Privacy Policy

Thank you for using Splat ("the App"). Your privacy and transparency regarding how your data is handled are fundamental to us. This Privacy Policy explains what information Splat collects, how it is used, and the choices you have concerning your data.

1. Information We Collect

Splat is designed with privacy and zero friction in mind. We do not require you to create an account, sign in, or provide personal credentials (such as your name, password, or credit card details) to use the App.

• Camera & Receipt Photos: When you snap a receipt photo or upload an image from your device gallery, the photo is transmitted securely via HTTPS to our backend service solely to perform Artificial Intelligence Optical Character Recognition (AI OCR) to extract receipt items and prices. Receipt images are processed in memory and are NEVER stored permanently on cloud servers, nor are they used for advertising or model training.
• Device Identifiers & IP Address: We collect an anonymous Device ID and IP address strictly to enforce free scan quotas, prevent automated abuse, and verify active in-app purchase subscriptions.
• Local Bill & History Data: Your split bills, participant names, allocations, and saved receipt thumbnails are stored locally on your device's storage. They are not uploaded to central user databases.

2. How We Use Information

We use the collected information solely for the following purposes:

• To analyze receipt images and convert them into editable item lists.
• To calculate itemized totals, adjustments, and tips accurately for participants.
• To enforce free monthly scan limits and rate limits.
• To process and restore in-app purchases (Trip Pass and Yearly Pro Subscriptions) via Google Play Billing and Apple App Store.

3. Third-Party Service Providers

To provide core features, Splat integrates with trusted third-party service providers:

• Google Gemini AI (Google Cloud): Used for secure, serverless receipt OCR text processing.
• RevenueCat: Used to validate and manage in-app purchases and subscriptions securely without storing sensitive financial data.
• Vercel & Upstash Redis: Used for secure cloud hosting, API serverless processing, and quota rate limiting.
• Capgo: Used for over-the-air app updates.

4. Data Retention & Security

All data in transit is encrypted using standard Transport Layer Security (TLS/HTTPS). Receipt photos processed for OCR are discarded immediately after processing. Split history stored locally on your phone can be cleared at any time directly inside the App.

5. User Data Deletion & Rights

In accordance with Google Play User Data policies, Splat provides full transparency and control over your data deletion rights.

How to Delete Your Data:

• In-App Immediate Deletion (Local Storage): You can delete all your saved Bills, Items, Participant allocations, and receipt thumbnails instantly at any time by tapping "Clear" under Saved History inside the App, or by clearing app storage in your device settings.
• Server-Side Data Deletion Request: If you wish to request deletion of any server-side logs (such as your anonymous Device ID used for scan quota enforcement), you may email us directly at michael.rheault@gmail.com with the subject line "Data Deletion Request".

Data Retention & Deletion Timeframes:

• Receipt Photos: Processed temporarily in memory for AI OCR and deleted immediately after processing (within seconds). Photos are never saved on remote servers.
• Local App Data: Deleted instantly when you tap "Clear" in the App or uninstall Splat.
• Server Quota Logs: Deleted permanently within 30 days of receiving a verified email request.

6. Children's Privacy

Splat is not directed toward children under the age of 13. We do not knowingly collect personal information from children.

7. Contact Us