Privacy Policy
This policy explains what personal data Splixit processes, why, who it is shared with and for how long it is kept.
1. Data controller
The data controller is the private individual who publishes Splixit, on a non-professional basis, and who alone determines the purposes and means of the processing described here.
Any request about your data, including exercising the rights set out in section 11, goes to this address: contact@splixit.app. You may ask there for the controller's full identity.
2. What Splixit does not do
- No advertising, and therefore no advertising profiling.
- No audience measurement and no behavioural tracking: no Google Analytics, no advertising SDK, no third-party tracker.
- No sale or rental of your data to anyone.
- No bank details are requested, processed or stored: Splixit does not move money.
- No location data is collected.
3. Data processed, and why
| Data | Why | Legal basis |
|---|---|---|
| E-mail address, display name, account identifier | Create and secure your account, identify you to other participants, send you sign-in links | Performance of the contract |
| Profile picture you upload | Represent you in your groups | Performance of the contract |
| Groups, participants, expenses, amounts, currencies, dates, balances | Provide the very function of the Service | Performance of the contract |
| Receipt photos and the text extracted from them | Pre-fill an expense from a receipt, at your request | Performance of the contract |
| Notifications sent to the members of a group | Tell you about additions and changes in your groups | Performance of the contract |
| Device notification token | Deliver push notifications | Performance of the contract |
| Preferences (language, theme) | Show the application the way you chose | Performance of the contract |
| Technical and error logs | Diagnose failures, prevent abuse, keep the Service secure | Legitimate interest |
None of this data is used to profile you, and no automated decision producing legal effects is taken about you.
4. Automatic receipt scanning
When you explicitly ask for a receipt to be scanned, its photo is sent to the Google Gemini API, which extracts the merchant, the lines and the amounts. This only happens when you ask for it: without that action, no image leaves the Service.
A receipt can hold more than amounts: a shop name, an address, a date and time, a table number, sometimes the last digits of a card. That information is sent along with the image.
If a receipt holds something you would rather not send, enter the expense by hand instead of scanning it, or cover the relevant area before taking the photo.
Google states that data sent through this paid API is not used to train its models. You are free never to use this feature.
5. What other participants can see
Splixit is a collaborative tool: joining a group makes some information visible to its other members.
- your display name and profile picture;
- the expenses you create or change, and your name in the matching notifications;
- the amounts assigned to you and your balance in the group.
Your e-mail address is not shown to other participants. Remember that anyone holding an invitation link can join the group and see this content.
6. Recipients and processors
| Provider | Role | What it receives |
|---|---|---|
| Google Firebase |
Hosting, authentication, database, notifications | All of the Service's data |
| Google Gemini | Extracting the contents of a receipt | The receipt photo, at your request only |
| Gravatar (Automattic) | Showing a default avatar | A hash of your e-mail address, never the address itself |
| Frankfurter | European Central Bank exchange rates | Currency codes and a date only — no personal data |
| Apple, Google | Delivering push notifications | The device token and the contents of the notification |
Your data may also be disclosed to a judicial or administrative authority where the law requires it.
7. Hosting and transfers outside the European Union
Splixit's server-side processing is configured on Google
infrastructure located in the European Union
(europe-west1, Belgium).
Some providers are nonetheless established in the United States or may operate there, in particular for receipt scanning, notification delivery and avatar display. Those transfers rely on the mechanisms the GDPR provides: an adequacy decision or standard contractual clauses.
8. How long data is kept
Your data is kept for as long as your account is active.
Deleting your profile
Deleting from within the application is a logical deletion: your profile disappears from the application and you stop receiving notifications, but your account stays restorable for 12 months. During that period your e-mail address stays reserved so that restoration remains possible, and cannot be used to create another account. After that, the data is deleted or anonymised.
Shared data
Groups, expenses and balances shared with other participants are not deleted: they remain necessary for the consistency of the other members' history and accounts, whose rights must also be respected.
Erasing identifying data
Beyond the deletion available in the application, you may ask for your identifying personal data — name, e-mail address, avatar, profile metadata — to be erased by writing to contact@splixit.app.
Data still needed by other participants is then pseudonymised or anonymised rather than deleted, so as not to break the history of the groups you took part in.
9. Data stored on your device
Splixit keeps a local copy of your groups and expenses so that it stays usable offline, along with your display preferences and your session. That data stays on your device and disappears when you uninstall the application or clear the site's data.
Splixit uses no advertising cookie and no third-party tracker.
10. Security
Access to data is enforced on the server: only the members of a group can read its contents, and only the holder of an account can reach their profile and notifications. Traffic is encrypted in transit.
As no system is infallible, should a data breach be likely to result in a high risk to your rights, you will be informed in accordance with the GDPR.
11. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent where processing relies on it.
To exercise them, write to contact@splixit.app. You will receive an answer within one month.
Some rights meet a limit that comes from the shared nature of the Service: erasing data that cannot be separated from a group's history takes the form of anonymisation, so as to preserve the other participants' rights.
If an answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL) or with the supervisory authority of your country of residence.
12. Children
Splixit is for people aged 15 or over and is not intended for children. If you become aware that a child under 15 has created an account, write to contact@splixit.app: the account and the associated data will be deleted.
13. Changes to this policy
This policy may change. The update date at the top of this page prevails. Where a change is substantial — a new recipient, a new purpose — you will be told inside the application.