Privacy Policy

BalanceSplit — Last updated: September 20, 2026

This Privacy Policy describes how BalanceSplit ("we", "us") collects, uses, and shares personal data when you use the BalanceSplit mobile application and website at balancesplit.com (together, the "Service"). BalanceSplit is operated by Rami Lerner as an independent developer, based in Israel.

1. Data we collect

• Account data — email address, username you select to be used in the app, and a hashed password. Provided when you sign up.
• Activity data — activity names, dates, currencies, participant nicknames, and expense entries you create or that others create and share with you. This includes the free-text names and amounts you enter.
• Subscription data — your current plan (Free, Standard, or Pro), managed through your app store account and RevenueCat. We do not receive your payment card details.
• Support correspondence — if you email us, we keep the message and your reply address so we can respond.

What we do not collect

• Location, contacts, photos, or device identifiers used for advertising.
• Payment card details — these are handled directly by Apple App Store or Google Play; we only see whether an entitlement is active.
• Analytics or behavioural tracking. We do not use analytics SDKs.

2. Why we use your data (purposes and legal bases)

• To run the Service — computing balances, showing activities, sending invitations. Legal basis under GDPR: performance of a contract with you (Article 6(1)(b)).
• Account emails — verification, password reset, account deletion notice. Legal basis: performance of a contract and legitimate interest in operating the Service securely (Article 6(1)(b) and 6(1)(f)).
• Enforcing plan limits — checking that you are within your tier's feature limits. Legal basis: performance of a contract.
• Fraud, abuse and legal compliance — investigating misuse and responding to lawful requests. Legal basis: legitimate interest and legal obligation (Article 6(1)(f) and 6(1)(c)).

3. Who we share data with (subprocessors)

We rely on the following service providers to run BalanceSplit. Each one processes data on our behalf under a written contract:

• Neon (United States) — PostgreSQL database hosting. Stores account data and activity data.
• Vercel (United States) — application hosting for the backend and website.
• Resend (United States) — sending transactional emails.
• Cloudflare (United States) — DNS and inbound email routing for the balancesplit.com domain.
• RevenueCat (United States) — subscription entitlement management. Receives your app-store user ID and entitlement events; does not receive activity data.
• Apple App Store and Google Play — process payments for paid subscriptions. We do not access payment card details.

We do not sell your personal data, do not share it for advertising, and do not use it to train AI models.

4. International data transfers

Our subprocessors listed above are located in the United States. When you use the Service from the European Economic Area, the United Kingdom, Switzerland, or Israel, your personal data will be transferred to and processed in the United States. We rely on the European Commission's Standard Contractual Clauses (SCCs), incorporated into our contracts with each subprocessor, as the transfer mechanism.

5. How long we keep your data

• Account data — until you delete your account.
• Activity data you own — kept indefinitely if the activity is shared with other participants, so they can still see the history. Your name is replaced with "Deleted account" when you delete your account; the activity itself is retained for the other participants.
• Activity data others created and invited you to — kept while that activity exists. When you delete your account, your name is anonymised in that activity.
• Support emails — up to 24 months from the last message.
• Backups — routine database backups may retain deleted data for up to 30 days before rotation.

6. Your rights

Depending on where you live, you have the following rights over the personal data we hold about you:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate data. You can change your username from Settings. To correct your email address or anything else, email us — email changes require re-verifying the new address so we can confirm you own it.
• Deletion — delete your account and associated data from Settings → Delete Account, or from balancesplit.com/delete-account. Deletion cannot be undone. Some activity data may be retained in anonymised form so other participants' balances and history remain intact.
• Portability — request an export of your data in a machine-readable format by emailing us. We aim to respond within 30 days.
• Objection and restriction — object to or restrict processing based on legitimate interests.
• Complaint — lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@balancesplit.com. We may ask you to verify your identity by confirming access to the account email.

7. Children

BalanceSplit is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

8. Security and access

We take reasonable steps to protect your data:

• In transit — all traffic between the app and our servers is encrypted using HTTPS/TLS.
• At rest — Neon, our database host, encrypts data at rest at the storage layer (AES-256). Your account password is additionally hashed with bcrypt, so we cannot read it even as administrators.
• Access control — only the developer, acting as administrator of the Service, holds credentials for the database and the hosting platforms.

Please note: other than your password (which is hashed), the content you enter — activity names, participant nicknames, expense descriptions, amounts, email addresses — is stored in a form we can read as administrator. This is standard for a service of this kind and is necessary to operate the Service, provide support, debug issues, and comply with lawful requests. We access this content only for those purposes and do not use it for advertising, resale, profiling, or AI-model training.

No system is fully secure. If we become aware of a personal data breach affecting your account, we will notify you and the appropriate regulator as required by law (within 72 hours of becoming aware, under GDPR).

9. Regional supplements

European Economic Area, United Kingdom, and Switzerland

The controller of your personal data is Rami Lerner, based in Israel, reachable at support@balancesplit.com. We have not appointed an EU representative because we do not offer the Service on a scale that requires one under Article 27(2). If your EU-based data protection authority disagrees, please contact us and we will address it. You have the right to lodge a complaint with your national data protection authority.

California (CCPA / CPRA)

In the past 12 months, we have collected the categories of personal information described in section 1 above, for the purposes described in section 2, and shared them only with the service providers listed in section 3. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit under the CPRA. California residents have the right to know, delete, correct, and not be discriminated against for exercising these rights — see section 6.

Israel (PPL)

BalanceSplit is operated from Israel. If you are located in Israel, your personal data is processed in accordance with the Protection of Privacy Law, 5741-1981, and its regulations. You have the right to access, correct, and delete the personal data we hold about you, as described in section 6.

10. Changes to this policy

We may update this Privacy Policy as the Service changes or as required by law. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email.

Contact

Questions or requests: support@balancesplit.com