ScratchSplit is a private group expense-splitting app. This policy explains the information we process to provide the app and the choices available to you.
Information we process
We process the account information you provide, such as your email address, display name, and optional profile picture. When you use ScratchSplit, we also process group membership, expense and settlement records, invite links, and related activity needed to show group balances and an audit history.
How we use information
We use this information to authenticate your account, operate private groups, calculate and display balances, deliver app notifications you enable, maintain security, and respond to support requests. ScratchSplit records shared expenses; it does not process payments or collect payment-card details.
Who can see it
Information you add to a group is visible to the members of that group as needed for the group to understand its expenses, balances, settlements, and activity. We do not make ScratchSplit groups publicly searchable.
Google sign-in
If you choose to sign in with Google, we receive the information Google makes available for authentication, such as your account identity and email address. We use it to create or sign you into your ScratchSplit account. We do not use Google data for advertising.
Storage and security
We protect information using encryption in transit and at rest, access controls, and security measures designed to limit access to authorized users and the relevant members of each private group. Profile pictures are stored privately, and privileged service credentials are kept out of the mobile app. We also use server-side controls to help enforce group membership and protect sensitive actions. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Crash reporting
We use Sentry as a service provider to receive crash reports so we can diagnose and fix unexpected app failures. A report may contain a technical stack trace, app release and build number, mobile platform, and technical SDK or module versions. Crash reporting runs only in non-development builds. We do not use it for advertising, tracking, product analytics, or session replay.
ScratchSplit removes user and request fields, breadcrumbs, free-form context, and original JavaScript error messages from crash reports. It does not send account names or email addresses, group names, expense descriptions, settlement reasons, amounts, balances or other financial data, request bodies, authorization headers, or Supabase user IDs to Sentry. Default PII collection, session tracking, app-hang and watchdog tracking, performance tracing, profiling, screenshots, view hierarchy, failed-request capture, logs, and session replay are disabled.
Retention and account choices
We keep account and group information for as long as needed to provide the service and maintain legitimate records, including shared financial and audit history. You may request account deactivation or permanent deletion in the app, or request permanent deletion using our account deletion page. Deletion removes personal account data and may preserve a minimal anonymized record where necessary to keep a group’s shared history understandable and intact.
Children
ScratchSplit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy as ScratchSplit evolves. We will post the current version here and revise the effective date when we do.
Contact
For privacy questions, contact the ScratchSplit team at scratch-split-support@purrzzatto.com.