Your data, your privacy.

01 Introduction

This Privacy Policy describes how Ninja Tech Solutions ("we", "us", "our") collects, uses and protects your information when you use the Splito mobile application ("App"). Splito is an expense-splitting and group payments tracking app.

By using the App, you agree to the collection and use of information in accordance with this policy.

02 Information We Collect

When you sign in, we receive:

• Your email address (or, if you use Apple's Hide My Email feature, the relay address Apple provides)
• Your display name
• A unique identifier from the sign-in provider (Firebase UID)

We do not receive your password, contacts, photos, or other Google or Apple profile details.

We collect information you actively provide through the App:

• Expense groups you create or join (name, members, currency)
• Expenses you add (description, amount, split shares, payer)
• Settlement records between group members
• Usage signals indicating active use of the App
• Authentication tokens for session management

Local caches of groups, expenses, and member data are stored on your device to enable offline access. Authentication tokens are stored securely using your device's secure storage.

03 How We Use Your Information

• Account creation and authentication
• Enabling group expense tracking and settlement calculations
• Maintaining service reliability and performance
• Responding to support requests
• Complying with applicable law

04 Sharing & Disclosure

We share information only in these limited circumstances:

• Group members: your display name and expense data are visible to members of groups you belong to
• Service providers: as described in section 5 below
• Legal requirement: when required to do so under applicable Indian law

We do not sell, rent or trade your personal information to any third party.

05 Third-Party Services

The App uses the following third-party services to operate:

• Google Firebase Authentication — sign-in verification
• Google Sign-In — account login via Google
• Sign in with Apple — account login via Apple ID
• Amazon Web Services — backend infrastructure hosting

Each service provider is bound by their own privacy policy and we require them to maintain protection standards consistent with this policy.

06 Data Retention

We keep your account information for as long as your account is active. Expense data is retained while the group it belongs to remains active.

When you delete your account, your personal data is removed immediately. Expense records you contributed may remain visible to the group without being linked to your name or identity.

07 Account Deletion

You can delete your account at any time, directly from the App: open the menu → Settings → Delete account → confirm.

Upon deletion, we:

• Remove your account record from our systems
• Revoke all authentication tokens
• Remove you from all expense groups
• Delete your Firebase Authentication identity

After deletion, expense records you created are no longer linked to your name or any identifier you can be tracked by.

To request deletion by email, write to developer@splito.co. We process email requests within 30 days.

08 Your Rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete data
• Request erasure of your personal data
• Withdraw consent at any time
• Lodge a grievance with us or the Data Protection Board

Grievance Officer: Sanjeev
Send requests to developer@splito.co. We respond within 30 days.

09 Children's Privacy

Splito is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

10 Security

All traffic between the App and our servers is encrypted with TLS. Authentication tokens are stored in your device's secure storage (Keychain on iOS, Keystore on Android). Passwords are never collected or stored by us.

We commit to notifying affected users and relevant authorities of any security incidents promptly and in accordance with applicable law.

11 International Transfers

Data processing may occur outside India, particularly through AWS infrastructure. We require all service providers to maintain protection levels consistent with this policy and applicable Indian law.

12 Changes to This Policy

Updates to this policy are reflected in the effective date at the top of this page. Material changes will trigger an in-app notification. Continued use of the App after changes take effect indicates your acceptance.

13 Contact

Email: developer@splito.co
Company: Ninja Tech Solutions
Country: India