Privacy Policy

Effective date: September 1, 2026

SplitCart is developed by Jorge Mondragon (jmondragontech). This policy describes how the SplitCart iOS app and its Cloudflare-hosted backend handle information.

What we collect

• Account: When you use Sign in with Apple, we receive an Apple subject identifier and, if you share them, your name and email. We use these to create and authenticate your account.
• Household data: Household names, member display names, share counts, invite codes, week settings, weekly budgets, settlement history, and optional payment-app profile links you choose to save (for example, a Cash App URL) needed to split grocery costs.
• Receipts: Amounts, notes, purchase dates, who paid, and optional receipt photos you upload. Photos are stored in Cloudflare R2; structured receipt data is stored in Cloudflare D1.
• Shopping lists: Item names, optional quantity or notes, purchase status, and links between purchased items and receipts within your household.
• Notification preferences: Your in-app choices for entry and settlement reminders.
• Device tokens: If push notifications are enabled, we may store an APNs device token and environment (sandbox or production) to deliver reminders about week closes and settlements.

On-device OCR

Receipt text recognition runs on your device using Apple Vision. OCR is used to suggest an amount and purchase date. We do not send raw camera frames to a third-party OCR service.

How we use data

We use this information only to operate SplitCart: authenticate you, sync household splits, store receipts you choose to upload, maintain shared shopping lists, compute settlements, deliver optional reminders, and generate exports you request. We do not sell your personal data. We do not use your data for advertising.

Sharing

Household members you invite can see shared household and receipt information for that household. Service providers we use to run the app (notably Cloudflare for Workers, D1, and R2) process data on our behalf to host the API and storage. We may disclose information if required by law.

Retention & deletion

We keep account and household data while your account is active. You can remove receipts from open weeks in the app. For account deletion or other privacy requests, contact us via Support.

Security

Access to the API uses session tokens issued after Sign in with Apple verification. Transport uses HTTPS. No method of transmission or storage is 100% secure.

Children

SplitCart is not directed at children under 13. Do not use the app if you are under 13.

Changes

We may update this policy from time to time. The effective date above will change when we do. Continued use of SplitCart after updates constitutes acceptance of the revised policy.

Contact

Questions about privacy: see Support or open an issue at GitHub Issues.