Privacy Policy
Split the Receipt is operated by Mustafa Ebiclioglu, United States. Last updated 7 September 2026.
What this app does with your information
Split the Receipt splits a restaurant or shop receipt between the people who were there. The person who paid uploads a photo of the receipt; everybody else opens a link and taps the items they had. The app works out what each person owes. It does not move money.
What is collected
| Information | Why | How long |
|---|---|---|
| Email address, for people who create an account | To sign you in with a one-time code and to keep your bills attached to you | Until you delete your account |
| The receipt image or PDF you upload | To read the items off it | Deleted automatically 30 days after upload |
| The items, prices, taxes, fees and tip read from the receipt | To calculate each person's share | Until the bill or the account is deleted |
| Names typed for the people on a bill | So the group can tell each other apart on that bill | Until the bill is deleted |
| Venmo username, if you choose to save one | To show the group where to send your money back | Until you remove it or delete your account |
| A guest's Venmo username, if they type one on a bill | So the payer can request that person's share in one tap, on that bill and, from their own bill history, on later bills they create | Until the bill is deleted; it is offered to that payer only |
| Your name, if you add one | Shown as the payer's name on bills you create | Until you remove it or delete your account |
| Product analytics events, associated with your account when you are signed in | To see where the app breaks or confuses people, and how each account uses it | 180 days |
| Server logs of errors and request status | To keep the service working | Short-lived operational retention |
No card numbers, no bank details, no contacts, no location, no advertising identifier, and no third-party analytics or advertising software.
The camera
The app uses the camera only while you are on the screen that photographs a receipt, and only takes a picture when you tap the shutter. The flash is turned on by default on that screen so the paper is lit evenly; you can turn it off with one tap, and that choice is not recorded anywhere. Nothing is captured in the background, no photo leaves your phone other than the one you choose to upload, and the app never reads your photo library beyond the picture you pick. Camera and photo access can be withdrawn at any time in iOS Settings; the app still works if you type the items in.
Guests
A guest who opens an invitation link does not create an account. The app stores a browser session so it can remember which name on that bill is yours, plus the items you tapped. An invitation link is a bearer link: anyone who has it can open that one bill and pick a name, so share it only with the people who were there.
Receipt reading by an outside service
To read a receipt, the uploaded image or PDF is sent to Anthropic's API, which returns the items and amounts as structured data. Nothing else is sent with it: not your email, not anybody's name, and not any payment username. Anthropic's published API terms state that content submitted through the API is not used to train its models; limited retention for safety and abuse monitoring still applies on their side, so this is not zero retention. This is disclosed before your first upload and the app asks you to agree to it.
Analytics
Analytics here is first-party: events go to this app's own server and its own database, and nothing is shared with an analytics vendor. An event records that something happened, such as “a receipt was uploaded” or “extraction failed after 4 seconds”. It never carries receipt contents, merchant names, item descriptions, people's names, email addresses, payment usernames, or invitation links. When you are signed in, events are associated with your account, so we can see how the app is being used account by account and help you if something goes wrong; a guest on the website is not signed in and is not. IP addresses are not stored. You can turn analytics off in the app's settings and on the guest site; turning it off stops transmission immediately, and deleting your account disconnects your past events from you.
Where the data lives
Bills, items and accounts are stored in a managed PostgreSQL database. Receipt images and PDFs are stored in private object storage that is only reachable through this app after a permission check. Everything travels over HTTPS.
Deleting your information
You can delete an individual bill, or your whole account, from inside the app. Deleting a bill immediately revokes its invitation links and schedules the stored receipt file for removal. Deleting your account removes the bills you own and their receipts, removes your saved payment usernames, and unlinks your identity from bills other people own, keeping only the amounts those people still need. Guests who did not create an account can ask for removal using the contact below.
Backups exist so the service can be restored after a failure, and a deleted record can persist in a backup for a limited period before that backup is rotated out. Deletion is not instant everywhere, and this policy does not claim that it is.
Contact
Privacy questions and deletion requests: kutayeb@gmail.com