Privacy Policy
Last updated 20 August 2026
LetsSplit is an app for splitting shared expenses. This policy explains exactly what it stores, where each thing is stored, and who can read it. It is written to be read, not to be survived.
Who we are
LetsSplit is made by Jassim Albuarki. You can reach us at hello@letssplitapp.com.
Using the app without an account
You can open LetsSplit and use it without signing in. In that state you get one example trip to try the app with. Nothing is sent anywhere, no account exists, and the example trip is never uploaded — not even after you sign in later.
What is stored on your phone
Everything. LetsSplit keeps the complete ledger on your device, which is why it works with no signal. That includes:
- Your trips, the people in them, every expense, and every settle-up.
- Photos you attach — receipts, profile pictures, and trip pictures.
- Your preferences: accent colour, appearance, preferred currency.
- Recently downloaded exchange rates, so rates work offline.
Deleting the app removes all of it from your phone.
What is sent to our server, once you are signed in
Signing in with Apple or Google is required to keep your own trips and to share a trip with anyone. From that point, the following is stored on our server:
- The contents of your trips. Trip names, expense descriptions, amounts, dates, categories, notes, currencies and exchange rates, the names and colours of the people in each trip, who paid what, and settle-ups between them.
- Your account. A user identifier and the email address supplied by Apple or Google when you sign in. If you use Apple's Hide My Email, we only ever receive the relay address.
- Your app preferences, so a new phone looks like your old one: accent colour, appearance, preferred currency, which trips you have pinned, and your chart settings.
- Invitation codes you create, and which trip each opens.
- A short-lived record of join attempts, kept only to stop people guessing at invitation codes. It is discarded within the hour.
What is never sent
- Photos. Receipt images, profile pictures and trip pictures stay on the device that took them. They are not uploaded, and they are not visible to anyone else in a shared trip.
- The example trip, ever.
- Which column in a grid is “you”, and whether you have seen the app's tutorial. Those are facts about your phone, not about a trip.
Who can read your trips
Access is enforced by the database itself, not by the app: a trip's contents can only be read by accounts that are members of that trip. Somebody who is not in a trip cannot read it, and an invitation code cannot be read back after it is created.
To be straightforward with you: trip contents are not end-to-end encrypted, so they are technically readable by us as the operator of the service. We access them only where it is necessary to run and repair the service. We do not read them for any other purpose, we do not sell them, and we do not share them with anyone.
Data is encrypted in transit, and encrypted at rest by our hosting provider.
What we do not collect
- No analytics or usage tracking of any kind.
- No advertising, ad identifiers, or third-party advertising SDKs.
- No location data, contacts, photo library scanning, or address book access.
- No selling or sharing of personal data with data brokers, ever.
Other services the app talks to
- Supabase — hosts our database and handles sign-in. Trip contents and account details described above are stored there.
- Apple and Google — only to sign you in. They tell us an identifier and an email address; we tell them nothing about your trips.
-
Frankfurter (
api.frankfurter.dev) — a free exchange-rate service, used with no account and no API key. The app asks it questions of the form “what was EUR to USD on this date”. Nothing about you, your trips, or your amounts is included in that request.
How long things are kept
- Trips stay until they are deleted.
- A deleted trip goes to Recently Deleted for 30 days, and is then permanently removed.
- Invitation codes expire, and can be turned off sooner by anyone in the trip.
- Join-attempt records are discarded within the hour.
Deleting your account
You can delete your account from inside the app, in Settings. Deleting it removes your sign-in identity, your settings, your memberships, and any trip that nobody else is in. A trip other people are still using is handed over to whoever has been in it longest, so their copy keeps working.
Your phone keeps everything it already had. Deleting your account does not erase your own ledger, and you can carry on using the app without one.
Your rights
Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to how it is processed. The app gives you the first and last of those directly: every trip can be exported as a spreadsheet, a report or an image from the Summary screen, and account deletion is in Settings. For anything else, write to hello@letssplitapp.com and we will respond within 30 days.
Children
LetsSplit is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to us and we will delete it.
Changes to this policy
If this policy changes in a way that affects what we store or who can read it, we will update the date at the top and note the change in the app's release notes.