Splitwyse ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Splitwyse mobile application and related services (collectively, the "Service").
Transaction descriptions and merchant names are processed by Anthropic's Claude API for automatic categorization. The following data may be sent: merchant name, transaction amount, date, and category. No bank credentials, account numbers, or personally identifiable information beyond transaction metadata is shared with AI services. AI processing is used solely to classify transactions as shared or personal and to parse expense text. We do not use your data to train AI models.
We do not sell your personal data. We share data only as necessary to provide the Service:
Splitwyse uses Plaid Technologies, Inc. ("Plaid") to connect your bank accounts on a read-only basis and retrieve transaction data. When you link a bank account, you authenticate directly with Plaid, and Plaid's own Privacy Policy governs the handling of your banking credentials. Plaid provides us with read-only transaction data. Splitwyse never receives your bank login credentials.
Subscription management is handled by RevenueCat. RevenueCat receives a device identifier and subscription status to validate entitlements. For more information, see RevenueCat's Privacy Policy.
Splitwyse uses Supabase for authentication and data storage. Your account credentials and encrypted data are stored with Supabase. For more information, see Supabase's Privacy Policy.
Transaction descriptions and merchant names are processed by Anthropic's Claude API for automatic categorization. No bank credentials are shared with AI services. For more information, see Anthropic's Privacy Policy.
We may share information with third-party vendors who perform services on our behalf, including cloud hosting, analytics, crash reporting, email/SMS delivery (SendGrid, Twilio), and customer support. These providers are contractually bound to use your data only as directed by us.
Within a household, each partner controls their own data visibility:
We implement appropriate technical and organizational measures to protect your information, including:
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account or household, we will delete or anonymize your data within 30 days, except where retention is required by law. You may request a copy of your data before deletion via the in-app export feature or by contacting us.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, including data deletion, email privacy@splitwyse.app with subject "Data Deletion Request." We will respond within 30 days and verify your identity before processing the request.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, disclose, and sell (we do not sell personal data). You may designate an authorized agent to make requests on your behalf.
If you are in the EEA or UK, our legal bases for processing include: contract performance, legitimate interests, consent (where required), and legal obligation. You have the right to lodge a complaint with your local data protection authority.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
Your information may be transferred to and processed in the United States. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for cross-border transfers.
We may update this Privacy Policy from time to time. We will notify you of material changes via the app, email, or other means. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or our data practices: