Privacy Policy

This Privacy Policy explains how SplitEasy (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our Service.

0. Who We Are

SplitEasy is operated by Spliteasy. Our mailing address is Toronto, Ontario, Canada, M5G 1C5.

1. Scope

This Privacy Policy applies to SplitEasy’s website and web application, and any other services that link to this Privacy Policy (collectively, the “Service”).

2. How SplitEasy Works

SplitEasy is designed for groups. Trip and expense information you add is shared with the other members of the relevant trip or group. Other group members may be able to view, add, edit, or delete expenses and related data depending on how the Service is used.

3. Information We Collect

We collect the following categories of information:

• Account information: your email address, used for authentication (magic link) and service communications.
• Profile data: optional display name, preferred currency, locale, and timezone that you provide.
• Trip and expense data: trip/group names, expense descriptions, amounts, categories, and member information you enter.
• Information provided by others: other users may add your email address to invite you to a trip or group.
• Support communications: information you provide when you contact support (including message content and related metadata).
• Device and log data: information your browser or device sends when you use the Service, such as IP address, device identifiers, browser type, pages viewed, and timestamps. We use this for security, abuse prevention, and service reliability.
• Usage data (with consent): page views, session duration, and feature interaction events collected via Google Analytics 4 to help us understand how the Service is used and improve it. This data is only collected when you consent to analytics cookies.

4. Cookies, Local Storage, and Analytics

Specifically, we use:

• IndexedDB — to cache your expense and trip data locally so the app works offline and syncs when you reconnect.
• Session cookies — to maintain your authenticated session securely.
• LocalStorage — for lightweight UI preferences and to remember your cookie consent choice.
• Google Analytics 4 cookies (_ga, _ga_*) — set only when you accept analytics cookies. These cookies help us measure page views, session duration, and feature usage. Data is anonymized and processed by Google LLC under Google’s Privacy Policy.

5. How We Use Your Information

We use your data to:

• Provide, maintain, and improve the Service
• Send transactional emails (magic link authentication, expense notifications)
• Respond to support requests
• Detect and prevent abuse or fraudulent activity
• Comply with legal obligations and enforce our Terms

We do not sell your personal data to third parties.

6. Data Sharing

Your trip and expense data is shared with the other members of your groups, as that is the core purpose of the Service. We use the following third-party infrastructure providers, each bound by appropriate data protection agreements:

• Amazon Web Services (AWS) — cloud infrastructure, database, and authentication
• Google LLC (Google Analytics 4) — website analytics, only when you have consented to analytics cookies. Google may process data outside your country; see Google’s Privacy Policy for details.
• Stripe — payment processing (we do not store card details)

We may also share information as required by law, to protect the rights and safety of our users and the Service, or in connection with a corporate transaction such as a merger, acquisition, or sale of assets.

7. International Data Transfers

We are based in Canada and may process and store information in Canada and in other countries where we or our service providers operate (which may include the United States). Where required by applicable law, we take steps designed to provide an appropriate level of protection for cross-border transfers.

8. Data Retention

We retain your account and trip data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for a short period afterward to comply with legal obligations.

Because trips and expenses are shared with other group members, some records may need to be retained to preserve those members’ records (for example, expense history). Where feasible, we will remove or de-identify personal identifiers associated with deleted accounts.

9. Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and passwordless authentication to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at the address below.

You can control analytics cookies through the cookie banner on your first visit and by clearing your browser’s local storage for this site to reset your choice. You can also opt out of certain optional emails using unsubscribe links when provided.

Where applicable (for example, in the European Union/EEA and the United Kingdom), you may also have the right to object to or restrict certain processing, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

11. Children

The Service is not intended for children under 13. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps consistent with applicable law.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice in the app. Continued use of the Service constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests, contact us at hello@spliteasy.travel.