Privacy
Last updated · 22 Oct 2026The short version: SplitEasy is local-first. Quick scan and manual entry work on your phone. Some features send data to us when you use them: sign-in, Pro purchase checks, Pro sync, receipt photos for the Pro archive, and feedback you choose to send. App version 1.2.1 also has an AI scan that sends receipt photos (see below). We don't run analytics or crash-reporting SDKs in the app and we don't sell data. Some pages of this website count visits with Umami, an analytics tool.
What we collect, and only when we collect it
- Basic use without an account. Quick scan, manual entry and splitting stay on your phone.
- Sign-in (optional; Pro needs it). Sign in with an email address: we send a one-time code by email and store your address in plain text, not hashed. Older app versions also offer sign-in with a phone number: we send a one-time code by WhatsApp and store your number. WhatsApp receives your number to deliver the code. One-time codes are stored only as a one-way hash. We use your address or number to sign you in, to sync across devices and to restore Pro on a new device. We don't sell them.
- Pro purchase. Apple or Google confirm your subscription to us. We store the transaction ID, product, status, expiry date and the transaction data Apple or Google return when we verify it. We never see your card.
- Sync (Pro, when you tap Sync). Bills, people and groups are uploaded so they appear on your other devices. Saved payment methods stay on your device (handles saved before 22 October 2026 were removed from our database; see Where the data lives).
- Receipt photos (Pro photo archive). When you save a bill with a photo, the photo is uploaded to our cloud storage (Amazon S3). It is not an opt-in setting; it applies to every Pro account. A receipt photo stays there until you delete its bill or your account. When you delete a bill in the app, its photo is erased from our storage straight away, including every stored version. If the erase fails, we retry automatically until it succeeds. A photo that another live bill still uses is kept until that bill is deleted.
- Older app version (1.2.1): AI scan. Version 1.2.1 has an AI scan; current versions don't. When you use it, the receipt photo and a random device ID are sent to our backend. The backend was built to pass the photo to an AI model provider (OpenAI) to read the receipt. That service is not running at the moment. Our backend stores the parsed result, a monthly scan count, and your user ID or device ID. We don't keep the photo in our database or storage. AI scan results are cleared after 30 days.
- Device ID. The first time you used AI scan in version 1.2.1, the app created a random ID on your phone and sent it with those scan requests. Current versions do not create it. It is not an advertising ID and not your phone's hardware identifier.
- Feedback you send.
- Feedback form: your message, any screenshots you attach, an optional email address, app version, platform, OS version and your plan, and your user ID (you must be signed in to send it). The "How was this split?" thumbs-down sends your comment and the app version the same way.
- "Help us improve" after a scan: the text read from your receipt and where it sits on the page, the parser's output, a receipt-type tag, the app version and an optional note. No photo. Stored with your user ID if you are signed in. If you delete your account, we keep this feedback without your user ID.
- Scan feedback (Pro, with your consent box ticked): the receipt photo, the scan method, your quality rating, notes and item counts. The photo is deleted when you delete your account.
Receipt scanning
Quick scan reads the receipt on your phone with on-device text recognition (Google ML Kit), and manual entry needs no network. On Pro, receipt photos are uploaded to our cloud storage when you save a bill, and any photo you send us in scan feedback goes there too. Receipt photos and feedback photos are stored in private cloud storage and are not publicly accessible.
What we never collect
- No analytics or crash-reporting SDKs in the app.
- No advertising IDs (IDFA, GAID).
- No location data. The app asks only for camera and photo library access.
- No contacts.
- No bank or card data. Apple and Google handle payment.
Where the data lives
Our database is hosted in Malaysia (Kuala Lumpur). Every day we back up the database to AWS in Singapore. Each backup is kept for about 30 days and then deleted. Receipt photos and feedback photos are stored in AWS Jakarta (ap-southeast-3).
Messages and screenshots you send through the feedback form go to our feedback service at feedback.uncle-z.com, which runs on our server in Malaysia (Kuala Lumpur) and is shared by Uncle Z apps. Deleting your account does not delete them. To have them removed, email us at the address under Contact.
When you delete your account, we remove your data from the live database and photo storage, except the feedback described above: we keep "Help us improve" feedback without your user ID, and feedback-form messages and screenshots stay in the feedback service until you ask us to remove them. Copies in backups are deleted after about 30 days.
- Saved payment handles for Pro are kept on your device only. The app does not upload them. Handles that were saved on our server before 22 October 2026 were removed from our live database; copies in database backups are deleted when the backups expire.
Deletion
Settings → Profile → Delete account inside the app removes your account and its data (including photos) from our live database and photo storage straight away. Copies in database backups are deleted after about 30 days. Feedback you sent is kept as described above: "Help us improve" feedback without your user ID, and feedback-form messages and screenshots until you ask us to remove them. Full instructions are on the Delete your account page.