and does not use cookies in the traditional web sense. However, we do use similar technologies:

Local Storage:

We store certain information locally on your device, such as your authentication token and app preferences. This allows you to stay logged in and maintains your app settings.

Device Identifiers:

We may collect device identifiers (such as device model and operating system version) for security purposes, to provide technical support, and for analytics through PostHog. These identifiers help us understand which devices and operating systems our users are using so we can optimize the app experience.

Analytics Identifiers:

PostHog generates an anonymous identifier for analytics purposes. This identifier is used solely within our app to track in-app activities and app performance. It is not shared with advertising networks and cannot be used to track you across other websites or apps.

No Cross-Site Tracking:

We do not track your activity across other websites or apps. We do not use advertising identifiers or participate in ad networks. PostHog analytics are confined to Split! and do not track your behavior outside of our app.


CHOICE AND ACCESS; CLOSING YOUR ACCOUNT; DATA RETENTION

Choice and Access to Your Personal Information

You may access, review, and update the personal information you have submitted to us at any time. You can make changes to your personal information from your Account Settings. If you need help updating or correcting your information, please contact us at support@camellia.studio.

Your Choices Regarding the Data We Collect and Process

In many instances, you have choices about the information you provide and limiting how we use your information. These choices, and any related consequences, are described below:

Personal Information:

You may choose not to provide your personal information, such as your name or email address, but then you might not be able to use the Service.

Analytics Data:

Analytics collection through PostHog is essential to help us improve the app, identify bugs, and optimize performance. This data is anonymized and does not include the content of your expenses. If you have concerns about analytics, please contact us at support@camellia.studio to discuss your options.

Emails and Notifications:

We may send periodic service-related information via email or push notifications. You may choose whether or not you want to receive those optional communications by indicating your preference in your account profile. Please note that certain service-related messages (such as password resets) that we send are necessary for the proper functioning and use of the Service and you may not have the ability to opt out of those messages.

Location Tracking:

Most mobile devices allow you to control or disable the use of location services by any application on your mobile device through the device's settings menu. Split! does not track your precise location.

Allow Friends to Find You:

Friends with your email address will be able to send you friend requests and share expenses with you. This is a core feature of the Service and cannot be disabled.

Receipt Upload (Premium Feature):

If you're a Premium user, you have the choice to upload receipt images to expenses. This is optional. If you choose to upload receipts, they are stored securely in our cloud storage and are subject to a 10GB storage limit per user.

Choices When Closing Your Account - Deletion

You may close your Split! account at any time in the Account Settings area of the application. When you close your account, we will permanently delete your account and personal information.

Account Deletion Process:

  1. Navigate to Account Settings in the app
  2. Select "Delete Account"
  3. Confirm your decision
  4. Your account will be marked for deletion

What Happens When You Delete Your Account:

  • 30-Day Grace Period: Your data is retained for 30 days to allow for account recovery if you change your mind. During this period, you can contact support@camellia.studio to restore your account.
  • After 30 Days: All of your personal information (name, email, profile picture) is permanently deleted from our systems.
  • Shared Expense Data: Expenses and payments that you shared with others will remain visible to those users, but your personal information will be removed. This is similar to how deleting an email account doesn't delete the email from the recipient's account.
  • Financial Records: Transaction records may be retained for up to 7 years as required by financial record-keeping laws, but will be de-identified (your personal information removed).
  • Receipt Images: If you're a Premium user, all receipt images you uploaded will be permanently deleted after the 30-day grace period.

Immediate Deletion:

If you need your data deleted immediately (without the 30-day grace period), please contact us at support@camellia.studio with your request. We will process immediate deletion requests within 30 days, subject to legal retention requirements.

Data Retention

We will retain your information as long as necessary to serve you and as otherwise required to operate our business, all in accordance with applicable laws and regulations. Specifically:

  • Active Accounts: Data is retained for as long as your account is active
  • Deleted Accounts: 30-day grace period, then permanent deletion
  • Financial Records: Up to 7 years as required by tax and financial record-keeping laws
  • Security Logs: Audit logs and security-related data may be retained for up to 2 years for fraud prevention and security purposes
  • Backup Systems: Data in backup systems is purged according to our backup retention schedule (typically 90 days)

As noted above, when you delete personal information, expenses, payments, and related information involving you (either that you have shared or that have been shared with you) may remain visible to people with whom they have been shared as part of their records.


LEGAL BASIS FOR PROCESSING (GDPR AND OTHER DATA PROTECTION LAWS)

We process personal data only when we have a valid legal basis under applicable data protection laws. For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar data protection laws, this means we rely on the following legal bases:

Consent:

When you create an account and agree to this Privacy Policy, you provide consent for us to process your personal data as described herein. You may withdraw your consent at any time by deleting your account.

Contractual Necessity:

Processing is required to provide the Service you request, such as creating your account, recording shared expenses, enabling real-time synchronization, and providing Premium features if you subscribe.

Legal Obligations:

When processing is necessary to comply with legal or regulatory requirements, including fraud prevention, abuse detection, and financial reporting obligations.

Legitimate Interests:

When processing is needed to maintain the security and integrity of our Service, to prevent abuse, to provide customer support, or to improve our offerings, provided those interests are not overridden by your rights and interests.

No matter where you're located, we apply appropriate safeguards and honor the rights available to you under the data protection laws that apply in your jurisdiction.


YOUR RIGHTS UNDER DATA PROTECTION LAWS

Depending on your location, you may have certain rights regarding your personal information:

Right to Access:

You have the right to request a copy of the personal information we hold about you.

Right to Rectification:

You have the right to correct inaccurate or incomplete personal information.

Right to Erasure ("Right to be Forgotten"):

You have the right to request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).

Right to Restrict Processing:

You have the right to request that we limit how we use your personal information in certain circumstances.

Right to Data Portability:

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider.

Right to Object:

You have the right to object to processing of your personal information based on legitimate interests.

Right to Withdraw Consent:

Where we rely on consent, you have the right to withdraw it at any time.

Right to Lodge a Complaint:

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe we have violated your data protection rights.

To exercise any of these rights, please contact us at support@camellia.studio. We will respond to your request within 30 days.


CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know:

You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.

Right to Delete:

You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale:

We do not sell your personal information to third parties. We have not sold personal information in the past 12 months.

Right to Non-Discrimination:

You have the right not to receive discriminatory treatment for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at support@camellia.studio or mail us at:

Camellia Studios LLC
5830 E 2nd St, Ste 7000 #25591
Casper, Wyoming 82609
United States of America


INTERNATIONAL DATA TRANSFERS

Split! is operated from the United States. If you are located outside the United States, please be aware that information we collect will be transferred to, processed, and stored in the United States. The data protection laws in the United States may differ from those in your country of residence.

By using the Service, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

We implement appropriate safeguards for international data transfers, including:

  • Standard contractual clauses with our service providers
  • Ensuring our service providers are compliant with applicable data protection frameworks
  • Implementing technical and organizational security measures

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice in the app. Changes are effective immediately upon posting unless otherwise stated. The date last revised appears at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.


CHILDREN'S PRIVACY (COPPA COMPLIANCE)

Split! is not intended for use by children under 13 years of age. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately.

If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us immediately at support@camellia.studio. We will take steps to remove that information from our servers and terminate the child's account.


CONTACT US

If you have questions or concerns regarding this Privacy Policy, please contact us:

Camellia Studios LLC
5830 E 2nd St, Ste 7000 #25591
Casper, Wyoming 82609
United States of America

Email: support@camellia.studio
Website: https://camellia.studio

For privacy-related inquiries, please include "Privacy Policy" in the subject line of your email.


SUMMARY OF KEY POINTS

What information do we collect?

Name, email, password, expense data, receipt images (Premium), device information, IP address for security, and anonymized usage analytics through PostHog (in-app activities and session data, but not expense content).

How do we use your information?

To provide the Service, enable expense sharing, improve the app, provide customer support, and ensure security.

Do we share your information?

Only with our service providers (Supabase, RevenueCat, Resend, PostHog) who are contractually obligated to protect it. We never sell your data or share it for marketing purposes.

How long do we keep your information?

Active accounts: indefinitely. Deleted accounts: 30 days, then permanently deleted (except financial records retained for 7 years as required by law).

What are your rights?

You can access, correct, or delete your information at any time. You can close your account and request data deletion.

How do we protect your information?

Encryption, authentication, access controls, rate limiting, and regular security audits.

Do we use cookies or tracking?

No cookies. We use PostHog for privacy-focused product analytics (in-app activities only, not expense content). No cross-site tracking. No advertising networks. We only use local storage for app functionality.

Is Split! for children?

No. Split! is not intended for children under 13. We delete accounts of underage users immediately upon discovery.


End of Privacy Policy

This Privacy Policy is effective as of November 30, 2025.