Skip to content

Privacy Policy

Last updated:

This policy explains what personal data Splitkeun collects, why it is used, who it is shared with, and the rights you have. It is written with reference to Indonesia's Personal Data Protection Law (Law No. 27 of 2022), Malaysia's Personal Data Protection Act 2010 and Singapore's Personal Data Protection Act 2012.

1. Who we are

Splitkeun is a web app for tracking shared expenses and splitting bills, run by Project Deadwood ("we"). We are the controller of the personal data you give us when you use Splitkeun.

For privacy questions or requests, contact us at pasargm@gmail.com.

2. Data we collect

  • Account data: email address, username, display name, language and sign-up date.
  • Data you enter: groups, activities, members, expenses, splits, settlements, notes, and the payment methods (bank or e-wallet name and account or phone number) you choose to show to your group members.
  • Data about other people you add: the names or email addresses of friends you add as group members. Please make sure they are comfortable with this.
  • Receipt photos you upload and the text read from them.
  • Technical data: IP address, browser and device type, and system logs created when you use the service.
  • Campaign data: utm_* tags from ad or promotion links, only if you allow the marketing category.

3. How we use data

  • To provide the service: sign-in, saving and calculating expenses, showing balances, and sending sign-in codes and invitations by email.
  • To read receipts automatically, including with the help of artificial intelligence (AI) services.
  • To keep the service secure, prevent misuse and fix problems.
  • To understand how the public pages are used and measure marketing campaigns, only with your consent.
  • To meet legal obligations.

We do not sell your personal data.

5. Who receives data

Data you enter in a group can be seen by the members of that group. We also use the following service providers, who process data on our behalf:

  • Supabase: database, authentication and file storage.
  • Cloudflare R2: receipt photo storage (when enabled).
  • Vercel: website hosting and analytics for the public pages.
  • Brevo: email delivery.
  • OpenRouter and the AI model providers it routes to: reading receipt photos.
  • A virtual private server (VPS) we operate: server features and receipt reading.
  • Advertising platforms such as Meta and TikTok: only if we use them in future and you allow the marketing category.

We may also disclose data when the law or a competent authority requires it.

6. Transfers abroad

Some of the providers above store or process data outside Indonesia, Malaysia or Singapore. We only choose providers with adequate data protection, and transfer only what is needed to run the service.

7. How long we keep data

We keep account and group data while your account is active or as long as needed to provide the service. Campaign data is kept in your browser for up to 30 days. System logs are kept for a limited time. When data is no longer needed, it is deleted or anonymised, unless the law requires us to keep it longer.

8. Security

We use encrypted connections (HTTPS), access limited to each group, and private storage for receipt photos. No system is completely secure; if a personal data breach happens, we will notify you and the relevant authorities as the law requires.

9. Your rights

Under the law that applies to you, you have the right to:

  • be informed about how your data is processed and request a copy;
  • correct inaccurate data;
  • request deletion of your data;
  • withdraw consent you have given;
  • object or complain to us or to a data protection authority.

You can change some data yourself on the Profile page. For other requests, including account deletion, contact us at pasargm@gmail.com. We will verify your identity and reply within the time required by the law that applies to you.

10. Cookies and browser storage

Splitkeun does not set cookies of its own, but it uses browser storage (localStorage and sessionStorage), which is handled the same way:

  • Essential (always on): sign-in session, language, theme, last-opened group, the page to return to after sign-in, guide progress, and your consent choice.
  • Analytics (with consent): Vercel Web Analytics, which counts visits to the public pages without cookies.
  • Marketing (with consent): utm_* campaign tags, and Meta and TikTok ad pixels if we use them in future.

When you first open a public page, you can choose "Accept" or "Essential only". You can change your choice at any time with the "Cookie settings" link at the bottom of the page. If your browser sends a Global Privacy Control signal, we treat it as "Essential only".

11. Children

Splitkeun is not intended for children. Users under 18 should use Splitkeun only with the consent of a parent or guardian.

12. Changes to this policy

We may update this policy. The "Last updated" date above will change, and for significant changes we will tell you in the app or by email, and ask for your consent again where needed.