Privacy policy

Information we handle

We store the event information you or another editor enters: event titles, participant and household names, expense descriptions, amounts, who paid, and who shares each expense. This information can relate to identifiable people, even though the app has no accounts.

You do not need to provide an email address or password to use an event. If you contact us, we receive the contact details and message you choose to send. Hosting providers also process technical information, such as IP addresses, request times and device information, to deliver and protect the service.

How we use it

We use event information to save your shared records, calculate suggested settlements, and make the event available to people with its link. We use technical information to operate the site, prevent abuse, diagnose failures and understand overall usage. We do not sell event data or use it for targeted advertising.

Before this draft is finalized, we will confirm the applicable legal bases for processing, including the assessment needed for information entered about other participants.

Shared links and service providers

An event link is an access credential. Anyone who receives it, including through forwarding, can read, change and delete that event. We do not verify the identities of its editors or provide individual access permissions. Keep a copy of important records and avoid entering sensitive information you do not need for splitting expenses.

ChunkJug Labs LLC uses Vercel for hosting and analytics, and Neon for its database. The Neon database is hosted in AWS US West 2 (Oregon, United States). Vercel delivers pages through its global network. These providers process technical information to deliver and protect their services. Full event links can remain in browser history or hosting request logs. Their own administrative and security records follow their published privacy notices. International-transfer requirements still require assessment before worldwide release.

• Vercel privacy notice
• Neon privacy notice

Storage on your device

Your browser remembers recent event links, event names and participant counts, your language, and dismissed getting-started hints. Recent links and preferences remain until removed or browser site data is cleared. Unsaved changes are kept in the current tab’s session storage; they are not a permanent backup.

A language cookie can last up to one year. Clearing browser site data removes local preferences and recent links; it does not delete events from the database.

Analytics and security

We use Vercel Web Analytics to understand overall traffic, including pages visited, device and browser information, and approximate location. It does not use third-party cookies. We remove query parameters and fragments from page URLs before sending analytics events, so the event key is not included in those URLs.

Our rate-limit records use hashed identifiers rather than raw IP addresses. Their expiry is set to two hours after activity; expired records are removed during periodic request-driven cleanup. The app does not currently change its behavior in response to browser Do Not Track signals.

The public API stores hashed creation retry keys and request fingerprints for at least 24 hours to prevent duplicate events. Expired retry records are removed in bounded batches when creation requests arrive. These records may remain briefly after an event is deleted; they do not contain the event link or a copy of its contents. Receipt images are interpreted by your chosen AI client and are not uploaded to our API; that client’s own data practices apply.

• How Vercel Web Analytics handles data

Retention and deletion

Events have no automatic expiry and remain in the live database until deleted. Neon’s current database restore history window is six hours. Vercel’s current Hobby plan makes runtime logs available for one hour; this is not a promise about every record Vercel retains for its own security or administrative purposes. We retain resolved support correspondence for one year after resolution. ChunkJug Labs LLC monitors hello@splitissimple.com for support and privacy@splitissimple.com for privacy requests.

Open the event menu and choose Delete this event to remove the entire event from the live database and disable its link. This affects every participant and cannot be undone through the app. Successful deletion also clears the recent link and recovery draft in that browser and notifies its other open event tabs.

Deletion does not remotely erase exports, screenshots, copied messages or records on other devices. Provider backups and logs may retain information according to their configured retention. Removing a link from recent events only removes that local entry.

Your privacy rights

Depending on where you live and which laws apply, you may have rights to access, correct or delete personal information, obtain a copy, restrict processing, or object to processing. You may also have the right to complain to a privacy regulator. These rights are subject to applicable conditions and exceptions.

There is no automated person-by-person privacy erasure tool. Requests concerning a particular participant need individual assessment: a name alone cannot identify the correct person or event, and a shared link does not prove personal identity. Only information necessary to locate the records and assess identity should be requested. For privacy questions or requests, use the privacy email listed below.

Children’s information

The service is not designed for children under 13. Please avoid entering children’s personal information or other sensitive details in an event.

Changes to this policy

We will publish changes on this page and update the date above. This draft does not claim that all privacy obligations have been completed.