Your household’s business, kept that way.

Who we are

• ExpnSplit runs ExpnSplit from New South Wales, Australia. In this policy, “we” and “us” mean ExpnSplit.
• ExpnSplit helps people who live together record shared expenses and work out who owes whom. It is made for households in Australia.
• Ask the person who sent you your invite. They run ExpnSplit and will reply within 5 business days.

What we collect

• Your email address, to send you sign-in codes, and the name you choose to show your household.
• What you and your household enter: expenses, receipt photos, recurring bills, payments you record, notes on them, and money requests.
• Your PayID, if you add one, so people who owe you can pay you in their own banking app.
• If you turn on notifications, the address your browser gives us to deliver them. If you add a passkey, the public half of it: your fingerprint or face never leaves your phone.
• What keeps sign-in secure: when you sign in, our providers see your IP address and browser details, and we keep a record of your signed-in devices so you can sign them out.
• The answers you give if you send feedback.
• When paid plans open: whether your household is on a paid plan and its billing status. Card details go straight to our payment provider, Stripe. We never see or store your card number.
• We don’t collect your location, contacts, or anything else from your phone.

Why we use it

• To run ExpnSplit for you and your household: sign-in, balances, reminders and notifications you’ve turned on.
• To keep it secure: stopping automated sign-ups, spotting misuse, and fixing problems.
• To answer you when you contact us, and to improve ExpnSplit from the feedback people send.
• To charge for paid plans, once they open, and to keep the records the law requires.
• We don’t sell your information, show ads, or use it to profile you. We only send marketing emails if you’ve asked for them, and every one has an unsubscribe link.

Who can see it

• An expense is seen only by the people in it: who paid, who added it, and who shares it. Everyone in the household sees the overall balances and the payments between members.
• Your PayID is seen only by people you currently share a household with. A payment’s screenshot is seen only by the two people in it.
• When you ask to join a household, its admins see your name and email address, so they can tell it’s really you before letting you in.
• The person who runs ExpnSplit can see account and household records to keep the service working, answer requests and fix problems. Their access needs a second sign-in step, and we don’t look at your expenses without a reason.
• We share information with the service providers below, only to run ExpnSplit, and if the law requires it (for example, a valid court order).

Where it is kept, and overseas providers

• Your data and receipt photos are stored by Supabase in Sydney, Australia.
• Some of the companies that help us run ExpnSplit are based overseas, mainly in the United States, and may handle your information there: Supabase (database), Vercel (runs the website), Resend (sends sign-in emails), Cloudflare (the sign-in security check), GitHub (keeps our encrypted nightly backups) and, once paid plans open, Stripe (payments). Notifications go through your browser’s own push service, such as Apple’s or Google’s.
• We choose providers that protect information to a standard similar to Australia’s, and use them only to run ExpnSplit.

How long we keep it

• Your household’s records are kept while the household exists, so balances stay right.
• When a household’s first 4 weeks end, it moves to the Free plan and nothing is deleted. We keep a summary of how much each household used its trial (never the expenses themselves) and any feedback.
• If you delete your account, your sign-in and personal details go. Expenses and payments you shared with others stay for them, shown as “Deleted user”, so their balances don’t change.
• Nightly backups are encrypted and each one is kept for 90 days, so deleted data can remain in older backups until they expire.
• Once paid plans open, billing records are kept for 5 years because Australian tax law requires it.

How we protect it

• Everything travels encrypted. The database only lets each person reach what they’re allowed to see, and backups are encrypted before they leave the database.
• Sign-in uses one-time email codes or passkeys, never passwords. The person who runs ExpnSplit needs a second step from an authenticator app.
• No system is perfectly secure. If a breach of your information is likely to cause you serious harm, we’ll tell you as soon as we can, what happened and what to do.

Your choices and rights

• See and correct: change your name and PayID in your Profile. Ask us for a copy of what we hold about you and we’ll send it, usually within 30 days.
• Delete: use Delete my account in your Profile, or ask us. We delete it within 30 days, as described above.
• Turn notifications off at any time in your Profile or your phone’s settings.
• You can use ExpnSplit under a nickname; your household admins will still see your email when you ask to join.

Cookies and your device

• We use only the cookies needed to keep you signed in. There are no advertising or tracking cookies.
• Your browser also remembers a few preferences for you, such as dark mode or a notice you’ve dismissed.

Age

• ExpnSplit is for people aged 18 and over.

Changes to this policy

• If we change this policy, we’ll update the date at the top. For important changes we’ll tell you in the app and ask you to agree again before you carry on.

Questions and complaints

Ask the person who sent you your invite. They run ExpnSplit and will reply within 5 business days. We can answer questions, send you a copy of your data, correct it or delete it.

If you’re not happy with how we handle a privacy concern, tell us first and we’ll try to fix it. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au. See also our Terms.