Privacy Policy

Last updated: March 12, 2026

QoolSplit ("we", "our", or "us") operates the QoolSplit mobile application and related services (collectively, the "App"). This Privacy Policy explains how we collect, use, store, share, and otherwise process your information when you use the App.

By creating an account or using QoolSplit, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

When you create an account and use QoolSplit, we collect:

• Account information: Your email address, display name, and optional profile photo.
• Group data: Names of groups you create, group members, and group settings (such as default currency).
• Expense data: Descriptions, amounts, currencies, split methods, and participants for expenses you create or are included in.
• Settlement data: Records of payments between group members.
• Recurring expense settings: Details of recurring expenses you configure.
• Communications: Any messages, feedback, or support requests you send to us.

1.2 Information Collected Automatically

When you use the App, we and our third-party service providers may automatically collect:

• Device information: Device type, model, operating system version, unique device identifiers, and mobile network information.
• Usage and analytics data: App feature usage, screens viewed, session duration, interaction patterns, tap/click events, and other behavioral analytics.
• Crash and performance data: Crash reports, error logs, stack traces, performance metrics, and diagnostic data.
• Advertising identifiers: Device advertising identifiers (such as IDFA or GAID), which may be used for analytics, attribution, and measurement purposes.
• Log data: IP addresses, access times, referring URLs, and other standard server log information.

This data is typically collected through third-party analytics and crash reporting tools (see Section 8) and may be aggregated or de-identified.

1.3 Information We Do NOT Collect

2. How We Use Your Information

We may use the information we collect for any of the following purposes:

• Provide, operate, maintain, and improve the App and its features.
• Authenticate your identity and secure your account.
• Send you transactional communications (such as OTP verification codes, account alerts, and service updates).
• Synchronize your data in real-time across your devices.
• Analyze usage trends, user behavior, and engagement to understand, personalize, and optimize the App experience.
• Develop new products, features, services, and functionality.
• Create and use aggregated, anonymized, or de-identified datasets derived from your information for analytics, research, benchmarking, business intelligence, machine learning, and any other lawful purpose. Once information is aggregated or de-identified such that it can no longer reasonably identify you, it is no longer considered personal information and we may use and share it without restriction.
• Monitor app stability, diagnose crashes, and measure performance.
• Detect, investigate, and prevent technical issues, fraud, abuse, or violations of our Terms of Service.
• Comply with legal obligations, enforce our agreements, and protect our rights, property, and safety.
• For any other purpose with your consent or as otherwise permitted by applicable law.

3. Data Storage and Security

Your data is stored using Supabase, a cloud-hosted database platform built on PostgreSQL with enterprise-grade security. All data is encrypted in transit (TLS) and at rest. We implement row-level security policies to ensure you can only access data in groups you belong to.

We may also store data in backups, caches, logs, and other systems necessary for the reliable operation of the App. Backup copies of data may be retained for a reasonable period even after the original data has been modified or deleted, to support disaster recovery and service integrity.

While we take commercially reasonable measures to protect your information, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties for their direct marketing purposes.

We may share your information in the following circumstances:

• With other group members: When you join a group, other members can see your display name, profile photo, and expense/settlement activity within that group.
• Service providers: We work with third-party companies that help us operate, improve, and secure the App. These providers may access your information to perform tasks on our behalf (such as data hosting, authentication, analytics, crash reporting, performance monitoring, and communications) and are contractually obligated to protect it. See Section 8 for key providers.
• Aggregated or de-identified data: We may share aggregated, anonymized, or de-identified information for any lawful purpose, including analytics, research, industry benchmarking, and business development. This data cannot reasonably be used to identify you.
• Legal requirements: We may disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, property, or the safety of our users or the public.
• Business transfers: If QoolSplit is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change.
• With your consent: We may share your information for any other purpose with your express consent.

5. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter as needed to provide our services, comply with our legal obligations, resolve disputes, enforce our agreements, and for our legitimate business purposes.

Expense and settlement data is retained within groups to maintain accurate, complete records for all group members. This data is integral to the service and cannot be selectively removed without impacting other users.

5.1 Account Deletion

If you delete your account:

• Personal identifiers removed: Your email address, display name, and profile photo will be removed or anonymized in our primary production systems within 30 days.
• Group data retained: Expense and settlement records you created or participated in will be anonymized (your name replaced with a generic identifier such as "Former Member") but retained to preserve the accuracy of other group members' records.
• Backup retention: Copies of your data may persist in encrypted backups, logs, and archived systems for up to 12 months after deletion for disaster recovery, legal compliance, and fraud prevention purposes, after which they will be purged or anonymized.
• Aggregated data retained: Any aggregated, anonymized, or de-identified data derived from your usage will be retained indefinitely, as it can no longer be linked back to you.

6. Your Rights and Choices

You have the right to:

• Access your data: View all personal information associated with your account within the App.
• Update your data: Edit your display name, profile photo, and preferences at any time in your Profile settings.
• Delete your account: Permanently delete your account and associated personal data from within the App's Profile page, subject to the retention provisions in Section 5.
• Withdraw from groups: Leave any group at any time.
• Opt out of analytics: You may limit certain analytics collection through your device settings (e.g., resetting your advertising identifier or opting out of personalized ads).

If you are a resident of the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to data portability, the right to restrict processing, and the right to object to certain uses. Contact us to exercise these rights. We will respond to verified requests within 30 days (or as required by applicable law).

7. Children's Privacy

QoolSplit is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information promptly.

8. Third-Party Services

We use third-party services to help us operate, analyze, and improve the App. These services may collect and process certain information on our behalf. Our key third-party service providers include, but are not limited to:

• Supabase: Cloud database, authentication, and real-time data synchronization. Supabase Privacy Policy
• Google Firebase: We may use Firebase services including Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging, and other Firebase products. These services may collect device identifiers, usage data, crash logs, and performance metrics. Firebase Privacy Information
• Google Analytics: We may use Google Analytics or similar analytics tools to understand app usage patterns. Google Privacy Policy
• Apple and Google platforms: The App is distributed through the Apple App Store and Google Play Store, which have their own data collection practices.

We may add, remove, or change third-party service providers at any time. The categories described above (hosting, authentication, analytics, crash reporting, notifications, and platform distribution) reflect the types of providers we use.

The App may also contain links to third-party websites or services (such as payment apps for settling debts). We are not responsible for the privacy practices of these third parties.

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including Canada and the United States. These countries may have data protection laws that differ from those in your jurisdiction. By using the App, you consent to the transfer of your information to these countries. Where required by applicable law, we will ensure appropriate safeguards are in place.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time at our sole discretion. We will notify you of material changes by posting the new policy within the App and updating the "Last updated" date above. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us