Privacy policy

Your privacy matters to us. This policy explains how TypeSplit collects, uses, and protects your information.

Effective Date: 16 May 2026 · Last Updated: 16 May 2026

1. Controller

This Service is operated by:

TypeSplit, registered with the Dutch Chamber of Commerce under KVK 99599600.

Vlierweg 12
1032LG Amsterdam
The Netherlands
BTW-id: NL005400371B39

Contact: support@typesplit.com

TypeSplit is the data controller responsible for your personal data as described in this policy. For GDPR purposes, the natural person responsible is Martin Thomas, reachable at the address above.

2. What This Policy Covers

This policy explains how we process your personal data when you use the TypeSplit mobile application and the website at typesplit.com (collectively, the "Service").

3. Data We Collect

3.1 Data You Provide

  • Display name — Shown to collaborators on shared cards (legal basis: contract performance)
  • Email address — Account identification via Apple/Google sign-in (contract performance)
  • Expense data — Core app functionality (contract performance)
  • Card/group data — Organizing expenses (contract performance)
  • Participant names — Expense splitting (contract performance)

3.2 Data Collected Automatically

  • Crash reports — Diagnosing and fixing bugs (legitimate interest)
  • Performance traces — Monitoring app responsiveness (legitimate interest)
  • Purchase records — Subscription management (contract performance)

3.3 Data We Do NOT Collect

Device Advertising Identifier (IDFA/GAID), precise or approximate location, contacts or address book, photos/videos/audio, browsing or search history, health or biometric data.

3.4 Analytics

As of launch, production analytics event collection is inactive. Events are logged locally on device only and are not transmitted to any server. If analytics collection is enabled in a future update, this policy will be updated accordingly.

4. How Your Data Is Stored

Local Storage (Default): All expense data is stored locally on your device using SQLite. This data never leaves your device unless you explicitly enable cloud sync.

Cloud Storage (Optional): When you enable cloud sync, that card's data is stored in Google Cloud Firestore (servers in the EU and US). Cloud-synced data includes card title, currency, participants, expense descriptions, amounts, payers, dates, collaborator membership, and lock status. Cloud sync requires signing in with Apple or Google.

5. Purposes and Legal Bases

Under the GDPR, we process your data on the following legal bases:

  • Providing the Service — Contract performance (Art. 6(1)(b))
  • Processing purchases — Contract performance (Art. 6(1)(b))
  • Crash reporting — Legitimate interest (Art. 6(1)(f))
  • Performance monitoring — Legitimate interest (Art. 6(1)(f))
  • Responding to support — Contract performance / Legitimate interest

We do not process data for advertising, profiling, or automated decision-making.

6. Data Sharing and Recipients

With Other Users: When you share a card, collaborators can see the card's expenses, participant names, and your display name.

Third-party service providers:

  • Google (Firebase Auth + Firestore) — Authentication, cloud data storage (EU/US)
  • RevenueCat — Subscription/purchase management (US)
  • Sentry — Crash reporting, performance monitoring (US)
  • Apple — Authentication (Apple Sign-In)
  • Google — Authentication (Google Sign-In)

All processors are bound by data processing agreements and Standard Contractual Clauses (SCCs) for international transfers.

We Never: Sell your data to third parties, share data with data brokers, or use your data for advertising.

7. International Data Transfers

Your data may be transferred to and processed in the United States (Firebase, RevenueCat, Sentry). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission and the processors' certified compliance frameworks.

8. Data Retention

  • Account data — Until you delete your account
  • Cloud expense/card data — Until card or account deletion; trashed cards auto-purge after 30 days
  • Local expense/card data — Until you delete it or uninstall the app
  • Crash reports — 90 days (Sentry default)
  • Performance traces — 90 days (Sentry default)
  • Purchase history — Per RevenueCat's retention policy

9. Your Rights (GDPR / EEA)

If you are in the European Economic Area, you have the following rights:

  • Access (Art. 15) — Request a copy of your data via support@typesplit.com
  • Rectification (Art. 16) — Update your display name in Settings; for other corrections, contact us
  • Erasure (Art. 17) — Delete your account in-app (Settings → Delete Account) or email us
  • Data portability (Art. 20) — Export your cards via the app's export feature (CSV/text)
  • Restriction (Art. 18) — Contact us to request restricted processing
  • Object (Art. 21) — Object to processing based on legitimate interest

We will respond to rights requests within 30 days. No fee is charged for reasonable requests.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Account Deletion

You can delete your account at any time: Settings → Delete Account. This action deletes your user profile from our servers, deletes all cloud cards you own (and their expenses), removes you as collaborator from other users' cards, signs you out, and removes local data from your device. Account deletion is permanent and cannot be undone.

11. Data Security

We protect your data with encryption in transit (HTTPS/TLS), encryption at rest (Cloud Firestore), Firebase Authentication tokens, Firestore security rules for user-scoped access, and signed release builds with production certificates.

12. Children

TypeSplit is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us at support@typesplit.com and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by updating the "Last Updated" date at the top and, where appropriate, via in-app notification. Continued use after changes constitutes acceptance.

14. Contact

TypeSplit, registered with the Dutch Chamber of Commerce under KVK 99599600.

Vlierweg 12
1032LG Amsterdam
The Netherlands
BTW-id: NL005400371B39
Email: support@typesplit.com