Privacy Policy

Scope and Overview

QuidSplit is a shared ledger for friends. You choose who you share your expenses with and what kind of expenses you want to share. When you share an expense, the details of those transactions are visible to those you share them with, whether an individual friend or a group. Expenses you add in QuidSplit are not made public.

We do not share your personal information with third parties for marketing purposes. We will never share your information with other parties for use other than as described in this policy without your consent.

1. Data Controller

QuidSplit is operated by a company registered in India. For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for personal data collected through our service. You may contact us at hello@quidsplit.com.

2. Data We Collect

We collect the following categories of personal data:

• Registration information: Name, email address, phone number (optional), and password (hashed). We require an email so we can contact you and so you can access your data from any device. Friends may be able to add you as a contact using your email or phone number.
• User-generated content: Expense descriptions, amounts, dates, currencies, group names, payment records, comments, and group memberships you create or participate in. This information is shared with contacts you specify (e.g., group members can see shared expenses). You are solely responsible for which contacts you share this information with.
• Information shared by others: Other users may share information with you using your contact details (e.g., adding you to a group). That information will be stored under your account according to your preferences.
• Usage information: How you use the service, including types of expenses, features used, actions taken, and time, frequency, and duration of activities. We use this to improve our service.
• Device and technical data: IP address, device type, browser, operating system, and approximate location. We use this for security, service operation, and regulatory compliance.

3. Legal Basis (GDPR Art. 6)

We process your data on the following legal bases: (a) performance of our contract with you (providing the service); (b) your consent where we ask for it (e.g. marketing); (c) our legitimate interests (security, fraud prevention, improving the service); and (d) compliance with legal obligations.

4. How We Use Your Data

We use your data to: record informal records of expenses, IOUs, and payments; provide, maintain, and improve QuidSplit; send transactional emails (e.g., expense notifications); help your contacts manage their relationship with you (e.g., displaying your email to group members so they can identify who they share bills with); respond to support inquiries; detect and protect against errors, fraud, or criminal activity; enforce our terms; and comply with applicable law.

We do not sell your personal data. We do not share your personal information with third parties for marketing purposes.

5. Data Sharing

We may share data with service providers (e.g., hosting, email, analytics) who act as processors under GDPR. We require appropriate data processing agreements. Our vendors are contractually obligated to protect your information in line with this policy.

We may disclose personal information when required by applicable law, including to respond to subpoenas, court orders, or legal processes; to investigate or prevent violations of our terms, illegal activity, or fraud; or to protect the rights, safety, or security of users or the service.

If our company or assets are acquired, customer information may be transferred. The acquiring party will assume the rights and obligations described in this policy.

6. International Transfers

Your data may be processed in India or other countries. Where we transfer data outside the EEA, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) as required by GDPR.

7. Your Rights (GDPR) and Choices

You have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restrict processing
• Data portability — you can request an export of your data
• Object to processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority in your country

You may access, review, and update your personal information from your Account Settings. You can request a data export by contacting us. To exercise any of these rights, contact us at hello@quidsplit.com.

We may send periodic service-related emails or notifications. You may choose whether to receive optional communications in your account profile. Certain messages (e.g., password resets, security alerts) are necessary and you may not opt out of those.

8. Account Closure, Data Retention, and Deletion

You may close your account at any time in account settings. When you close your account, you may choose to deactivate (retain information for a reasonable period so you can reactivate) or permanently delete (permanent removal of personal data). We will use your email or phone to confirm deletion requests. Once deleted, data is not retrievable.

Please note: even if you delete your account, non-personal information concerning shared expenses may still appear in other members' accounts (e.g., amounts owed). Your personal information (name, contact details) will not appear.

We retain your data as long as necessary to serve you and operate our business, and to comply with legal obligations, prevent fraud, resolve disputes, and enforce our terms.

9. Children

QuidSplit is not intended for use by children under 13 years of age (or 16 in certain jurisdictions, including the EU/EEA). We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at hello@quidsplit.com and we will promptly delete that information.

10. Security

We use technical and administrative security measures such as encryption and authentication to protect your information. No transmission over the Internet can be guaranteed 100% secure. You are responsible for the security of your information when using unsecured networks. We will contact you as required by law in the event of a breach affecting your data.

11. Cookies

We use cookies and similar technologies for session management and to improve our service. For details, see our Cookie Policy.

12. Changes

We may update this policy periodically. If we make material changes, we will notify you. Changes are effective immediately upon posting. The date last revised appears at the top. Continued use after changes constitutes acceptance.