What Split stores, where it lives, who sees it and when it goes away again – no small print.
Groups and expenses are stored locally first. That's why Split also works without a connection.
To sync the group, data is kept with Amazon Web Services in Frankfurt, encrypted in transit and at rest.
Split starts with an anonymous device account. For several devices, you secure it with a passkey, Google or Apple.
No ads, no tracking cookies and no selling of data – neither in the app nor on this website.
Split moves no money and is not a bank. Card details for a Premium purchase are only seen by Stripe.
Split deletes finished groups automatically after fixed periods. Open balances are never lost.
From your phone to your group: four stops, each one protected.
Everything is stored here first. That's why Split also works without a connection.
Every connection uses HTTPS. A firewall keeps abuse away from the interface.
Amazon Web Services in Frankfurt. Data and receipt photos are stored encrypted and not publicly reachable.
Only the members see the current state. Nobody else can read or change it.
When you buy Premium, card details go straight to Stripe. Split never sees them.
Split stores groups, expenses and payments on your device first. That's why you can keep working without a connection.
So that everyone in the group sees the same numbers, Split syncs the data through a server. It runs on Amazon Web Services in Frankfurt. Receipt photos are kept there in storage that is not publicly accessible.
The connection to the server is always encrypted, and data on the server is stored encrypted. A firewall protects the interface against abuse.
Only its members can see a group. Anyone who isn't a member can neither read nor change it. An invite link only allows joining, so share it only with the people who belong in the group.
Within the group, all members see all expenses, changes and deletions. That's intentional: it keeps track of who entered what.
Split is not end-to-end encrypted. Xoricon uses your content to run Split – not for advertising, and it doesn't sell it.
Split removes receipt photos from the server when a group rests for a long time: without Premium after 90 days without activity, or after 14 days if everything is settled; with Premium after 24 months. The expenses themselves remain. Devices that have already loaded a receipt keep their copy.
If all balances are settled and nothing has happened for 120 days, the group goes into a dormant state. It stays readable, and Split announces the deletion in the group. After another 30 days it is deleted for good.
Any new expense or a tap on “Keep” resets the periods. Split never deletes groups with open balances or groups with Premium automatically; with Premium only the receipt photos follow the 24-month period.
Split moves no money. The app shows who owes whom how much; you transfer the money outside Split, for example with your banking app.
You can optionally add your bank details or a PayPal link, so others can copy them when settling up.
You pay for Premium through Stripe. Card details go straight to Stripe; Split never sees them.
Which data Split processes for which purpose, with which service providers, for how long and what rights you have is set out bindingly in the privacy notice for Split.
Fixed periods instead of collecting data. Open balances are never lost.
Any new expense or a tap on “Keep” resets the periods. Expenses stay when photos are removed, and devices keep receipts they have already loaded.
Your question isn't here? Write to us
Technically yes. The data is stored encrypted on the server, but not end-to-end encrypted. Xoricon uses it to run Split, never for advertising.
With an anonymous device account, your groups are tied to that device. So secure your account with a passkey, Google or Apple; then you get your groups back on a new device. The other members keep the group either way.
Safari on the iPhone may delete data of websites that haven't been used for a week. That doesn't apply to apps on the home screen. Whatever has already been synced is also kept on the server.
Only people with an invite link to the group. Whoever joins picks who they are from the list of participants. So share the link only within your group.
Split runs right in your browser and can be installed as an app – no ads, no account.