Your information in Splatt

Who to contact

Your support contact is Customer Service.

For help, feedback or a privacy request, email support@splatt.online. Send only the information needed to explain your question.

Ask about information held about you, corrections or deletion through that contact. Do not send passwords, sign-in links or bank credentials.

What the app keeps

• Your account email, display name and public Splatt ID, so you can sign in and connect with people you know.
• Shared expenses, participants, shares, bills, repayment records and activity, so everyone involved can understand the same ledger.
• Reviewed receipt item descriptions, assignments, charges, discounts and notes if you save an itemised expense. This shared summary explains the saved exact shares.
• Your currency, theme and notification preferences. If you enable push notifications, a browser subscription is stored to deliver them.

Splatt records manual repayments; it does not move money or provide a saved bank-details feature. Arrange how to pay with the other person separately. Never share banking passwords, PINs, card security codes or banking login credentials in the app.

Hosting, authentication and email providers also process technical and security information needed to run their services.

Receipt photos are read on your device

Choosing to read a receipt photo downloads an optional English-language reader from the Splatt website. Recognition runs locally in your browser. The photo and raw recognised text are not uploaded to a cloud reader or saved to your account.

The photo preview and recognised text are held temporarily while you review the items. You can enter items manually instead. Only the reviewed item summary, participant assignments, adjustments and any notes you save become part of the shared expense.

If the first read needs checking, Splatt can make a bounded second read on your device, including the bottom totals area. The same local processing boundary applies to that retry. Photos, raw recognised text and extraction-debug information are not retained in the shared expense.

That summary is an annotation to the expense, not a stored receipt image. The saved amount and exact shares remain the authoritative financial record. Keep private information out of item descriptions and shared notes.

Receipt formats, review steps and summary limits.

Who can see shared information

People involved in an expense, group, household or repayment can see the information they need for that shared record. Share descriptions carefully: avoid putting private information in shared expenses.

Splatt ID lookup shows a limited public profile to preview a connection. It is not a public email directory.

Removing a friend preserves both people's access to their shared financial history and Connection Statements. It does not grant access to unrelated groups, bills or private account settings.

Services used to run Splatt

If you email Customer Service, ImprovMX forwards your message to the operator's Gmail inbox. Your message is used to respond to your enquiry. Keep passwords, sign-in links and other people's financial information out of support messages.

The current website is hosted by Netlify. Supabase provides the database and account authentication. Brevo delivers account verification and password-reset emails. Google processes sign-in if you choose Google login. These providers process information under their own service and privacy terms.

The beta uses free service plans with usage limits. A limit or provider outage can temporarily interrupt the app or email delivery.

Essential browser storage keeps your sign-in, theme and installation preferences. Demo data stays in the browser. The service worker caches public app assets; it does not persistently cache private financial API responses.

The current website does not include an advertising tracker or a product analytics service such as PostHog. Adding analytics would require a separate implementation and an update to this information; receipt images, item names and financial amounts are not sent to analytics.

During a page or app session, numerical receipt-quality counters record scan outcomes, correction actions and time ranges. These counters contain no receipt content, prices, people, account identifiers or image data. They remain in memory, are not written to browser storage and are not sent to an analytics provider in this release.

Deleting your account

Open Settings → Delete account and follow the confirmation. Deletion disables account access, removes private preferences, notifications and push subscriptions, and replaces your retained profile identity with Deleted user.

Shared expenses, repayment records, bills and audit history remain so other people's balances and records stay correct. This includes reviewed receipt item summaries saved with an expense. Your old account cannot be restored by signing up again. Text you or other participants entered in shared records, including item descriptions or notes, may still contain personal information; contact the operator if a retained record needs review.

Shared financial records do not currently have an automatic deletion schedule. You can ask the operator about a particular retained record or privacy concern.

Read about shared history and Connection Statements.

Help and terms

Customer Service has sign-in, receipt, notification and deletion guidance. The terms of use explain the shared-record service and its current beta limits.