Privacy Policy
Last updated: 23 October 2026. Applies to the SplitDone mobile app and the website splitdone.app.
The short version. We store the data you need to split expenses (your email, display name, optional phone number, and your groups, expenses and settlements) on servers in Germany. We use it to run the app, nothing else. Analytics are limited to anonymous event names. We do not sell data and we do not show ads. You can delete your account from the app or by email at any time.
1. Who is responsible for your data
The data controller is:
Makary Hryshkin, sole proprietorship (jednoosobowa działalność gospodarcza)
ul. Solec 24, 00-403 Warszawa, Poland
NIP: 7011284631, REGON: 543127585
Email: mhryshkin@gmail.com
If you have any question about this policy or your data, write to that address. We reply to every message.
2. What we collect and why
| Data | Why we need it | Legal basis (GDPR) |
|---|---|---|
| Email address and password (stored as a hash) | To create your account, sign you in and link invites sent to your email. | Performance of a contract (art. 6(1)(b)) |
| Display name | So the people in your groups can see who paid and who owes. | Performance of a contract |
| Phone number (optional) | Only if you add it. Used to match SMS invites to your account. | Consent (art. 6(1)(a)); remove it from your profile at any time |
| Group and expense data: group names, members, amounts, currencies, categories, dates, descriptions, settlements | This is the core of the service: calculating balances, simplifying debts and keeping settlement history. | Performance of a contract |
| Names, emails or phone numbers of people you add to a group | So you can split with people who do not have an account yet and invite them later. | Legitimate interest of you and the people you split with (art. 6(1)(f)) |
| Technical data: IP address, device type, app version, timestamps in server logs | To keep the service secure, diagnose errors and prevent abuse. Logs are rotated automatically. | Legitimate interest (art. 6(1)(f)) |
| Usage events (see section 4) | To understand which features are used so we can improve the app. | Legitimate interest (art. 6(1)(f)) |
We do not collect your contacts, your location, or your bank or card details. SplitDone does not move money; it only keeps track of who owes whom.
3. Where your data is stored
All account and expense data is stored in a database hosted by Hetzner Online GmbH in Germany, inside the European Union. Daily backups are kept on the same infrastructure. Data is transmitted over HTTPS only.
Currency conversion uses daily European Central Bank reference rates fetched from a public rate service. Only the currency codes and dates are sent to that service, never amounts, names or group details.
4. Analytics, honestly
We record a small number of usage events, for example "expense created" or "settlement marked paid", together with non-identifying properties such as the split type or the currency code. The property list is enforced on the server with an allowlist, so the following can never be included in analytics: your name, email address, phone number, group names, expense descriptions or the names of other members.
Events are tied to a random identifier, not to your email. We use them to see which features matter and where people get stuck. We do not use advertising trackers, and we do not share analytics data with ad networks.
5. Who else sees your data
- People in your groups. Members of a group see each other's display names, the expenses in that group and the balances. That is the point of the app. Think before adding someone to a group whose contents they should not see.
- Service providers. Hetzner (hosting, Germany) and, for SMS invites, an SMS delivery provider that receives only the recipient phone number and the invite message. These providers process data on our instructions under data processing agreements.
- Nobody else. We do not sell, rent or trade personal data. We would disclose data only if legally required to.
6. How long we keep it
- Account and group data: for as long as your account exists.
- After you delete your account: your personal data (email, name, phone number and password) is erased immediately. Shared expense and settlement records stay in your groups under the name "Deleted user", because the other members' balances still depend on them. Copies in backups expire within 30 days.
- Invite links: expire 14 days after they are created.
- Server logs: up to 30 days.
- Backups: up to 30 days, after which deleted data disappears from backups too.
7. Deleting your account
You can delete your account at any time:
- In the app: open your profile and choose Delete account.
- By email: write to mhryshkin@gmail.com from the address you registered with. We will confirm and delete the account within 30 days.
8. Your rights under the GDPR
Because we are based in the EU, you have the following rights regardless of where you live:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: correct inaccurate data. Your name and email can be edited in the app.
- Erasure: delete your account and data (see section 7).
- Restriction and objection: ask us to limit processing based on legitimate interest, including analytics.
- Portability: receive your data in a machine-readable format.
- Withdraw consent: for example by removing your phone number from your profile.
- Complain: to a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
To exercise any of these rights, email us. We answer within one month.
9. Children
SplitDone is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has created an account, contact us and we will delete it.
10. The website
splitdone.app is a static site. It sets no cookies and runs no analytics scripts. The only third-party request it makes is loading the Inter font from Google Fonts, which involves Google receiving your IP address as part of the request. Invite pages (splitdone.app/invite/...) read the invite code from the link in your browser only and do not send it anywhere; the code is used by the app after you open it.
11. Changes to this policy
If we change what we collect or how we use it, we will update this page and the date at the top, and we will tell you in the app before the change takes effect if it is significant.