Privacy policy
Your money talk stays yours.
Splitness keeps the ledgers you share and the little it needs to sign you in. No ads, no trackers, nothing sold. Effective 15 November 2026.
Without an account
You can use Splitness without signing in. Then nothing leaves your device: your ledgers live only on it.
When you sign in
We keep the following, only to run Splitness for you:
| What | Why | Kept |
|---|---|---|
| Email address | To sign you in with a one-time code | Until you delete your account |
| Account id | To tell your account apart from others | Until you delete your account |
| Your name and default currency | So people in your ledgers know it's you, and new ledgers start in your currency | Until you delete your account |
| Payment details you add | Shown to the members of your ledgers, and on your statements, only if you turn on Show to members, so friends can pay you | Until you remove them or delete your account |
| Ledgers you sync | Ledger names, entries and their text, amounts and balances, member names you type, categories and settle rules, so everyone sees the same numbers | While the ledger exists |
| Sync records | Which change came from which account, so devices stay in step | While the ledger exists |
| Backups | To recover from a failure | 30 days, then deleted |
What stays on your device
- Ledgers you keep on this device only. They are never sent to us.
- Voice input. Speech is turned into text on your device; the audio never leaves it.
- Widgets read balances from the app on your device.
What we don't do
- No ads, and no advertising or analytics code in the app.
- No tracking across apps or websites.
- We don't sell, rent or share your data with anyone for their own use.
- No access to your contacts, photos or location.
Who can see your data
- People in a ledger see that ledger's entries and members, according to their role. People you add as guests have no account and see nothing unless they join.
- Service providers that run Splitness for us, under their own privacy terms: Cloudflare carries traffic between the app and our server and hosts this website; Resend sends the sign-in code emails, so it receives your email address. Apple distributes the app through the App Store.
- The law. We would disclose data only if a valid legal request required it.
Where it lives
Your account and shared ledgers are stored in a database on a server we run ourselves. The app talks to it over an encrypted connection through Cloudflare. Like any internet service, Cloudflare and our server's request logs see your IP address while a request travels, to deliver it and keep the service safe. We don't store it with your account.
Deleting your account
In the app, go to You › Account › Delete account. After you confirm with a code sent to your email:
- Your sign-in, name, email and payment details are erased at once.
- Ledgers only you were in are deleted. For ledgers you own with other members, you choose to hand each one to someone else or delete it for everyone.
- In ledgers other people own, your entries stay so their balances don't change; you appear there as a guest under your name.
- Backups that still hold your data are deleted within 30 days. If you contact us within those 30 days from the same email, we can restore your account from a backup.
You can also email [email protected] from the address on your account and we'll delete it for you.
Your choices
You can see and edit everything Splitness holds in the app, export a backup file, and delete your account at any time. To ask what we hold about you, or to correct or delete it, email [email protected].
Children
Splitness is not made for children under 13, and we don't knowingly collect their data.
This website
This site sets no cookies and runs no analytics. Cloudflare, which serves it, processes standard request data such as IP addresses to deliver and protect the site.
Changes
If this policy changes, we'll update it here and change the date above. For a significant change, we'll also tell you in the app.
Contact
Bronxmind, maker of Splitness · [email protected]