Back to Zplit

Privacy Policy

Version 2026-02-12 | Effective 2026-02-12

How Zplit collects, uses, stores, and shares personal data.

1. Data We Collect

  • Account data: name, email, profile photo, authentication identifiers.
  • Usage data: group activity, expense metadata, app interactions.
  • Uploaded content: receipt images and extracted receipt details.
  • Device data: push notification tokens and app diagnostics.

2. Why We Use Data

  • Operate and secure the app.
  • Maintain shared balances and transaction history.
  • Provide receipt scanning and other product features.
  • Send notifications you request.

3. Legal Basis and Rights

Where applicable, we process data based on contract performance, legitimate interests, consent, or legal obligations.

You can request access, correction, or deletion by contacting us.

4. Data Retention

We retain account and transaction records while your account is active and as needed for security, legal, and accounting purposes.

When possible, deleted data is removed or anonymized within a reasonable period.

5. Sub-processors

We use the following sub-processors to run Zplit. This list may change as providers are added, removed, or replaced.

6. International Transfers

Data may be processed in countries other than your own, subject to contractual and technical safeguards.

7. Children

Zplit is not directed to children under 13 and we do not knowingly collect personal data from children under 13.

8. Changes to this Policy

When we materially change how data is handled, we will publish a new policy version and may require new acceptance.

9. Contact

Privacy requests: privacy@zplit.app

Current Sub-processors

Keep this list current as vendors change. Updating it here keeps your legal page accurate.

Google Firebase

Authentication and notification delivery

Data: Account identity, device token metadata

Location: United States and global regions

Provider privacy terms

Google Cloud Platform

Infrastructure hosting and storage

Data: Application data, uploaded receipts, logs

Location: United States

Provider privacy terms

Google Gemini API

Receipt text extraction and structured parsing

Data: Uploaded receipt images and extracted text

Location: United States and global regions

Provider privacy terms