This policy explains what SkySplit collects, why, who it is shared with, and the rights you have over it. SkySplit is operated by Nitzan Biron ("we", "us"). It applies to the SkySplit mobile app and skysplit.app.
1. Summary
Signing in, with Google, Apple, or a magic link, no password required, is needed to create or join a trip. Your data is stored on your device and synced to our hosted database so the people in your trip see the same numbers. We do not sell your data, we do not show ads, we run no advertising trackers, and we collect nothing beyond what the app needs to function.
2. Information we collect
Information you provide. Trips, expenses, amounts, currencies, categories, splits, settlements, comments, participant names, and, only if you choose to add them, expense photos and expense locations.
Account information. Your email address. If you sign in with Google, the name and profile photo Google provides. If you sign in with Apple, the name and email Apple provides, including Apple's private relay address if you choose to hide your email.
Technical information. A locally generated device identifier, and app preferences such as theme and default currency. We do not collect advertising identifiers and do not track you across other apps or websites.
We do not knowingly collect information from children under 13, and the app is not directed at them.
3. How we use it
Solely to operate the app: to store and display your trips, calculate balances, sync across your devices and the other members of a trip, convert currencies, and respond to support requests. We do not use your data for advertising or profiling, and we do not sell or rent it.
4. Where it is stored
Locally on each device you use, in the app's on-device storage, including any expense photo until it can upload. When you are signed in, your data is also stored in our database hosted by Supabase (which runs on cloud infrastructure and may process data outside your country), and each expense photo uploads there too, into Supabase Storage, once you're online. Photo links are time-limited signed URLs rather than public addresses.
5. Who can see your data
Only members of a trip can see that trip's contents. Expenses you mark "Just for me" are visible only to you and are excluded from group totals. There are no public profiles and no way to discover other users. We access your data only where necessary to operate the service, respond to a support request you initiate, or comply with the law.
6. Third-party services
SkySplit relies on a small number of external providers. Each receives only what its function requires:
- Supabase: database, authentication and file storage for synced accounts.
- Google / Apple: only if you choose that sign-in method, to verify your identity.
- open.er-api.com: exchange rates. Only currency codes are sent; never your amounts or trip contents.
- Photon (Komoot): optional place search. If you search for a place, your search text is sent. If you use "use my location", the coordinates from your device are sent to convert them into a place name.
- OpenStreetMap: map tiles. When an expense with a saved location is displayed on a map, those coordinates are requested from its tile servers.
- Cloudflare: hosting of the web app and routing of email sent to our @skysplit.app addresses.
- Resend: sends sign-in emails (magic link and confirmation) and the email when you invite someone to a trip by email. Only your email address, or the invitee's email and name and the trip's name, are sent — never trip contents.
- Anthropic: AI-assisted expense parsing, only when you use quick-add or receipt scan, and only after you grant consent; see "AI features" below.
Location features are entirely optional and used only when you actively invoke them. The app does not track your location in the background.
7. AI features
Quick-add (describing an expense by typing or speaking) and receipt scanning are optional. If you use them, what you type or the receipt photo you capture is sent to Anthropic PBC, our AI provider, solely to extract the expense details, amount, date, category, and similar. Your trips, balances, contacts, and other members' data are never sent. Anthropic processes this only to return the parsed result, does not use it to train its models, and acts as our processor, bound by contract to use it for no other purpose.
We ask for your explicit permission before either feature is used for the first time, name Anthropic in that prompt, and never call these features without your consent, even if you're signed in. You can withdraw consent at any time from the You tab, which stops all future AI requests immediately.
If you decline or later withdraw consent, quick-add and receipt scanning simply become unavailable; you can still add and edit expenses manually either way.
8. Retention and deletion
You can delete individual expenses and whole trips at any time from within the app.
You can delete your account from the You tab (Account → Delete account). This permanently deletes your sign-in credentials, revoking your ability to sign in again, and removes your participant records that carry no shared history. Where a record is part of a trip's shared financial history, your name is replaced with "Deleted user" and your email is erased, but the underlying entry is retained so that the remaining members' balances stay correct. This is irreversible.
Data held only on your device is removed when you delete the app or clear its storage.
9. Security
All traffic is encrypted in transit using HTTPS. Access to trip data is enforced at the database level, so a member can only read the trips they belong to. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live, including under the GDPR in the EU/UK and the CCPA in California, you may have the right to access, correct, export, or delete your personal data, to object to or restrict its processing, and to withdraw consent. The app gives you direct access, correction, export (CSV and PDF) and deletion for your own data; for anything else, contact us at the address below. You may also lodge a complaint with your local data protection authority. We do not sell personal information, and therefore offer no "sale" opt-out.
Where the GDPR applies, we process your data to perform our agreement with you (providing the app), on the basis of your consent for optional features such as location, and on our legitimate interest in keeping the service secure and working.
11. Changes to this policy
We may update this policy as the app changes. The "last updated" date above will always reflect the current version, and material changes will be highlighted in the app.
12. Contact
For privacy questions, data requests, or complaints: [email protected]