Privacy Policy

1. Introduction

SplitEazy ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the SplitEazy mobile application available on Android (and iOS) — collectively, the "Service."

Please read this Privacy Policy carefully. By using SplitEazy, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Google Account Information: Name, email address, and profile picture — required for authentication via Google Sign-In.
• Group & Expense Data: Group names, member names, expense titles, amounts, categories, and settlement details you enter into the app.
• UPI ID: Your UPI payment ID, stored solely to facilitate in-app settlement suggestions between group members.
• Magic Actions (Voice & Text): Natural language prompts and audio dictation provided to the Magic Actions feature are processed by AWS Bedrock AI to generate the requested expense parameters. Audio files are processed instantly and are not stored by us.
• User Preferences: Language setting, theme (light/dark), and currency selection stored on your device.

2.2 Information Collected Automatically

• Firebase Analytics: App usage patterns, feature interactions, screen views, session duration, and general usage statistics. This data is aggregated and does not personally identify you.
• Firebase Crashlytics: Crash reports, stack traces, device state at time of crash, and app version — used to identify and fix bugs.
• Device Information: Device model, operating system version, app version, and a non-personally-identifiable device identifier for analytics purposes.
• Advertising Data (Google AdMob): The free tier of SplitEazy displays ads served by Google AdMob. AdMob may collect your advertising ID, IP address, and interaction data to serve contextually relevant ads. We request non-personalized ads by default. See Section 6 for details.

2.3 Information Stored on Your Device

• Local Cache (SQLite): A local database may cache authentication state and preferences for faster app startup.
• AsyncStorage: User preferences such as language and theme selection are stored locally on your device.

3. How Your Data is Stored

3.1 Cloud Storage (Firebase Firestore)

All group data, expenses, member information, and settlement records are stored in Google Firebase Firestore — a cloud database. This enables real-time syncing across devices and allows group members to collaborate. Your data is protected by Firebase Security Rules that restrict access to only authorized users.

3.2 Authentication (Firebase Auth)

User identity and session tokens are managed by Firebase Authentication. We do not store passwords; authentication is handled entirely via Google's OAuth 2.0 system.

3.3 Security Measures

• All data transmissions use HTTPS/TLS encryption
• Firebase Security Rules ensure users can only access their own groups and data
• Passwords are never stored — we use Google's secure OAuth 2.0
• UPI IDs are stored securely and only shared with the relevant group members

3.4 Data Retention

• Group & expense data: Retained until you delete the group or request account deletion
• Analytics & crash data: Retained in aggregated/anonymized form per Google's Firebase data retention policies
• On account deletion: All personal data is permanently deleted from Firebase within 30 days

4. How We Use Your Information

• Authenticate your identity and provide secure access to the Service
• Sync your groups and expenses across devices in real time
• Calculate expense splits and settlement amounts
• Improve app performance, fix bugs, and enhance the user experience through anonymized analytics and crash reports
• Display non-personalized advertisements to free-tier users via Google AdMob
• Process in-app subscriptions via Google Play Billing or Apple App Store
• Comply with legal obligations and protect against fraud or abuse

5. Advertising (Google AdMob)

The free tier of SplitEazy is supported by ads served by Google AdMob, a third-party advertising platform operated by Google LLC.

• What AdMob collects: AdMob may collect your device's advertising identifier (GAID on Android, IDFA on iOS), IP address, and information about your interactions with ads (views, clicks).
• Our default setting: We request non-personalized ads by default, meaning AdMob does not use your browsing history or profile to target ads unless you provide explicit consent.
• Ad-free experience: SplitEazy Pro subscribers see no advertisements. The ad identifier is not accessed for Pro users.
• Google's Privacy Policy: https://policies.google.com/privacy
• Opt-out: You can opt out of interest-based advertising on Android via Settings → Privacy → Ads → Delete advertising ID.

6. Third-Party Services

SplitEazy uses the following third-party services. Each has its own privacy policy:

• Google Firebase (Authentication, Firestore, Analytics, Crashlytics) — Google Privacy Policy
• AWS Bedrock (Natural Language parsing and Voice Dictation for the Magic Actions feature).
• Google AdMob (In-app advertising for free users) — AdMob Privacy
• Google Play Billing (Android in-app purchases & subscriptions) — Payments are processed entirely by Google. We do not store payment card details.
• Apple App Store (iOS in-app purchases & subscriptions, when available) — Processed by Apple. We do not store payment card details.
• Google Sign-In — Authentication via your Google account. SplitEazy only receives your name, email, and profile picture from Google.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data
• Deletion: Request deletion of your account and all associated Firestore data
• Portability: Export your expense data from within the app
• Opt-out of ads: Subscribe to SplitEazy Pro to remove all advertising
• Withdraw consent: Revoke Google Sign-In access at any time via your Google account settings

To exercise these rights or request account deletion, contact us at hello@spliteazy.app.

8. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information. We share data only in these limited circumstances:

• Service Providers: Google Firebase, AdMob, and Google Play — necessary to operate the Service
• Legal Requirements: If required by law, court order, or government authority
• Protecting Rights: To enforce our Terms or protect against fraud, abuse, or security threats
• Group Members (by design): Expense amounts, member names, and settlement data are visible to all members within a shared group — this is the core function of the app

9. Children's Privacy

SplitEazy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has created an account, we will promptly delete the account and all associated data.

10. International Data Transfers

Your data is stored on Google Firebase servers, which may be located outside your country of residence. By using SplitEazy, you consent to the storage of your data on Google's infrastructure, which complies with international data transfer frameworks including GDPR Standard Contractual Clauses.

11. GDPR & Legal Compliance

If you are a resident of the European Union or other jurisdictions with data protection laws, you have additional rights under GDPR and similar legislation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with your local supervisory authority

Our legal basis for processing your data is: (a) performance of a contract — providing the expense-splitting service you requested; (b) legitimate interests — analytics and security; and (c) consent — for advertising (where applicable).

12. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by applicable law, within 72 hours of becoming aware of the breach where legally required.

13. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via in-app notification or email. Your continued use of SplitEazy after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

For privacy questions, data requests, or to report a concern, please contact: