Split Duo — Privacy Policy

Last updated: August 12, 2026

Split Duo is a shared expense-splitting app for two people. This policy explains what data the app handles, why, and the choices you have. We do not sell your data, show ads, or use it for advertising or cross-app tracking.

Information we handle

• Account: your email address and password (used only to sign you in).
• Profile: a display name, an optional profile photo, and optional payment handles (e.g. a Venmo username) you choose to add so you and your partner can settle up.
• Expense data: the shared expenses you record — merchant, amount, date, category, optional notes, and how each is split — and settle-up records.
• Receipt images: photos of receipts you choose to scan, stored so you can view them later and, when you use the itemize feature, sent to our AI provider to read the line items (see below).
• Location (only if you turn it on): if you switch on nearby merchant suggestions, the app reads your location while you are typing a merchant name so it can suggest shops and restaurants around you. Your device sends the position to our server, which immediately rounds it to a grid square roughly one kilometre across; only that rounded square is used to look up nearby places, and only the rounded square appears in our cache or logs. Your exact position is never written down, and no history of where you have been is kept. The cache of nearby places is not linked to you or your household — it records only the area, so it cannot say who was there. This is off until you turn it on, and you can switch it off at any time in iOS Settings; suggestions then come only from merchants you have entered before.
• Optional integrations: if you connect Google Drive for backups, we store an access token to write to a folder we create. If you add your own AI provider key, it is stored encrypted and used only to process your receipts.

Who can access your information

Information you upload — your expenses, settle-ups, receipt images, profile photo, and payment handles — is accessible only to:

• The members of your household. Split Duo is built for a two-person household, and everything in your household is visible to both members. That is the core function of the app.
• The service providers that operate the app (listed below), which process your data on our behalf to run Split Duo.
• The developer of Split Duo, who operates the service and can access data as needed to run, maintain, support, secure, and debug the app.

We do not sell your data or share it with anyone else, and we do not use it for advertising or cross-app tracking.

Service providers

• Supabase — database, authentication, and file storage.
• Netlify — app hosting and the server functions that process requests.
• Anthropic — when you use receipt itemization, the receipt image is sent to Anthropic's API to extract the line items. It is not used to train models.
• Apple — App Store in-app purchases and push notifications are handled through Apple.
• OpenStreetMap — if you turn on nearby merchant suggestions, the rounded grid square (never your exact position) is sent to the OpenStreetMap Overpass service to look up shops and restaurants in that area. No account information is sent with it.
• Google — only if you choose to connect Google Drive for backups. If nearby merchant suggestions are ever switched to Google's places service, the same rounded square — and nothing identifying you — would be sent there instead.

Security

Within the app, access to your household's data is enforced by row-level security so that only its members can read it. Data is sent between the app and our servers over encrypted HTTPS connections. Receipt images and profile photos are stored privately and are viewable only by you and the members of your household, through short-lived signed links. Any AI provider key you add is encrypted before it is stored, and secret keys are never bundled into the app itself.

Keeping and deleting your data

You can permanently delete your account and data at any time from Settings → Danger zone → Delete account. If your partner is still in the household, the shared ledger remains for them and your entries are no longer attributed to you; if you are the only member, the household and all of its data (expenses, receipts, and history) are deleted.

Children

Split Duo is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the date above.

Contact

Questions about this policy or your data? Contact privacy@splitduo.app.