Privacy Policy

What is Splitrippy?

Splitrippy is a web application for recording and splitting shared expenses among friends, families, and other groups.

Information we collect

• Your name and email address, provided when you sign up or sign in with Google.
• Your profile picture, if you sign in with Google.
• Trip and expense data you enter into the app.
• Receipt photos you upload.
• Technical and diagnostic information collected automatically, such as your browser and device type and the pages you visit, as described in the analytics and error-monitoring sections below.

How we use your information

• To identify you within the app and show your name to trip members.
• To send trip invitation emails on your behalf.
• To store and display expense and settlement records for your trips.
• To operate, secure, maintain, support, and improve Splitrippy.

Data sharing

We do not sell or rent your personal information, and we do not disclose it to unrelated third parties. We share it with the service providers that help us operate Splitrippy — including authentication (Clerk), database and file storage (Neon, Cloudflare R2), hosting and web analytics (Vercel), product analytics (PostHog, United States), error monitoring (Sentry), rate limiting and abuse prevention (Upstash), and email delivery (Resend) — who process it on our behalf under data-processing terms, where necessary to operate, secure, maintain, and support the service. When you search for a trip destination, the place name you type is sent to a third-party location-search provider (Photon, operated by Komoot) to return matching suggestions. Within the app, your expenses, balances, and member details are visible only to members of the trips you belong to. If a trip admin enables a public share link, a limited public page becomes visible to anyone with that link — showing the trip’s name, destination, start month, member count, the trip creator’s name (or a generic label if they have not set one), and any cover image the trip admin has uploaded, but never expenses, balances, or other members’ identities.

Data storage

Your application data is stored in a managed PostgreSQL database provided by Neon. Receipt photos are stored in private object storage (Cloudflare R2) and are accessible through Splitrippy only to authorised trip members. Limited access may also be available to our service providers or the app owner where reasonably necessary for security, maintenance, customer support, or legal compliance.

Data security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, collection, use, disclosure, modification, loss, or disposal. However, no internet service or storage system can guarantee absolute security.

Analytics & cookies

• We use Vercel Web Analytics to understand product usage. It is non-essential and, for visitors in the EU/EEA, is only enabled after you accept via the cookie-consent banner. You can change your choice anytime from the banner’s “Cookie settings” or your profile. Your choice is stored in a strictly-necessary first-party cookie.
• We use PostHog (US Cloud) for product analytics — we record pageviews and a small set of in-app actions (for example, creating a trip, adding an expense, or recording a settlement) to understand how the app is used. When you are signed in, these events are linked to your internal account identifier; for logged-out visitors they are tied only to a random identifier PostHog stores in your browser (a cookie plus local storage). Either way they carry no directly identifying information that we attach — no name, email, or payment or expense amounts. Like most analytics, they include standard technical metadata such as the pages you visit (their web addresses), your approximate location (derived from your IP address), and your browser and device type. Like Vercel Web Analytics, it is non-essential and, for visitors in the EU/EEA, is only enabled after you accept via the cookie-consent banner; you can change your choice anytime from the banner’s “Cookie settings” or your profile. PostHog processes this data in the United States — see PostHog’s privacy policy for more.
• We use Vercel Speed Insights for anonymous, cookieless performance (Web Vitals) measurement. It sets no cookies, collects no IP address or personal identifiers, and therefore runs without consent.
• Authentication and session cookies (Clerk) are strictly necessary.

Error monitoring & diagnostics

We use Sentry for error monitoring and application diagnostics, which helps us detect, investigate, and fix problems and keep the service secure and reliable. When an error occurs, Sentry may process technical information such as your browser and device type, operating system, the page address (URL), your internal account identifier, and application error details (including stack traces and a diagnostic recording of your session around the time of the error). To protect your privacy, that recording masks all text and form input and does not capture images such as receipt photos; our configuration does not send your IP address, cookies, or login credentials to Sentry; and we do not attach your name or email address to error reports. Page addresses (URLs) included in error reports are stripped of their query string before they are sent, so single-use invitation-link tokens are removed and a shared trip’s address is reduced to a generic placeholder.

Data retention and deletion

We retain your account information and application data for as long as your account remains active or as reasonably necessary to provide Splitrippy.

You can delete individual expenses, settlements, receipt photos, and trips you have permission to manage directly in the app. To delete your account and the personal data associated with it, contact us using the details below and we will action your request.

Where data forms part of a shared trip record that remains relevant to other trip members, we may retain the shared record while removing or anonymising the information that directly identifies you.

Some information may remain for a limited period in backups, security logs, or where reasonably necessary to comply with legal obligations, prevent abuse or fraud, resolve disputes, or protect the security of the service.

Your choices and privacy requests

You can update certain account and trip information — and change your analytics choices at any time — directly in the app (for example, from your profile or the cookie-settings control).

You may also contact us to request access to or correction of your personal data, withdraw your consent where applicable, or request deletion of your account and personal data.

Some requests may be subject to legal exceptions, and withdrawing consent may affect our ability to provide certain features of the service.

International data transfers

Some of our service providers may process or store personal data outside Singapore, including in the United States. Where personal data is transferred outside Singapore, we take reasonable steps to ensure that it receives a standard of protection comparable to that required under Singapore law.

Contact

Splitrippy’s data protection contact is the app owner. For privacy questions or requests — including access, correction, withdrawal of consent, or deletion — contact us at support@splitrippy.com.