Privacy Policy

Effective May 1, 2026 · Last updated May 10, 2026

UtilSplit is operated by ND Soft LLC ("we", "us", "our"). This policy describes what personal information we collect when you use UtilSplit, how we use it, and the choices you have.

1. Information we collect

Information you provide

• Account details when you sign up: email address, display name, password (stored as a one-way hash by Firebase Authentication), and optionally a profile photo.
• Group content: group names, expense descriptions and amounts, recurring bill schedules, settlement records, and notes you add to any of these.
• Payment handles: if you choose to add a Venmo, Cash App, PayPal, or Zelle handle in Settings, we store it so other group members can pay you through their own accounts. We never access these payment networks on your behalf.
• Communications: messages you send through the in-app reminder system or contact us by email.

Information collected automatically

• Device and connection data: IP address, browser and OS version, the pages you visit, and basic usage events. This is logged by our hosting provider (Vercel) for security and performance purposes.
• Local storage: we use browser local storage and IndexedDB to keep you signed in and to cache your data so the app works offline. We do not use third-party advertising cookies.
• Push tokens: if you enable push notifications, we store a Firebase Cloud Messaging token so we can deliver them. You can revoke this at any time from your browser or in Settings.

2. How we use your information

• To run the core service: track shared bills, calculate balances, send reminders.
• To authenticate you and protect your account.
• To send transactional email (reminders, invites, verification, account changes).
• To process subscription payments via Stripe if you upgrade to Premium.
• To respond to your support requests.
• To investigate fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell or rent your personal information to third parties. We do not use your data to train AI models. We do not run third-party advertising on UtilSplit.

3. Service providers we share data with

We use the following processors strictly to operate UtilSplit. Each has its own privacy policy.

• Google Firebase (Auth, Firestore, Cloud Messaging, Cloud Storage) — stores your account, group data, photos, and push tokens.
• Vercel — hosts the application and serves traffic.
• Resend — sends transactional email on our behalf.
• Stripe — processes Premium subscription payments. Card details are entered directly on Stripe; we never see them.

4. Data within your group

Information you add to a shared group (expenses, recurring bills, settlements, your display name and avatar, payment handles) is visible to every other member of that group. When you remove a member or leave a group, your historical entries remain so the group's books stay correct, but the leaver is no longer part of new splits.

5. Data retention and deletion

We retain your account and group data for as long as your account is active.

How to delete your account

You can delete your UtilSplit account at any time from Settings → Delete all data, or directly at utilsplit.com/account/delete. The page requires you to type your email address to confirm, and the deletion runs immediately on submission. There is no recovery period.

What gets deleted immediately

• Your sign-in account (Firebase Auth user record), profile fields (display name, email, photo, payment handles), saved settings, push notification tokens, and any tester-unlock or beta flags on your user document.
• Your support reports, the threaded conversation history on each, and any error logs we captured under your user id.
• Pending email invites that were addressed to your email but never accepted.
• Any group where you were the only member — the group, its expenses, recurring bills, and settlements are all deleted.

What stays for the rest of your group

Shared groups continue to work for the remaining members. To avoid corrupting their balance history, we don't delete records you authored in groups with other members. Specifically:

• Expenses, settlements, and recurring bills you created in a shared group remain in that group. The audit-trail field identifying you as the author is anonymized so the records no longer link back to your deleted account.
• Your member slot in each group is kept with personal information scrubbed — display name becomes "Former member", email and photo are nulled — so historical expense rows still render an avatar and don't show as orphan ids.
• If you owned a group, ownership transfers automatically to the longest-tenured remaining member.
• Recurring bills you paid for or were a split member of are paused and reassigned to the new payer where applicable. The new payer is notified so they can take over, edit, or delete the rule.
• Receipt images you uploaded to a shared group remain visible to that group — they're shared evidence for the bill split, not personal files.

Backups and legal holds

Encrypted backups of our databases may retain your information for up to 30 days after deletion before being overwritten. We may also retain limited records longer where required for legal, tax, fraud-prevention, or security-incident reasons. Stripe retains payment records independently per their policy for as long as required by financial regulations.

If you can't sign in

If you've lost access to your account and can't reach the in-app deletion page, email us at support@utilsplit.com from the address tied to your account. We'll verify your identity and run the deletion manually within 30 days.

6. Your rights

Depending on your location you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information (you can edit most of it directly in Settings).
• Delete your account and personal information — see /account/delete for the self-service flow.
• Export your data (the Premium plan supports CSV/JSON exports for groups you own).
• Opt out of email reminders at any time from Settings or by following the unsubscribe link at the bottom of any reminder email.
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us at support@utilsplit.com. We may need to verify your identity before fulfilling certain requests.

7. Children

UtilSplit is not directed at children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from them. If you believe a child has created an account, please contact us and we will delete it.

8. International transfers

UtilSplit is operated from the United States. If you use the service from outside the U.S., your information may be transferred to and stored on servers located in the U.S. or in other countries where our service providers operate.

9. Security

We use industry-standard encryption in transit (TLS) and at rest (Firebase managed encryption). No system is perfectly secure; we encourage you to use a strong unique password and enable two-factor authentication on your sign-in provider where available.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email or via an in-app notice before the changes take effect.

11. Contact

ND Soft LLC
support@utilsplit.com

See also our Terms of Service and Unsubscribe page.