CheckSplitter lets people scan a receipt, claim their items, and settle up via Venmo, Cash App, or PayPal. This policy explains what we collect, why, and what you can do about it. We've written it in plain language because that's what privacy policies should be.
| What | Where it comes from | Why | How long |
|---|---|---|---|
| Device ID — a random identifier created the first time you open the app | Generated on your device; stored in secure storage | Lets you use the app without an account or email | Until you uninstall |
| Display name | You type it during onboarding | Shown to the other people at your check | Until you change or delete it |
| Payment handles — your Venmo / Cash App / PayPal usernames | You enter them in the app | Used to build payment deep links (e.g., Venmo pre-filled with handle + amount) | Until you change or delete them |
| Check history — past checks, items claimed, amounts, co-participant names | Created as you use the app | Powers your history tab and lifetime stats | Until you ask us to delete it (Section 6) |
| Push token | Issued by your OS after you grant notification permission | Settlement and payment notifications | Until you uninstall or revoke permission |
| IP, User-Agent & basic browser signals — screen size and timezone | Included in HTTP requests, or read from your browser when you open a check link | Only for the deferred deep-link feature: if you tap a check link in a browser before the app is installed, we store your IP, User-Agent, and basic browser signals (screen size and timezone) for up to 15 minutes so we can match you to the right check after install. | Max 15 minutes, auto-purged |
We do not collect your email, phone number, real name, location, contacts, photos, or any payment card or bank information. We never touch actual payments — Venmo, Cash App, and PayPal handle those entirely within their own apps.
We do not use your information for advertising, profiling, or automated decision-making.
We do not sell, rent, or trade your information. We share limited data with these service providers, solely to run the app:
| Service | What they receive | Why |
|---|---|---|
| Sentry · sentry.io | Crash reports and error logs, which may include app state at the time of the crash | Error tracking — finds and fixes bugs |
| BetterStack · betterstack.com | Structured server logs (request metadata, error messages); uptime monitoring | Observability — keeps the service healthy |
| Expo Push · expo.dev | Push notification token and notification payload | Relays notifications to Apple (APNs) and Google (FCM) |
| Railway · railway.app | All data stored in our database (as the cloud hosting provider) | Infrastructure — hosts our servers and database |
We may also disclose information if required by law, court order, or to protect the rights and safety of our users or others.
We keep your data for as long as you use the app. If you uninstall, your device ID and associated data stay on our servers — we have no way to know you've uninstalled. Request deletion any time (Section 6).
Deep-link data (IP, User-Agent, screen size, and timezone) is automatically deleted after 15 minutes and never stored beyond that window.
All communication between the app and our servers uses HTTPS (TLS). Your device ID is stored in your device's secure storage (iOS Keychain / Android Keystore). We use industry-standard practices to protect data at rest and in transit.
No transmission or storage is 100% secure. We can't guarantee absolute security, but we take it seriously and will notify affected users if a breach is likely to affect them.
CheckSplitter is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it promptly.
We may update this policy from time to time. When we do, we'll update the effective date above. For significant changes, we'll post a notice inside the app.
Questions, data deletion requests, or anything else: