Privacy Policy

Welcome to Split Circle ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using Split Circle, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Account Information:

• Phone number (required for authentication)
• Name
• Email address (optional)
• Profile photo (optional)
• UPI ID (for payment settlements)

Circle and Expense Data:

• Circle names and descriptions
• Expense details (amount, description, date, receipts)
• Settlement information
• Member invitations

1.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system
• Unique device identifiers

Usage Information:

• App features you use
• Actions you take
• Error logs and performance data

Location Information: We do NOT collect precise location data.

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Create and manage your account
• Enable expense splitting and UPI payment links
• Send notifications about expenses and settlements
• Provide customer support
• Improve app performance and fix bugs
• Analyze usage patterns
• Comply with legal obligations

3. How We Share Your Information

We do NOT sell your personal information.

3.1 With Other Users

When you create a circle, other members can see:

• Your name and profile photo
• Expenses you've added
• Amounts you owe or are owed
• Your UPI ID (if provided)

3.2 With Service Providers

We work with trusted third-party providers:

• Cloud Hosting: AWS, Railway
• Database: Supabase
• File Storage: AWS S3 (receipt photos)
• Authentication: Google, Apple
• Notifications: Twilio, SendGrid, MSG91
• Analytics: Mixpanel
• Error Tracking: Sentry

These providers are contractually obligated to protect your data.

4. Data Retention

Active Accounts: We retain your information while your account is active.

Deleted Accounts: When you delete your account, we delete or anonymize your data within 30 days.

Backups: Deleted data may persist in backups for up to 90 days.

5. Data Security

We implement robust security measures:

• Encryption: TLS/SSL for data in transit, AES-256 for data at rest
• Password Protection: Passwords hashed using bcrypt
• Access Controls: Strict limits on who can access data
• Monitoring: 24/7 security monitoring
• Regular Audits: Security audits and penetration testing

However, no method is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

Access and Update

You can access and update your information anytime through Settings.

Delete Your Account

Delete your account through Settings → Account → Delete Account.

Opt-Out of Marketing

• Click "Unsubscribe" in marketing emails
• Disable push notifications in device settings
• Contact [email protected]

Your Rights Under Indian Law

If you're in India, you have rights under the Digital Personal Data Protection Act, 2023:

• Right to access your data
• Right to correction of inaccurate data
• Right to erasure
• Right to data portability
• Right to withdraw consent

7. Children's Privacy

Split Circle is not for children under 13 (or 16 in the EEA). We do not knowingly collect information from children.

If you believe your child provided us with information, contact [email protected].

8. International Data Transfers

Your data may be transferred internationally. We ensure appropriate safeguards:

• Standard Contractual Clauses
• Adequacy decisions
• Your explicit consent

9. Third-Party Links

Our Service may link to third-party services (UPI apps, WhatsApp, etc.). We're not responsible for their privacy practices.

Third-Party Services: Google Pay, PhonePe, Paytm, BHIM, WhatsApp, Google, Apple

10. Cookies and Tracking

Mobile App: We do not use cookies. We use device identifiers for analytics.

Website: We may use cookies for analytics. You can disable them in browser settings.

11. California Privacy Rights (CCPA)

California residents have rights under CCPA:

• Right to know what data we collect
• Right to delete data
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination

12. Changes to This Policy

We may update this policy. We'll notify you of material changes via:

• In-app notice
• Push notification or email
• Prominent app display

Continued use after changes means you accept the revised policy.

13. Contact Us

Questions about this Privacy Policy?

We'll respond within 30 days.