Privacy policy

Who we are

ZeeSplit is operated as a small independent project under the nameZeeSplit. For anything about your data, write toprivacy@zeesplit.com.

What we collect

• Account: your email address and display name. If you sign in with Google, also your Google profile name and picture.
• Group content you or other members add: group names, member names, expenses (description, amount, currency, date, who paid and how it is shared), settlements and a history of changes to them.
• Guests: if you join a group from an invite link without an account, we store the display name you give and a secret in a cookie in your browser; only a hash of that secret is stored on our side.
• Sessions: while you are signed in we store a session (valid 30 days) with the IP address and browser details it was created from.
• Technical logs: each request to the server is logged with an anonymous request id, the route, the status and the time taken, plus internal ids. Logs do not contain email addresses, names, amounts or invite links. Rate limiting uses a hashed form of the network address.

Google sign-in

If you choose Google sign-in we ask only for the basic scopesopenid, email and profile. We use them to create and recognise your account, show your name to the other members of your groups, and send you nothing else. The tokens Google returns are stored with your account. We do not use Google data for advertising, do not sell it, and do not transfer it to anyone except the services listed below that run ZeeSplit. ZeeSplit's use of information received from Google APIs follows theGoogle API Services User Data Policy, including the Limited Use requirements.

Why we use it

To run the app: sign you in, keep your groups, expenses and balances, let members see each other's entries, and keep the service secure and working (abuse limits, error investigation). We do not sell data, show ads, or build profiles.

Cookies

Only what the app needs to work: a session cookie when you sign in and a guest cookie when you join a group as a guest. There are no advertising or analytics cookies, and the pages on this site set none.

Who processes it for us

• Render: runs the server (API)
• Neon: hosts the database
• Cloudflare: DNS, hosting of the web pages, and encrypted nightly backups (kept 30 days)
• Resend: delivers the sign-in emails
• Google: sign-in, only if you choose it
• Sentry: receives reports of server errors
• Axiom: stores server logs

These providers handle data only to provide their service to us, and may process it outside your country.

Your choices

You can ask for a copy of your data, a correction, or the deletion of your account by writing toprivacy@zeesplit.com. We reply within 30 days. Because expenses are shared with other members, some group records may need to stay so their balances remain correct; in that case we remove your personal details from them. Backups are deleted on their 30-day schedule.

Children

ZeeSplit is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes, we update the date above, and tell signed-in users by email when the change is significant.