Privacy policy
Plain-language draft; review before launch.
InSplit splits a restaurant bill between friends. This page says what the app keeps, where it goes, and how to get rid of it. We wrote it to be read.
Who we are
InSplit is provided by Kevin Kheira, an individual, at 16915 SE 272nd St, Ste 100 #8131, Covington, WA 98042, USA. Questions go to support@insplit.app.
What stays on your phone
- Your receipts and their photos are stored on your phone.
- Your photos stay on your phone. The app never uploads them. In a test build, you can choose to email a receipt's photos to support yourself. Photos are part of your phone's own backup if you have that turned on, which is between you and your backup provider.
- If you don't sign in, the app works as a guest. A guest needs no account. Your phone makes a random device key, keeps it on the phone and registers it with our server, so we can tell your phone from another.
- Reminders are notifications your phone schedules itself.
When you share a bill
Sharing a bill sends the receipt's lines and prices to our server, along with the first names of the people on the bill and the usernames, emails or phone numbers you add so friends can pay you. That is how your friends can pick what they had.
- Friends need no app and no account. They open your link in a browser. The browser remembers which name they picked on that bill or group. We use no cookies.
- A bill can be read for 7 days. The person who shared it can extend that, up to 60 days.
- We delete the bill 30 days after it expires.
- If you are signed in, we keep a short history row for each bill you were part of: the merchant, the date, the host's first name, your share and what you paid. This is so your balances don't vanish when the bill does.
Anyone who has a bill's link can open it, so share it only with people you want on the bill.
Groups
We keep a group on our server with no end date: its name, each member's first name and the emoji they picked, its receipts, the payments members record, and an activity log of what happened. The log also keeps which account and device did each thing, which is never shown. Anyone with the group's link can read the group, including members' usernames, emails or phone numbers for getting paid, can add a name, and can record or undo a payment. A group can't be deleted today. If you leave or delete your account, your name stays on what it was part of.
When you sign in
You can sign in with Sign in with Apple, with Google, or with a code we email you. Signing in is optional. When you do, we store your email address, the ids Apple or Google give us for you, and your first name if Apple or Google gives it or you type it. Signing in with Google opens Google's page, and Google sees that request. If you ask for a code, we keep your address with the code until it expires, then remove it within a few days, even if you never sign in.
While you are signed in, the text of your receipts (the merchant, the lines and prices, the names on the bill and the lines printed on the paper) is kept on our server and in sync across your devices. Photos aren't synced. Sample receipts aren't synced, and a receipt you share as a bill follows your account as that bill instead. When you delete a receipt, its text is removed from our server, and a small record that it was deleted stays, so your other devices delete it too.
Tips
You can tip through the App Store from the app. Apple handles the payment. We don't see who tipped, and a tip unlocks nothing.
We send sign-in codes and security alerts through an email delivery provider. The alert for a new sign-in names an approximate place, such as a city, worked out from the network address of the sign-in. We don't store that place.
Where it runs
Our server runs on a hosting provider, which stores and handles the data described on this page for us. We'll name the providers we use if you write to us.
Our server sees your network address, as every server does. We use it to slow repeated requests and to work out the place in a sign-in alert. We don't write it to our database. Our hosting provider handles it as part of running the server.
Deleting your data
You can delete your account in the app: You, then Account, then Delete account. When you delete your account we remove the account, your sessions, your history and any synced receipts. In a group, your first name stays on the receipts and payments that name it, and a receipt you added stays so the others' balances hold. If you used Sign in with Apple, we revoke it with Apple.
When you delete a receipt, your phone keeps its record of the deletion for 90 days, then drops it. Our server keeps the receipt's id and when it was deleted for as long as your account exists, and removes them when you delete your account.
Deleting your account is done in the app. If you have a question about your data, write to support@insplit.app.
What we promise
- We don't show ads.
- We don't sell your data.
- We don't track you across other apps or sites.
Children
InSplit is not for children under 13, and we don't knowingly collect their data.
Changes
If we change this page, the date at the top changes (2026-11-01 is the latest).
Contact
Write to support@insplit.app. See also our terms and support page.