Privacy Policy

Last updated: September 6, 2026

Split Crew is built to keep your data on your phone. There are no accounts, no sign-ins and no passwords, and nothing from your bills ever reaches us. We do keep a record of each install, described in full below. This page describes the little that leaves your device and why.

What stays on your phone

• Your bills — merchants, items, amounts, the people you add, who has paid you back.
• Receipt photos — a copy of each scanned receipt is kept locally with its bill and deleted with it.
• Your Venmo handle and reminder preferences.

Your bills, receipt photos, and Venmo handle are never uploaded or synced. Deleting a bill deletes its photo; deleting the app deletes them all.

Setup asks for two things together, and they are treated differently: your name leaves your phone (see the install record below), while your Venmo handle never does — it is written onto the share card on your device and goes only where you choose to send that card.

What leaves your phone, and why

• Your install record. On launch the app checks in with our server carrying a random install identifier, the name you enter when you first open the app (a name is required to set up the app, and you can change it any time in Settings), your device model, iOS version, app version, the version of the terms of service you accepted and when, and — when you allow notifications — a push token. This is the app's only way to deliver announcements and support replies (there are no accounts), and it powers a private count of installs. It contains no email, no contacts, and nothing from your bills.
• An identifier tied to your Apple Account. The app sends Apple's signed record of your download so our server can confirm your one free scan and any scan we have given you. From it we store an identifier Apple derives from your Apple Account. We keep it because it is the only identifier that survives deleting and reinstalling the app — which is what stops one free scan being claimed over and over, and what lets a scan we gave you follow you to a new phone. It is not your Apple ID, name or email, and it cannot be used to contact you.
• How it is kept. The records above are stored together, keyed to your install identifier and that Apple Account identifier — so the name you chose is associated with this install rather than held anonymously. The install identifier lives in the iOS keychain, so it can persist across a delete-and-reinstall. Records are kept until we delete them — email us and we will.
• Receipt images you choose to scan. When you use AI scanning, the photo is sent over HTTPS to our scanning endpoint, which passes it to Anthropic's Claude API to read the line items. Note that a receipt photo can incidentally include things printed on it (a card's last digits, a signature). The image itself is not stored on our servers. The extracted line items are cached, tied to your purchase, so a scan you paid for is never lost to a bad connection.
• Purchase verification. When you buy a scan, the Apple-signed purchase receipt is verified on our server to authorize that one scan. We record the transaction identifier (from Apple) to prevent a purchase from being reused — no payment details, which stay entirely with Apple. Apple also notifies our server about refunds of these purchases.
• Feedback you submit. Settings → Submit feedback sends your message, the name you chose, app/OS version, and the screenshot you attach (if any) to us. It is kept until read and deleted; ask and we'll delete it sooner.
• Abuse prevention. Our server briefly counts requests per network address to stop abuse (rate limiting). These counters hold no content and are not used to identify anyone.

What we don't do

• No accounts, no email addresses, no contact lists.
• No analytics SDKs, no advertising, no cross-app or cross-site tracking. Our private dashboard is derived from the records above (installs, scans, feedback) — nothing extra is collected for it.
• No selling or sharing of data with anyone beyond the service providers below.

Service providers

Scanned receipt images are processed by Anthropic (the Claude API) under their commercial terms; API inputs are not used to train models. Our endpoint and this site are hosted by Netlify. Purchases are handled by Apple.

This website keeps an anonymous count of page views — no cookies, no IP addresses, no identifiers of any kind; just "the support page was viewed N times today."

Children

Split Crew is not directed at children under 13.

Changes

If this policy changes, the update will be posted here with a new date.

Contact

Questions? Email support@splitcrew.app.

About Split Crew · Terms of Service · Support