Privacy Policy
Last updated: [date]. Owlsplit is run by [owner name or entity]. Contact: support@owlsplit.com.
What we collect
- Account details: your name, email address, phone number if you sign in with one, profile picture link, preferred currency, and UPI ID if you add one.
- Sign-in data: a hashed version of your password (never the password itself), session tokens, and password-reset tokens.
- What you add to the app: groups and their members, expenses, amounts, categories, dates, how costs are split, settlements, and friends.
- Receipt images, if you scan a receipt.
- Activity records: a log of actions in your groups, shown in the activity feed.
- Device tokens, if you use the mobile app and turn on notifications.
How we use it
- To run the app: calculate balances, show your groups, and record settlements.
- To sign you in and keep your account secure.
- To send service messages, such as password-reset emails and one-time codes.
We don't sell your data or show ads. [Owner to confirm.]
Who can see your data
Other members of a group can see that group's expenses, balances and settlements, along with your name and, if you add one, your UPI ID. Anyone with a group's invite link can join that group, so share links only with people you trust.
Services we rely on
[Owner to confirm this list matches what is actually deployed.]
- Database and cache hosting: Neon, Upstash
- Web hosting: Vercel
- Network tunnel to the API server: [Cloudflare or Tailscale]
- Email delivery: Resend
- Fonts: Google Fonts, which receives your IP address when pages load
- If enabled: Google or Microsoft sign-in; Twilio or WhatsApp for one-time codes; OpenAI or Microsoft Azure to read receipt images; Firebase for notifications
These providers may process data outside your country. [Owner to confirm locations.]
Browser storage
We keep your sign-in tokens in your browser's local storage, and a pending invite code in session storage. We don't use advertising or analytics cookies.
How long we keep data
When you delete your account, we erase your name, email address, phone number, profile picture link and password, and remove your friends list and devices. Expenses and settlements you share with others stay, because their balances depend on them, and you appear in them as "Deleted user". Groups with no one else in them are removed. [Owner to set how long other data and backups are kept.]
Your choices
You can update your profile, download a copy of your data, or delete your account in Settings. For anything else, contact support@owlsplit.com.
Security
We protect data in transit with HTTPS and store passwords only as salted hashes. No system is perfectly secure.
Children
Owlsplit is not meant for children under [age]. [Owner to set the minimum age.]
Changes
We'll update this page when this policy changes and change the date above.
[Owner: have this reviewed for the laws that apply to your users, such as India's DPDP Act and the EU GDPR.]