Privacy Policy

Last updated: March 2026

Introduction

Splivio is operated by Nicolas Ross, a sole proprietor based in Canada ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our expense sharing application, including the web app and the Splivio mobile apps for Android and iOS. By using Splivio, you agree to the practices described in this policy.

Data Controller and Privacy Officer

The data controller responsible for your personal information is Nicolas Ross, operating as Splivio. For any privacy-related inquiries, requests, or concerns, please contact our Privacy Officer through our Contact page.

Information We Collect

We collect only the information necessary to provide our service. This includes information you provide directly and data generated through your use of the application:

  • Account information: name, email address, and profile picture
  • Expense data: amounts, descriptions, dates, and participants
  • Social connections: friend connections and group memberships
  • Usage data: how you interact with our service (pages visited, features used)
  • Technical data: session identifiers, language and timezone preferences; on mobile: device type, operating system version, and push notification token
  • Biometric data (passkeys): if you register a passkey using Face ID or fingerprint, biometric data is processed entirely on your device by your operating system and never transmitted to or stored by Splivio
  • Analytics data: aggregated usage statistics collected via Google Analytics (only with your consent)

Legal Basis for Processing

We process your personal information on the following legal bases:

  • Performance of a contract: to provide the core features of the application (expense tracking, friend and group management, notifications)
  • Consent: for optional analytics (Google Analytics) and for sending certain types of email notifications — you may withdraw your consent at any time
  • Legitimate interest: to protect the security of our service and prevent fraud

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process and track expense sharing between users
  • Send you notifications about expenses, settlements, and friend requests (via email and, on mobile, push notifications)
  • Protect against fraud and ensure the security of the application
  • Understand how our service is used and improve it (with your consent, via Google Analytics)

Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

  • With other Splivio users: your name is visible to friends you split expenses with — this is inherent to the service
  • With service providers acting as data processors on our behalf: Amazon Web Services (email delivery, hosted in Canada), Google (analytics, with your consent; Sign in with Google), and Apple (Sign in with Apple)
  • When required by law or to protect the rights and safety of our users

International Data Transfers

Your data is hosted in Canada. Email delivery is processed by Amazon Web Services using their Canadian region (ca-central-1), keeping that data in Canada. If you consent to analytics, Google Analytics may transfer aggregated usage data to the United States. Google and Apple process authentication data when you use social login, subject to their own privacy policies.

Data Retention

We retain your personal information for as long as your account is active. When you delete your account, your personal information is permanently deleted within 3 months. Note that expense records shared with other users (such as group expenses) may remain visible to those users as part of their own records.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of sensitive data, secure connections (HTTPS), and access controls. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by applicable law. No method of transmission over the Internet is 100% secure.

Cookies, Tracking, and Mobile Identifiers

On the web app, we use two categories of cookies:

  • Essential cookies: required for the application to function (session management, language and timezone preferences). These are set automatically and cannot be disabled.
  • Analytics cookies: used by Google Analytics to help us understand how the service is used. These are only set after you give your consent via the cookie banner displayed on your first visit. You may withdraw your consent at any time via the cookie settings in the application footer.

On the mobile apps, we use equivalent local storage mechanisms instead of cookies. If you consent to analytics, Google Analytics may use your device's advertising identifier (IDFA on iOS, GAID on Android). On iOS, you will be prompted for permission under Apple's App Tracking Transparency framework before any such identifier is accessed.

Your Rights

You have the following rights regarding your personal information:

  • Right to access: obtain a copy of the personal information we hold about you
  • Right to correction: request that inaccurate or incomplete information be corrected
  • Right to deletion: request the deletion of your account and associated personal data
  • Right to portability: receive your data in a structured, commonly used format
  • Right to withdraw consent: withdraw consent for analytics or email notifications at any time, without affecting the lawfulness of prior processing
  • Right to restrict processing: request that we limit how we use your data in certain circumstances
  • Right to object: object to processing based on legitimate interest
  • Right to de-indexing: request that personal information published online be de-indexed or no longer disseminated (Quebec residents)

To exercise any of these rights, please contact us through our Contact page.

Filing a Complaint

If you believe your privacy rights have not been respected, you may file a complaint with the relevant supervisory authority:

  • Quebec residents: Commission d'accès à l'information (CAI) — www.cai.gouv.qc.ca
  • Canadian residents: Office of the Privacy Commissioner of Canada (OPC) — www.priv.gc.ca
  • EU/EEA residents: your local data protection authority

Children's Privacy

Splivio is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with their information, please contact us through our Contact page and we will promptly delete it.

Third-Party Services

Our application integrates with third-party services that have their own privacy policies: Google (Sign in with Google, Google Analytics), Apple (Sign in with Apple), Google Play Store, and Apple App Store. We encourage you to review their policies. We are not responsible for the privacy practices of these third parties.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the application, and we will update the "Last updated" date above. We encourage you to review this policy periodically.

Contact

For any questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer through our Contact page.