Privacy Policy

Last Updated: February 8, 2025

1. Introduction

TripSplit ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information when you use our mobile application TripSplit (hereinafter referred to as the "App").

2. Data Collection

2.1. Data We Do NOT Collect

The App does not require registration and does not collect the following types of personal data:

• Email addresses
• Phone numbers
• Real user names
• Login credentials
• Precise location data
• Contacts from address book
• Payment card data

2.2. Data You Provide

When using the App, you may enter the following data:

• Trip names — any arbitrary names you create
• Participant names — any names you enter (not necessarily real names)
• Expense and item names — arbitrary names of goods and services
• Expense amounts — numerical values
• Expense dates
• Receipt images — photos of receipts you take with the camera or select from the gallery

2.3. Automatically Collected Data

Data for App Functionality

• Local data — information about your trips and expenses is stored locally on your device in encrypted form
• Technical data — app version, operating system version, device type (for compatibility purposes)

Data Collected by Third Parties

Google AdMob (Advertising)

The App uses Google AdMob to display advertisements. AdMob may automatically collect the following data:

• Advertising ID (IDFA) — device advertising identifier
• IP address
• Device information — device model, operating system version
• Approximate location — for ad targeting (country/region, not precise location)
• Ad interaction data — ad impressions, ad clicks

This data is collected in accordance with Google's Privacy Policy and is used to display relevant advertisements.

3. Use of Data

3.1. Data You Enter

Trip and expense data is used solely for:

• Creating and managing trips
• Calculating balances between participants
• Synchronizing data between devices of participants in the same trip
• Generating reports and PDF documents

3.2. Receipt Images

Receipt images are sent to our server (api.moneyshare.xyz) for:

• Automatic text recognition on receipts using artificial intelligence technology (OpenAI GPT-4o Vision)
• Extracting information about items, prices, and amounts
• Simplifying expense data entry

Image Processing:

• Images are processed on our server
• After processing, images may be deleted from the server (depending on storage settings)
• Images are not used for purposes other than recognizing receipt content

3.3. AdMob Data

Data collected by Google AdMob is used for:

• Displaying relevant advertisements
• Measuring advertising campaign effectiveness
• Fraud prevention

4. Data Storage

4.1. Local Storage

Trip and expense data is stored locally on your device:

• Data is encrypted using AES-256
• Encryption keys are stored in iOS secure storage (Keychain)
• Data is synchronized with our server for access from other devices

4.2. Server Storage

• Trip data is stored on our server for synchronization between participants
• Receipt images may be temporarily stored on the server for processing
• We take measures to protect data on the server

4.3. Data Deletion

You can delete your data at any time:

• Deleting a trip in the app deletes data locally and on the server
• Uninstalling the app from your device deletes all local data
• For complete deletion of data from the server, contact us (see "Contact" section)

5. Data Sharing with Third Parties

5.1. Google AdMob

We use Google AdMob to display advertisements. Data collected by AdMob is shared with Google in accordance with their privacy policy.

5.2. OpenAI

Receipt images are processed using OpenAI GPT-4o Vision API. Images are sent to OpenAI for text recognition. Please review OpenAI's Privacy Policy.

5.3. Server Hosting

Our server is hosted on Hetzner. Data is stored in accordance with their terms of use.

6. Security

We take measures to protect your data:

• Local data encryption (AES-256)
• Use of HTTPS for data transmission
• Secure storage of encryption keys in iOS Keychain
• Regular server security updates

However, no method of transmitting data over the Internet is absolutely secure. We cannot guarantee absolute security of your data.

7. User Rights

In accordance with applicable law, you have the right to:

• Access — request information about data we store
• Correction — correct inaccurate data
• Deletion — delete your data
• Restriction of processing — limit the use of your data
• Data portability — receive a copy of your data

To exercise these rights, contact us (see "Contact" section).

8. Children

The App is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

9. Changes to Privacy Policy

We may periodically update this privacy policy. We will notify you of significant changes through the app or by email (if you have provided an address). The date of the last update is indicated at the beginning of this document.

10. Contact

11. Applicable Law

This privacy policy is governed by the laws of the Russian Federation and complies with the requirements of:

• Federal Law "On Personal Data" (Russia)
• General Data Protection Regulation (GDPR) — for users from the EU
• California Consumer Privacy Act (CCPA) — for users from California

---