Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources.

1.1 Information You Provide

When you register for an account or use SplitMates, you may provide:

• Account Information: Name, email address, phone number, password, and profile photo
• Expense Data: Transaction descriptions, amounts, dates, categories, receipts, and notes
• Group Information: Group names, member details, and shared expense records
• Payment Information: If you use premium features, payment card details (processed securely by third-party payment processors)
• Communications: Messages you send to us or other users through the Service
• Feedback: Survey responses, reviews, and support inquiries

1.2 Information Collected Automatically

When you use SplitMates, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: Features used, pages viewed, time spent on the app, interaction patterns
• Location Data: Approximate location based on IP address or precise location if you grant permission (used for currency suggestions and fraud prevention)
• Log Data: IP address, browser type, access times, pages viewed, error logs
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to track activity and store preferences

1.3 Information from Third Parties

• Authentication Services: If you sign up using Google, Apple, or other providers, we receive basic profile information
• Social Networks: If you connect your social media accounts, we may receive public profile data
• Analytics Providers: We use third-party analytics tools to understand app usage and performance

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve the Service

• Create and manage your account
• Enable expense tracking, splitting, and settlement features
• Synchronize data across your devices
• Process transactions and send notifications
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve features and user experience
• Develop new products and services

2.2 Communication

• Send service-related notifications (expense updates, settlement reminders)
• Deliver marketing communications about new features or offers (you can opt out)
• Respond to your questions and requests
• Conduct surveys and collect feedback

2.3 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms & Conditions
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of SplitMates, our users, and the public

2.4 Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: To provide the Service you requested
• Legitimate Interests: To improve our Service, ensure security, and communicate with you
• Consent: For marketing communications or optional features (you can withdraw consent anytime)
• Legal Obligation: To comply with laws and regulations

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Other Users

When you join a group or share expenses, other group members can see:

• Your name and profile photo
• Expenses you created or are involved in
• Balance and settlement information

3.2 With Service Providers

We share data with trusted third-party vendors who help us operate the Service:

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Stripe, PayPal)
• Authentication services (Google OAuth, Apple Sign-In)
• Email and notification services
• Analytics and monitoring tools
• Customer support platforms

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 For Legal Reasons

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms & Conditions
• Protect against fraud, security threats, or illegal activity
• Defend our legal rights or property
• Protect the safety of users or the public

3.4 Business Transfers

If SplitMates is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.

3.5 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

4. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, or accounting requirements
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we must retain data for legal or regulatory reasons.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

5.1 Access and Portability

• Request a copy of your personal data
• Export your data in a machine-readable format

5.2 Correction and Update

• Update inaccurate or incomplete information
• Correct errors in your profile or expense data

5.3 Deletion

• Request deletion of your account and personal data
• Note: Some data may be retained for legal compliance or legitimate business purposes

5.4 Objection and Restriction

• Object to certain processing activities (e.g., direct marketing)
• Request restricted processing in certain circumstances

5.5 Withdraw Consent

• Withdraw consent for optional data processing
• Opt out of marketing emails (using the unsubscribe link)
• Disable location tracking in your device settings

5.6 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@splitmates.app. We will respond within 30 days.

5.7 Rights for California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information (with exceptions)
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

6. Security

We take the security of your personal information seriously and implement industry-standard measures to protect it:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Limited access to personal data on a need-to-know basis
• Authentication: Secure password hashing and optional two-factor authentication
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Regular Audits: Periodic security assessments and penetration testing

However, no method of transmission or storage is 100% secure. If you become aware of any security breach, please contact us immediately at security@splitmates.app.

7. Children's Privacy

SplitMates is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us.

8. International Data Transfers

SplitMates is based in [Your Country]. If you access the Service from outside this country, your information may be transferred to, stored, and processed in countries where our servers or service providers are located. These countries may have different data protection laws than your country.

For users in the EEA, UK, or Switzerland, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Compliance with GDPR requirements

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account and prevent fraud
• Analyze usage patterns and improve the Service
• Deliver personalized content and advertisements

Types of Cookies We Use

• Essential Cookies: Required for the Service to function (e.g., session management)
• Analytics Cookies: Help us understand how users interact with the app (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Deliver relevant ads (you can opt out)

Managing Cookies

You can control cookies through your browser settings or opt out of analytics tracking. Note that disabling certain cookies may affect functionality. Learn more about managing cookies at allaboutcookies.org.

10. Third-Party Links and Services

SplitMates may contain links to third-party websites or integrate with external services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. When we make material changes, we will:

• Notify you via email or in-app notification
• Update the "Last updated" date at the top of this policy
• Provide a summary of key changes

Continued use of SplitMates after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SplitMates Inc.
Email: privacy@splitmates.app
Address: [Your Business Address]
Data Protection Officer: dpo@splitmates.app

13. Regulatory Authority

If you are in the EEA or UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.