How PandaSplit handles your data — in plain English.
This Privacy Policy explains what personal information PandaSplit collects, why we collect it, how it's stored, and the choices you have.
PandaSplit is a bill-splitting app that helps you track shared expenses with friends, roommates, and groups. We designed it to collect only the data needed to make those features work — nothing more.
PandaSplit only collects what is required to operate the bill-splitting features you ask for.
| Category | Examples | Source | Why we collect it |
|---|---|---|---|
| Account identifiers | Apple user identifier (Sign in with Apple), email address, phone number (optional) | You, at sign-up | Authentication, account recovery, finding friends you already know. |
| Profile data | Username, full name, avatar image, default currency, locale | You | Displayed to your friends and group co-members so they can identify you in shared expenses. |
| Financial-context metadata | Group names, expense descriptions, amounts, currency, dates, who paid, splits between members, settlements | You and people you share groups with | The core ledger that powers balance calculations. PandaSplit does not process payments or connect to your bank. |
| Engagement signals | Activity log entries (expense added, friend accepted, etc.) | Generated by the app from your actions | Powers the in-app activity feed and notifications. |
| Push notification token | An opaque APNs device token | Apple, after you grant permission | Lets us deliver notifications about new expenses, settlements, and friend requests. |
| Diagnostic data | Crash signatures, error logs (no message bodies), backend request timing | Generated automatically | Reliability and debugging. Limited to operational metadata. |
We use the categories above strictly to:
We do not sell your personal data. We do not use your data for advertising or behavioral profiling.
Your data is stored on Supabase infrastructure with encryption in transit (TLS) and at rest. Access to production data is limited to the minimum personnel necessary to operate the service.
While we work hard to protect your information, no method of transmission or storage is 100% secure. If we ever become aware of a breach affecting your data, we will notify you in accordance with applicable law.
We keep your data for as long as your account is active. Expenses and group history are retained so co-members can continue to see the shared ledger. When you delete your account, your personal profile is removed and your contributions in shared groups are anonymized so balances remain consistent for other members.
Diagnostic logs are kept for a short rolling window (typically 30–90 days) and then discarded.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact us at the email in Section 11.
You can request deletion of your PandaSplit account and personal data at any time. There are two ways to do this:
Account deletion requests
mbodhija80@gmail.comPlease include the email or username on your account. We typically process deletion requests within 7 business days.
PandaSplit is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Continued use of PandaSplit after the changes take effect constitutes acceptance of the updated policy.
For questions about this policy, your data, or to exercise any of your rights:
Privacy contact
mbodhija80@gmail.com