SplitMate Privacy Policy

Effective Date: August 11, 2026
Last Updated: August 11, 2026

Welcome to SplitMate (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring you have a positive experience when using our mobile application (the “App”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use SplitMate. This policy strictly complies with the Google Play Developer Program Policies, including the User Data Policy, Prominent Disclosure, and Consent requirements.

By downloading, accessing, or using SplitMate, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information directly from you, automatically through your use of the App, and from third-party services when authorized by you.

A. Personal Information You Provide

  • Account Information: Name, email address, profile photo, and authentication credentials when you register via Email, Google Sign-In, or Apple Sign-In.
  • Financial & Expense Data: Group details, expense titles, amounts, split percentages/ratios, settlement records, notes, and uploaded receipt images. (Note: SplitMate is a expense-tracking application; we do not store raw credit card numbers or process banking transactions directly).
  • User Communications: Support inquiries, feedback, or messages sent to app support.

B. Device Permissions & Technical Data

With your explicit consent, SplitMate may request access to device permissions to enable specific features:

  • Contacts (expo-contacts): Accessed only when you explicitly search for or sync contacts to invite friends to groups or split expenses. We do NOT upload or store your entire address book on our servers without your knowledge.
  • Camera & Media Library (expo-camera, expo-media-library, expo-image-picker): Used to capture or upload profile photos and receipt images.
  • Push Notifications (expo-notifications): Used to send push notifications regarding expense updates, payment reminders, settlement requests, and group activity.
  • Biometric Data (expo-local-authentication): Used strictly on-device for local app lock/unlock functionality (Face ID / Fingerprint). Biometric template data is managed by your device OS and is NEVER transmitted to or stored on our servers.

C. Technical & Diagnostic Information

  • Device Identifiers & App Usage: Device model, operating system version, unique device tokens (e.g., Expo push token), app version, and crash logs to monitor stability and performance.

2. How We Use Your Information

We use the collected information for the following business and operational purposes:

  1. Provide and Manage Core App Features: To calculate expense balances, manage groups, process settlements, and synchronize balances across group members in real-time.
  2. Account Authentication: To securely verify your identity using Firebase Authentication and third-party OAuth providers (Google Sign-In).
  3. Notifications & Reminders: To send push notifications for new expenses, bill reminders, and settlement updates.
  4. App Maintenance & Security: To detect, prevent, and troubleshoot technical errors, fraud, or security threats.
  5. Customer Support: To respond to user inquiries and assist with technical support.

3. Data Sharing and Disclosure

We respect your data privacy and do NOT sell, rent, or trade your personal information to advertisers or third parties.

We may share your data under the following limited circumstances:

  • With Group Members: Members of groups you join will see your name, profile picture, added expenses, balances, and settlement activity within that shared group context.
  • Service Providers: We share data with trusted cloud infrastructure and backend service providers necessary to operate the App:
    • Google Firebase (Firestore, Authentication, Cloud Functions, Cloud Storage): Data storage, database hosting, and authentication.
    • Expo Services: Push notification delivery and app infrastructure support.
  • Legal Requirements: We may disclose your information if required by law, subpoena, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of users.

4. Third-Party Services & SDKs

SplitMate integrates third-party SDKs to provide backend infrastructure and authentication:

  • Google Firebase: For authentication, Firestore database, and secure cloud storage. Refer to Google’s Privacy Policy.
  • Google Sign-In: For streamlined user login.

These service providers process data on our behalf in compliance with privacy standards.

5. Data Security

We implement industry-standard technical, administrative, and physical safeguards to protect your personal data, including:

  • Transport Layer Security (TLS/SSL) encryption for data in transit.
  • Firebase Security Rules to restrict unauthorized database access.
  • Secure local token storage using Expo SecureStore.

While we take all reasonable precautions, no transmission over the internet or wireless network can be guaranteed 100% secure.

6. Data Retention and Account / Data Deletion

Data Retention

We retain your personal data for as long as your account remains active or as needed to provide you with the App services.

Account & Data Deletion Rights

In compliance with Google Play Developer Policies:

  • You have the right to request deletion of your account and associated personal data at any time.
  • In-App Deletion: You can delete your account directly inside SplitMate via Settings > Profile / Account Settings > Delete Account.
  • Web / External Deletion Request: Alternatively, you may send a written data deletion request to support@fyndralabs.com with the subject “Account Deletion Request”.
  • Upon account deletion, your personal profile information, push tokens, and user record will be permanently deleted from our primary databases within 30 days. Shared expense records may be anonymized to preserve accurate accounting for remaining group members.

7. Children’s Privacy

SplitMate is not intended for use by children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take immediate steps to delete such information from our servers.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, or country where data protection laws may differ. By using SplitMate, you consent to the transfer of your information to servers operated by Google Cloud / Firebase globally.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically. We will notify you of any material changes by updating the “Last Updated” date at the top of this policy and, where appropriate, displaying a prominent notice in the App or via email.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: