Splitbilly Privacy Policy
This policy explains what information the Splitbilly mobile app (the "App") handles, why we handle it, who we share it with, how long we keep it, and the choices and rights you have. It applies to everyone who uses the App on iOS or Android.
This policy is also available in Korean and Japanese.
1. Who we are
The App is run by Triple7Day ("we", "us", "our"), based in the Republic of Korea. We decide how and why the information described in this policy is processed. In legal terms, we're the "controller" or the organisation "responsible" for it.
You can reach us at triple7day@gmail.com. Section 13 has more ways to contact us.
2. What we collect
The App has no sign-up or login. We don't create an account for you, and we don't ask for your name, phone number, or email address to identify you. Here is what the App actually handles.
2-1. Information that stays on your device
Groups, members, split records, and amounts you create are stored only in a database on your device. They're never sent to us. They're erased when you delete them in the App or uninstall it. We can't see, access, or recover them.
| Item | Details |
|---|---|
| Group names, member names, split records, amounts | What you enter so the App can do the math |
| Bank details (bank name, account number, account name) | Optional, entered so friends know where to pay you. Never sent to us or anyone else, and we never check whether the account exists |
| Receipt photos (regular scan) | Used only to read the receipt. Deleted from your device once the split is done or you cancel the scan (leftover temporary files are cleaned up after 24 hours) |
| Photos in the receipt box | Photos you save to split later. Up to 12 per group, kept on your device until you split them or remove them |
2-2. Information sent to our server to read receipts with AI
When you use "Split from a receipt photo", the photo you take and the technical identifiers below are sent to a server we manage, where artificial intelligence (AI) reads the items and amounts. The service provider that does this is listed in section 4. This feature only works after you agree to it the first time.
| Item | What it is | Why |
|---|---|---|
| Receipt photo | The image you took | To read the items and amounts with AI (processed right away, never stored on our server) |
| Install ID (installId) | An anonymous ID for each install. It doesn't identify you and changes if you reinstall | To add up usage (processing cost) per install |
| App version and build number | e.g., 1.3.0 / 20 | To track reading quality and bugs by version |
| Platform and OS version | e.g., android / 15 | To track bugs by OS |
| Connection info (User-Agent) | A value automatically attached when the App talks to our server | To investigate connection problems |
- The technical identifiers are used only to log bugs and costs, not to read the receipt or to instruct the AI. A bad value never makes a scan fail.
- We don't send the install ID from devices that limit ad tracking or haven't agreed to data collection.
- Receipt photos and the raw reading results are discarded right after processing and never stored on our server. Processing logs that include the technical identifiers are kept for the period in section 6.
2-3. Information collected automatically when you use the App
| Item | Why |
|---|---|
| Device model, OS version, IP address, and usage such as screens viewed and time spent | To understand how the App is used and improve it |
| Error and crash reports, stack traces | To find the cause of bugs and keep the App stable |
| Advertising ID (Android advertising ID / iOS IDFA), ad impressions and clicks (Google AdMob) | To show ads, prevent invalid clicks, and, where you allow it, show personalised ads |
The App doesn't collect precise location such as GPS. We don't collect sensitive information such as health, biometric, or government ID information.
3. How we use it and why we're allowed to
We use information only for the purposes below. Some laws require us to name a "legal basis" for each purpose, so we list that too.
| Purpose | Legal basis |
|---|---|
| Reading receipt photos with AI so the App can calculate the split | Your consent, given on the first scan |
| Detecting and investigating bugs and outages, keeping the App stable | Our legitimate interest in providing an App that works |
| Understanding usage to improve features | Our legitimate interest in improving the App |
| Showing ads and preventing invalid clicks | Our legitimate interest in funding a free App |
| Showing personalised ads | Your consent, where the law requires it (see section 7) |
| Answering your questions and requests | Our legitimate interest in responding to you, or our legal obligation when you use your rights |
| Complying with the law and protecting rights and safety | Our legal obligations |
Where we rely on legitimate interests, we've weighed them against your rights. We use only information that doesn't identify you directly and keep it for a short time. You can object at any time (section 8).
If we want to use information for a new purpose that isn't compatible with these, we'll update this policy and, where required, ask for your consent first.
We don't use your information for automated decisions that have legal or similarly significant effects on you. The AI only reads receipts. It doesn't make decisions about you.
4. Who we share it with
We don't sell your personal information for money. We share it only in the cases below.
Service providers. They process information on our behalf, only for the tasks we give them, under a contract that requires them to protect it.
| Service provider | What they do | How long |
|---|---|---|
| Google LLC (Google Cloud, Firebase) | Reads receipt images with AI | Until the task is done (photos discarded right after processing) |
| Google LLC (Google Cloud) | Stores server processing logs | 30 days (section 6) |
| Google LLC (Firebase) | Usage analytics, crash reporting, feature checks and remote configuration | For the retention period we set (section 6) |
| Google LLC (AdMob) | Shows ads and prevents invalid clicks | As described in Google's policies (section 7) |
Legal reasons. We may disclose information if the law requires it, or if we believe in good faith that it's needed to protect someone's life, safety, or property.
Business transfer. If the App is sold or transferred, information may pass to the new owner, who must keep protecting it as this policy describes. We'll let you know before that happens.
5. International transfers
We're based in the Republic of Korea, and our service provider, Google LLC, processes some information in other countries. The laws there may differ from yours.
| Information | Where | Provider |
|---|---|---|
| Technical identifiers sent when reading receipts | Republic of Korea (server location). It may pass through Google facilities in other countries during processing | Google LLC |
| Other automatically collected information in section 2-3 (usage, crash reports, advertising ID, etc.) | The United States and other countries where Google runs data centres. Google doesn't publish a full list, so we can't name every country | Google LLC |
We protect information transferred across borders in these ways:
- Google processes it under its data processing terms for Google Cloud, Firebase, and Google Ads. These include safeguards recognised by data protection laws, such as standard contractual clauses and the UK International Data Transfer Addendum.
- Some countries, such as the UK, have recognised the Republic of Korea as providing adequate protection.
If you don't want your information processed abroad, you can choose not to use the related features. For example, don't agree on the receipt scan consent screen, or turn off ad personalisation (section 7). Those features may then be unavailable, but the rest of the App still works.
6. How long we keep it
We keep information only as long as we need it for the purposes in section 3.
| Information | How long |
|---|---|
| Receipt photos and raw reading results sent to our server | Discarded right after processing. Never stored |
| Server logs from receipt reading (request ID, technical identifiers, a summary of the result) | 30 days from the day they're recorded, then deleted automatically |
| Usage analytics | For the retention period we set in Google Analytics, then deleted automatically |
| Crash reports | For the retention period set in Firebase Crashlytics, then deleted automatically |
| Information on your device (section 2-1) | Until you delete it or uninstall the App |
While we keep server logs, we look at them only to add up costs and investigate outages. When information is no longer needed, we delete it so it can't be recovered, or make it anonymous.
7. Ads and your choices
The App is free because it shows ads through Google AdMob. AdMob may collect your advertising ID to show ads and prevent invalid clicks.
- Consent where the law requires it. In places where the law requires consent for personalised ads, such as the UK and Switzerland, we ask for it through a consent message before showing personalised ads. If you don't agree, you'll see non-personalised ads, and everything else in the App works the same.
- Change your choice any time. Go to Settings > Privacy choices in the App.
- iOS. The App Tracking Transparency prompt lets you choose whether to allow tracking for personalised ads. You can change it later in iOS Settings.
- Device settings. You can turn off ad personalisation or reset your advertising ID at any time (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads, or Settings > Privacy > Ads).
- "Sharing" and targeted advertising. Some laws, such as certain US state laws, call personalised ads "sharing" personal information or "targeted advertising". You can opt out at any time using the choices above.
- Do Not Track. The App isn't a web browser, so it doesn't receive browser Do Not Track or Global Privacy Control signals. Use the choices above instead.
To learn how Google uses information from apps that use its services, see https://policies.google.com/technologies/partner-sites.
8. Your rights
Depending on the law where you live, you may have the right to access, correct, or delete your personal information, to object to or limit how we use it, and to withdraw your consent at any time.
Most of your information stays only on your device, so you can delete it at any time in the App or by uninstalling it. For anything else, email us (section 13), and we'll respond as required by applicable law. Our server logs don't identify you, so we may not be able to find records that relate to you.
If you have a concern, please contact us first. You may also have the right to complain to the data protection authority where you live.
9. How we keep it safe
- We check that each receipt reading request comes from an officially distributed copy of the App, and our server rejects any request it can't verify.
- Connections to our server are encrypted (HTTPS).
- Sensitive information such as bank details is never sent to us and stays only on your device.
- Access to our server and logs is limited to those who need it to run the App.
No method of storing or sending information is completely secure. If a breach affects your information, we'll notify you and the authorities as the law requires.
10. Children
The App isn't directed at children under 13 (or the higher age set by the law where you live), and we don't knowingly collect their personal information. The App has no sign-up, so it doesn't ask for or check your age. If you believe a child has given us personal information, please contact us and we'll delete it.
11. Other apps and websites
The App may link to app stores, websites, or ads run by others. Their own privacy policies apply, not this one.
12. Changes to this policy
We may update this policy when laws, our practices, or security technology change. We'll let you know in the App or on this page at least 7 days before a change takes effect, or at least 30 days before for important changes that affect your rights, such as what we collect, how we use it, or who we share it with. Where the law requires it, we'll ask for your consent again.
- Published: September 30, 2026
- Effective: September 30, 2026
13. Contact us
For questions, requests, or complaints about this policy or how we handle your information:
- Operator: Triple7Day
- Email: triple7day@gmail.com
This email also reaches our privacy officer (data protection contact).