Privacy Policy
Last updated: 28 July 2026
This policy explains what personal data SyncSplit collects, why, how we store and protect it, who we share it with, and the rights you have over it. We've written it to be read, not to be survived. If anything is unclear, email hello@syncsplit.com.
Who we are
SyncSplit is operated by Tainath Limited, a company registered in Ireland (company number 798882), registered address 31 Oak Park Drive, Naas, W91 Y72R, Ireland ("SyncSplit", "we", "us"). We are the data controller for the personal data described here. For any privacy question or request, contact us at hello@syncsplit.com.
The short version
- SyncSplit is a manual expense tracker for couples. You type in your own expenses; we do not connect to your bank.
- We do not use AI or machine learning on your data, we do not sell it, and we do not use it for advertising.
- You can export or permanently delete everything at any time from inside the app.
What we collect
Information you give us
- Account details:your email address, and a display name if you set one.
- Expense data you enter:the amount, description, category, date, and sharing settings of each expense you record, plus any recurring schedules, splits, and settlements you set up.
- Household information:if you invite a partner or join a household, we store that link and the invite email address so the two accounts can share expenses.
Information created when you use the app
- Security credentials:a one-way hash of any on-device passcode you set (never the passcode itself), and records of the devices you've signed in on so you can review and revoke them.
- Consent and audit records:timestamps of consent you give or withdraw, and security-relevant events (sign-ins, data exports, account deletion) written to an append-only audit log that includes the originating IP address.
- Diagnostics:if the app crashes or errors, we receive a crash report to help us fix it (see processors below).
We do not collect bank or card numbers, transaction location, merchant enrichment, contacts, photos, or precise device location. Payment for any subscription is handled entirely by Apple or Google; we never see your card details.
Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the app: store your expenses, calculate balances, sync with your household partner | Performance of a contract (Art. 6(1)(b)) |
| Sign you in and keep your account secure (passcode hash, device records, rate limiting, audit log) | Performance of a contract, and our legitimate interest in security (Art. 6(1)(b), 6(1)(f)) |
| Send transactional email: sign-in codes, household invites, email-change confirmations | Performance of a contract (Art. 6(1)(b)) |
| Diagnose crashes and errors to keep the app working | Legitimate interest in a reliable service (Art. 6(1)(f)) |
| Meet legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
Where your data is stored
Your data is held in an encrypted PostgreSQL database and served by our application backend. Data is encrypted in transit using TLS, and we enforce HTTPS across our services. Access to production systems is restricted to authorised personnel.
Who we share it with
We do not sell your data or share it for advertising. We use a small number of trusted service providers ("sub-processors") to run SyncSplit. Each processes data only on our instructions and only as needed to provide its part of the service.
| Processor | What it does | Data involved |
|---|---|---|
| Neon | Managed PostgreSQL database hosting | All stored account and expense data |
| Fly.io | Application/server hosting | Data in transit while the app is running |
| Resend | Transactional email delivery | Email address and message contents (sign-in codes, invites) |
| Sentry | Crash and error reporting | Diagnostic/crash data; may include limited technical identifiers |
| Apple & Google | Sign-in providers and app distribution (only if you use them) | The identity you choose to sign in with |
Some processors may store or process data outside the European Economic Area. Where they do, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your data for as long as your account is active. When you delete your account, we soft-delete it immediately (it stops being accessible), and a background process permanently erases it after 30 days. The 30-day window is a safety net against accidental deletion; after it, the data is gone and cannot be recovered.
Security audit logs are append-only and retained for a limited period for security and legal-compliance purposes. Expired sign-in codes and verification tokens are purged automatically.
Your rights
Under the GDPR you have the right to access, correct, export, restrict, object to, and erase your personal data, and to withdraw consent. Most of these you can exercise yourself, immediately, from within the app:
- Access & portability:Settings → Export data produces a full copy of your data in a machine-readable JSON file.
- Erasure:Settings → Delete account triggers the deletion and 30-day purge described above.
- Correction:edit your name, email, expenses, and categories directly in the app.
- Consent:review and withdraw consent in the app's privacy settings.
For anything you can't do in the app, email hello@syncsplit.com and we'll action it. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.
Security
We protect your data with TLS encryption in transit, hashed credentials, rate limiting on authentication endpoints, strict security headers, and an immutable audit log of sensitive actions. No system is perfectly secure, but security is a first-class concern in how SyncSplit is built.
Children
SyncSplit is not directed at children and is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy as SyncSplit evolves. When we make a material change, we'll update the date at the top and, where appropriate, notify you in the app or by email. Continued use after an update means you accept the revised policy.
Contact
Questions, requests, or complaints: hello@syncsplit.com.
← Back to home