Privacy policy

What we collect

• From your Google account, when you sign in: your name, email address, and profile picture. We also store the sign-in tokens Google issues, along with your account. We don't get your password or access to anything else in your Google account.
• What you and your group enter: trips, the people on them (names and, if provided, email addresses), expenses, how they're split, notes, and payments between people.
• A history of changes: who added, edited, or deleted what, and when. This lets the group see changes and undo mistakes.
• Basic technical data: a sign-in cookie, and server logs that may include errors and technical details of requests.

How it's used

Only to run TripSplit. That means signing you in, showing your trips, working out who owes whom, sending trip invitations, and keeping the change history.

Who can see it

• People on the same trip can see that trip's expenses, payments, and history. They can also see the name, email address, and profile picture of each member.
• Anyone with a trip's invite link can join that trip after signing in, and then sees the same things. Share invite links only with people you mean to invite. The organizer can reset the link at any time.
• The person who runs this site has access to the database in order to operate and maintain it.

Services involved

• Google: handles sign-in. Your browser also loads your profile picture directly from Google.
• Cloudflare: carries traffic between your browser and the server, so it handles your IP address and requests.
• Email delivery: invitation emails go through an email provider, which receives the recipient's address and the message.
• Frankfurter (exchange rates): when an expense is in a foreign currency, the server looks up a rate. Only the currencies and date are sent, never any personal information.

Cookies

TripSplit uses cookies only to keep you signed in and to secure the sign-in process. There are no analytics or advertising cookies.

Keeping and deleting your data

• Data is kept for as long as the trip exists.
• A trip's organizer can delete the trip from its Settings tab. This permanently removes the trip, its expenses, payments, and history, for everyone.
• To have your account removed, or to ask what we hold about you, use the contact details below. Expenses you were part of stay with the trip so the group's balances stay correct, unless the organizer deletes the trip.

Google user data

TripSplit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

If this policy changes, the date at the top will be updated.

Contact

Questions or requests: contact the person who runs this site, or the trip organizer who invited you.