SplitDue Privacy Policy.

• No SplitDue account, password or sign-up.
• No ads, no analytics, no tracking, and no selling or sharing of data.
• Your records live on your devices and, if you turn it on, in your own iCloud.
• The developer of SplitDue never receives your ledger, receipts or personal details.

SplitDue keeps everything you enter in the app's private storage on your iPhone, protected by iOS data protection:

• Groups, people, expenses, repayments, revision history, comments, reactions and payment requests.
• Receipts and documents you attach, and group files.
• Your profile: name, status, bio, photo, and any email, phone, birthday, city, home currency or payment usernames you add, plus your Profile Privacy choices.
• Drafts, favorites, recurring expenses, budgets, saved searches, reminders and settings.

App Lock can require Face ID, Touch ID or your passcode to open SplitDue. When it's on, SplitDue also removes its entries from Spotlight.

If you turn on iCloud sync, your records, profile and files are stored in your private iCloud database through Apple's CloudKit. Only your Apple Account can read it; the developer cannot. Apple handles this data under its own privacy policy.

If your iPhone signs in to a different iCloud account, SplitDue pauses syncing and asks whether to keep each account's records separate.

When you invite people to a group, that group is shared through iCloud with the people who accept. They can see:

• The group's name, members, expenses, repayments, comments, reactions and payment requests.
• Your display name.
• Your profile card, with only what Profile Privacy allows: photo, status, bio, home city, badges, counts like how many groups and expenses you have, and payment usernames. With a private profile, they see only your name.
• Your activity in their Feed, unless you turn it off, and its amounts, unless you hide them.

Your email, phone number and birthday are never shared. Profile cards exist only inside the shared groups you're in; there's no public directory, and the developer never receives them. Receipts and documents stay on the device that added them. People who leave or are removed keep a copy of what they could already see.

• Receipt reading, Smart Fill, summaries and Ask Your Ledger run on your iPhone with Apple Intelligence or on-device text recognition. Nothing is sent to the developer.
• Place search sends what you type to Apple Maps. SplitDue doesn't use your location.
• If you turn on Live Exchange Rates, SplitDue downloads the day's European Central Bank rates from frankfurter.dev. The request contains no personal information.
• Pay With opens the payment or banking app you choose and passes it the amount, note and recipient you entered. What happens next is between you and that app, under its own terms and privacy policy. SplitDue never sees or moves money.
• Siri, Shortcuts, widgets, Live Activities, Spotlight and the Share and Messages extensions read your records on your device to show or add information you ask for.
• Notifications are created on your iPhone. In shared groups, iCloud wakes the app when someone else makes a change.

• Camera: only when you scan a receipt or document.
• Photos: only the photos you pick.
• Microphone and Speech Recognition: only while you hold the microphone button to say an expense. Speech is turned into text on your iPhone.
• Face ID: only for App Lock.
• Notifications: reminders, payment requests and shared group changes.

You can change any permission in iPhone Settings at any time.

SplitDue Pro and tips are processed by Apple. SplitDue learns only whether a purchase or subscription is active, never your payment details. Questions about a purchase: billing@indr.app.

Backups, CSV exports, PDF statements and shared cards contain the records you choose to export. They aren't encrypted by SplitDue, so store and share them carefully. Your iPhone may also include SplitDue in its own backups, depending on your settings.

Your records stay until you delete them. You can delete a group, remove files, erase this iPhone's copy in Settings, or delete SplitDue's iCloud data in iPhone Settings → your name → iCloud. Copies already shared with other people stay with them.

Because the developer holds none of your data, there's nothing to request from us; you control it all in the app.

SplitDue isn't directed at children under 13 and doesn't knowingly collect information from them.

If this policy changes, the new version will appear here with a new effective date, and important changes will be highlighted in What's New.

Privacy questions or data requests: privacy@indr.app. Security issues: security@indr.app. Anything else: support@indr.app.