Last updated: September 2025

SplitZen ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application SplitZen.

1. Information We Collect

Personal Information

• Account information (name, email address)
• Profile information you provide
• Contact information for group invitations

Financial Data

• Expense records you create and share
• Group membership and balance information
• Settlement and payment records
• Premium subscription status

Technical Information

• Device information (model, operating system)
• Push notification tokens
• App usage analytics and crash reports
• Advertising identifier (for non-premium users)
• IP address and general location data

2. How We Use Your Information

• Provide and maintain the SplitZen service
• Process and track expenses and balances
• Enable group collaboration and real-time synchronization
• Send push notifications for app activities
• Process premium subscriptions and in-app purchases
• Display personalized advertisements (non-premium users)
• Improve app performance and user experience
• Provide customer support and handle inquiries
• Ensure security and prevent fraudulent activities
• Comply with legal obligations

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

With Other Users

• Expense and balance data with group members
• Profile information within shared groups

With Service Providers

• Supabase: Secure data storage and real-time synchronization
• Google Firebase: Push notifications and analytics
• Google AdMob: Advertising services (non-premium users)
• Google Play Billing: In-app purchases and subscriptions

Legal Requirements

• When required by law or legal process
• To protect our rights and prevent fraud
• In connection with a business transfer or acquisition

4. Advertising and Third-Party Services

Google AdMob

For non-premium users, we use Google AdMob to display advertisements. AdMob may collect:

• Advertising identifier
• Device information and usage data
• Location data (if permitted)

You can opt out of personalized ads or remove ads entirely by upgrading to SplitZen Premium.

Analytics

We use Firebase Analytics to understand app usage and improve our services. This includes crash reporting and performance monitoring.

5. Push Notifications

We send push notifications for:

• New expenses added to your groups
• Settlement requests and payment confirmations
• Group invitations and member activities
• Important account and security updates

You can manage notification preferences in the app settings or disable them in your device settings.

6. Premium Subscriptions and Payments

• Premium subscriptions are processed through Google Play Billing
• We store subscription status to provide premium features
• Payment information is handled securely by Google
• We do not store credit card or payment details
• You can manage subscriptions through Google Play Store

7. Data Security

We implement appropriate security measures to protect your information:

• Industry-standard encryption for data transmission and storage
• Secure authentication and access controls
• Regular security audits and updates
• Row-level security policies in our database
• Secure cloud infrastructure with Supabase

8. Data Retention

• Account data: Retained while your account is active
• Expense data: Retained for service functionality
• Analytics data: Retained for up to 2 years
• Deleted accounts: Data removed within 30 days

9. Your Rights and Choices (GDPR & Privacy Rights)

Depending on your location, you may have the following rights under applicable privacy laws (including GDPR, CCPA, and other regulations):

Access and Information Rights

• Right to Access: Request a copy of your personal data
• Right to Information: Know what personal data we process and why
• Right to Portability: Receive your data in a structured, machine-readable format

Control and Correction Rights

• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we process your data

Consent and Objection Rights

• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Object: Object to processing based on legitimate interests
• Right to Opt-out: Opt out of marketing communications and personalized ads

How to Exercise Your Rights

To exercise any of these rights, contact us at help.zephyraapp@gmail.com. We will respond within 30 days (or as required by applicable law). You may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy (COPPA Compliance)

Age Restriction: SplitZen is not intended for children under 13 years of age (or under 16 in the European Union).

No Knowingly Collection: We do not knowingly collect, use, or disclose personal information from children under the applicable age limit.

Parental Rights: If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at help.zephyraapp@gmail.com.

Immediate Action: Upon verification, we will delete such information from our systems within 30 days.

Parental Consent: If we learn we have collected personal information from a child without parental consent, we will take steps to remove that information and terminate the child's account.

11. International Data Transfers and Compliance

Global Operations: SplitZen operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence.

Data Transfer Safeguards

• Adequate Protection: We ensure appropriate safeguards are in place for international transfers
• Service Provider Agreements: Our service providers (Supabase, Google) maintain appropriate data protection standards
• Legal Frameworks: We rely on approved transfer mechanisms under applicable privacy laws
• EU-US Transfers: For EU users, we ensure GDPR-compliant transfer mechanisms

Regional Compliance

• GDPR (EU/EEA): Full compliance with European data protection regulations
• CCPA (California): Compliance with California Consumer Privacy Act
• Other Jurisdictions: We comply with applicable local privacy laws

12. Changes to This Privacy Policy

Policy Updates: We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

We will notify you of any material changes through:

• In-App Notification: Prominent notice in the SplitZen app
• Email Notification: Email to your registered address (for significant changes)
• Push Notification: Mobile notification for important updates
• Updated Date: "Last updated" date at the top of this policy
• Website Posting: Updated policy posted at this URL

Your Acceptance

By continuing to use SplitZen after we post changes, you accept the updated Privacy Policy. If you do not agree with the changes, you may delete your account and stop using our services.

Material Changes

For material changes that significantly affect your privacy rights, we will provide at least 30 days' advance notice and may require your explicit consent to continue using the service.

13. Contact Information

ailable through app settings

Response Time: We aim to respond within 48 hours