Legal

Privacy Policy

Last updated: 2026-07-20

Mediam Communications Limited t/a SplitThings (“we”, “us”) operates the Split Things apps and website (the “Service”), and is the data controller for the personal data described here. Our registered contact address is Falcon House, 257 Burlington Road, New Malden, Surrey, KT3 4NE. This policy explains what we collect, why, how we handle it, and the choices you have. Our guiding principle: your financial data isn’t the product - we don’t sell it and we don’t use it to advertise to you.

Information we collect

Information you provide

  • Account: your email address, used to sign you in with a one-time code. You can also set a display name.
  • Content you enter: trips, the names of people you add, expenses (amounts, descriptions, categories, currencies), payments, and confirmations/disputes. This is the information the Service exists to organise for you and the people you share a trip with.
  • Launch waitlist (optional): if you ask to be notified when the app reaches the app stores, we store your email address for that single purpose, on the basis of your consent. We use it only to send that launch notification, and you can ask us to remove it at any time by emailing privacy@splitthings.com.

Information collected automatically

  • Basic usage analytics, first-party only: an anonymous install identifier, your platform (iOS, Android, or web), the app version, and coarse events such as “app opened”, “signed in”, “trip created”, “expense added” (with the split method only), and “settlement recorded”. These contain no amounts, names, notes, or other content, and are used to understand which features are used so we can improve the app.
  • Technical data needed to deliver the Service securely (e.g. IP address handled by our hosting provider for security and abuse prevention).

We do not use third-party advertising or tracking SDKs, and we do not build advertising profiles.

How we use information

  • To provide the Service: create and sync your trips across your devices, and share trips with the people you invite.
  • To secure the Service and prevent abuse.
  • To improve the app, using the coarse, non-identifying analytics described above.
  • To respond to your support requests.

Where the UK/EU GDPR applies, our legal bases are: performance of our contract with you (providing the Service), our legitimate interests (security and product improvement), and your consent where required.

How information is shared

  • With people on your trips. When you join or create a shared trip, the members of that trip can see the trip’s people, expenses, payments, and confirmations - including entries you add. Your email address is not shown to other members.
  • With service providers (sub-processors) who process data on our behalf under contract, only to run the Service:
    • Supabase - database, authentication, and backend hosting.
    • IONOS - email delivery (sending your one-time sign-in codes) and web hosting (serving the website and web app).
  • Legal: where required by law, or to protect rights, safety, and the integrity of the Service.

We do not sell your personal information.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

Data retention & deletion

We keep your information for as long as your account is active. You can delete your account and personal data at any time from within the app (Settings → Delete account), or by emailing privacy@splitthings.com. Deletion is permanent; where you share a Thing with others, ownership may pass to another member so their data isn’t lost. Some records may be retained where required by law.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to the processing of your personal data. To exercise them, email privacy@splitthings.com. You may also have the right to complain to your local data-protection authority.

Security

Data is encrypted in transit (HTTPS). Access to shared trips is enforced by per-trip access rules on our backend, so only members of a trip can read its data. No method of storage or transmission is perfectly secure, but we work to protect your information.

Children

The Service is not directed to children and is not intended for use by anyone under the age required in their country to consent to online services.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified in the app.

Contact

Questions about privacy? Email privacy@splitthings.com. This policy is governed by the laws of England and Wales.