Effective Date: 16 May 2026 · Last Updated: 16 May 2026
This Service is operated by:
TypeSplit, registered with the Dutch Chamber of Commerce under KVK 99599600.
Vlierweg 12
1032LG Amsterdam
The Netherlands
BTW-id: NL005400371B39
Contact: support@typesplit.com
TypeSplit is the data controller responsible for your personal data as described in this policy. For GDPR purposes, the natural person responsible is Martin Thomas, reachable at the address above.
This policy explains how we process your personal data when you use the TypeSplit mobile application and the website at typesplit.com (collectively, the "Service").
Device Advertising Identifier (IDFA/GAID), precise or approximate location, contacts or address book, photos/videos/audio, browsing or search history, health or biometric data.
As of launch, production analytics event collection is inactive. Events are logged locally on device only and are not transmitted to any server. If analytics collection is enabled in a future update, this policy will be updated accordingly.
Local Storage (Default): All expense data is stored locally on your device using SQLite. This data never leaves your device unless you explicitly enable cloud sync.
Cloud Storage (Optional): When you enable cloud sync, that card's data is stored in Google Cloud Firestore (servers in the EU and US). Cloud-synced data includes card title, currency, participants, expense descriptions, amounts, payers, dates, collaborator membership, and lock status. Cloud sync requires signing in with Apple or Google.
Under the GDPR, we process your data on the following legal bases:
We do not process data for advertising, profiling, or automated decision-making.
With Other Users: When you share a card, collaborators can see the card's expenses, participant names, and your display name.
Third-party service providers:
All processors are bound by data processing agreements and Standard Contractual Clauses (SCCs) for international transfers.
We Never: Sell your data to third parties, share data with data brokers, or use your data for advertising.
Your data may be transferred to and processed in the United States (Firebase, RevenueCat, Sentry). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission and the processors' certified compliance frameworks.
If you are in the European Economic Area, you have the following rights:
We will respond to rights requests within 30 days. No fee is charged for reasonable requests.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
You can delete your account at any time: Settings → Delete Account. This action deletes your user profile from our servers, deletes all cloud cards you own (and their expenses), removes you as collaborator from other users' cards, signs you out, and removes local data from your device. Account deletion is permanent and cannot be undone.
We protect your data with encryption in transit (HTTPS/TLS), encryption at rest (Cloud Firestore), Firebase Authentication tokens, Firestore security rules for user-scoped access, and signed release builds with production certificates.
TypeSplit is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us at support@typesplit.com and we will delete it.
We may update this Privacy Policy. We will notify you of material changes by updating the "Last Updated" date at the top and, where appropriate, via in-app notification. Continued use after changes constitutes acceptance.
TypeSplit, registered with the Dutch Chamber of Commerce under KVK 99599600.
Vlierweg 12
1032LG Amsterdam
The Netherlands
BTW-id: NL005400371B39
Email: support@typesplit.com