Privacy Policy

Last updated: October 17, 2026

Splitmama is made by Lourki AI Inc. It runs on the web, iPhone and Android. This policy covers all three. We do not sell your data, we show no ads, and the mobile app contains no advertising, analytics or crash-reporting software.

What we collect

• Account details. Your email address, the display name you choose, and the account identifier we generate. Required; the app cannot work without them.
• Phone number. Optional. Only if you add one so friends can find you or so you can be invited by phone.
• Payment handles. Optional. Your Venmo, PayPal or UPI handle, used to build a settle-up link. We never store card numbers, bank account numbers or any payment credential.
• Expense data. Descriptions, amounts, currencies, splits, who paid, settlement records and the balances computed from them. This is the ledger, and it is the product.
• Things you write in a group. Messages, notes, saved places and group names.
• Photos. Optional. Receipt images and group photos you choose to upload. We never read your photo library; you pick the file.
• Push tokens. Optional. A device identifier issued by Apple or Google so we can deliver a notification you asked for. It is deleted when you sign out or turn notifications off.

Contacts

If you tap “find friends from contacts”, Splitmama asks your permission and you choose which contacts to check. The email addresses and phone numbers you selected are sent to our server, compared against people who have opted in to being findable, and the matches are returned to you.

Those identifiers are held in memory for the length of that one request and are never written to disk. We do not build a social graph, we do not keep a copy of your address book, and we never contact anyone in it. You can use every part of Splitmama without granting contacts access.

How we use it

Only to run Splitmama: creating and securing your account, computing balances, simplifying who pays whom, syncing your groups in real time, building settle-up links, and sending the notifications and emails your own groups generate. We do not profile you, personalise anything, or use your data for advertising or marketing.

Who else sees your data

People in your groups. Members of a group see your display name, the expenses you add, what you owe and are owed, anything you write there, and your payment handle when you settle up. That is the app working as you intended. Nothing is public and nothing is visible to people outside a group you joined.

Service providers, acting only on our instructions. Our database and file storage are hosted by Supabase. Transactional email is delivered by Brevo. Push notifications travel through Expo, Apple and Google. Each processes data solely to provide that service to us. We sell your data to no one and share it with no one for their own purposes.

Artificial intelligence

AI-assisted expense entry and receipt scanning are switched off in the current release and no data is sent to an AI provider. If we enable them, the text or image you submit will be processed by our AI provider only to return the parsed result, will not be used to train any model, and we will update this page before the feature ships.

Separately, you may choose to connect an AI assistant of your own through the Model Context Protocol, using a token you create and can limit to a single group. Nothing reaches your ledger until you confirm it in the app, and you can revoke the token at any time.

Payments

Splitmama never holds, moves or processes money, and it is not a bank. Settle up opens your own Venmo, PayPal or UPI app with the amount filled in. The payment happens there, under that app’s privacy policy.

Your rights

• Delete your account yourself, in two taps, at Settings → Delete account on any platform. Steps and exactly what is removed are at splitmama.com/support.
• Delete individual data without closing your account: any expense, group, photo, note, place or comment. See deleting some of your data.
• Export everything you can see as a CSV file, at Settings → Export data.
• Ask us instead. Write to support@splitmama.com from the address on your account and we will do any of the above for you.

Requests under the GDPR, the CCPA and comparable laws are honoured within 30 days.

Retention

We keep your data for as long as your account exists. When you delete it, your profile and personal details go immediately. Expenses you shared stay in other people’s groups with your name replaced by “Deleted user”, because removing the amounts would silently change what those members owe each other. Residual copies survive only in encrypted, rotating backups and are gone within 30 days. We keep no separate archive.

Security

Everything is encrypted in transit. Your rows are isolated by row-level security in the database itself, so a group’s data can only be read by its members and a bug in the app cannot widen that. Sign-in uses PKCE, and your session is held in the device keychain rather than ordinary app storage. Invite links and API tokens are stored only as one-way hashes, so even we cannot read them back. Receipts and group photos live in private storage scoped to the group.

This website

splitmama.com uses Google Analytics and Vercel Analytics to count visits and page performance. That measurement applies to the website only. The Android and iOS apps contain no analytics, no advertising software and no crash reporter.

Children

Splitmama is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.

Changes

If we change what we collect or how we use it, we will update this page and the date at the top before the change ships.

Questions? Email support@splitmama.com · Support · Back home