Privacy
Last updated · 27 Apr 2026The short version: SplitEasy is local-first. Quick scans, manual entry and the math all happen on your device. AI scan is the one feature that sends a photo off-device — only the photo, only when you tap the AI scan button. We don't run analytics SDKs, we don't sell data, and we have no interest in your receipts.
What we collect, and only when we collect it
- Nothing for free use. No account, no telemetry, no IDFA. The app works fully offline.
- An anonymous device id, for AI scan quotas. If you tap "AI scan" without signing in, the app generates a random UUID and stores it in your local app preferences. We use it to count your free monthly AI scan against the right device. It's not tied to your phone, your Apple/Google ID, or any other identifier — and it's wiped when you delete the app.
- Email or phone number, only when you sign in. Sign-in is optional — used for cross-device sync and to claim Pro on a new device. We hash and store one of: an email address (verified via a one-time code from
spliteasy@uncle-z.comsent over SMTP) or a phone number (verified via a one-time WhatsApp code through our self-hosted gateway). iOS uses email by default; Android offers both. We never store the verification codes themselves and we never share the identifier with anyone. - Subscription receipt. When you buy Pro, Apple or Google sends us the verified receipt. We store the original transaction id and expiry date so we know whether you're entitled. We don't see your card.
- Synced bills (Pro, opt-in). If you turn on cross-device sync, your bills, people, and saved groups are uploaded to our backend so they appear on your other devices. Receipt photos are stored in our private S3 bucket. You can delete everything at any time.
AI receipt scan — the one off-device feature
SplitEasy ships two scan modes:
- Quick scan uses on-device OCR (Apple Vision / Google ML Kit). The image and the parsed text never leave your phone.
- AI scan sends just the receipt photo to our parser at ai.uncle-z.com. The model returns the structured items, totals and tax, and the photo is discarded after parsing — we don't archive it, train on it, or share it with any third party.
You choose which scan mode to use every time. AI scan is metered (Free 1/mo, Pro 4/mo, Pro+ unlimited); we record only the date, byte size, success/failure status and confidence score against your account or anonymous device id, so we can enforce the quota. We do not store the parsed contents or the image.
What we never collect
- No analytics SDKs (no Google Analytics, no Mixpanel, no Firebase, no Amplitude).
- No advertising IDs (IDFA, GAID).
- No location data.
- No contacts.
- No bank or card data — Apple and Google handle the payment, we only see "is this user entitled".
Where the data lives
Backend runs on AWS EC2 in Singapore. Postgres + S3 (Jakarta region) for synced data. Receipt photos are private — only your account can read them.
Deletion
Settings → Profile → Delete account inside the app wipes everything within 7 days. Full instructions and what we keep vs delete are on the dedicated Delete your account page.