Privacy Policy.

Information you provide directly:

• Your name and email address when creating or joining a split
• Payment details (card number, expiry, CVC) — handled entirely by Stripe; we never see or store raw card data
• Wallet top-up amounts and transaction history
• Messages sent via our contact form

Information collected automatically:

• IP address and browser/device type for security and fraud prevention
• Session activity logs (pages visited, actions taken) to operate and improve the Service

• To process and manage group payment sessions
• To operate and secure your wallet
• To send OTP verification codes and payment receipts to your email
• To respond to support requests and contact form submissions
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal information to third parties. Ever.

All payment processing is handled by Stripe, Inc. Stripe collects and processes your card details directly under their own Privacy Policy. We receive only a tokenised payment method reference — never your raw card data.

We use Resend to deliver transactional emails such as OTP codes and receipts. These are strictly operational — we do not send marketing emails unless you explicitly opt in.

• Session and participant data is retained for 90 days after a session closes, then deleted
• Wallet and transaction records are retained for 7 years to meet financial compliance requirements
• OTP codes are deleted immediately after use or expiry
• Contact form submissions are retained for up to 2 years

SplitNPay does not use tracking cookies. We use browser localStorage solely to store your wallet device-trust token (a temporary credential valid for 24 hours) so you don't have to re-verify your wallet on every visit from the same device.

No third-party advertising or analytics cookies are set.

We share your data only with:

• Stripe — to process payments
• Resend — to deliver transactional emails
• Amazon Web Services — to host and store application data
• Law enforcement or regulators when required by law

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing

To exercise any of these rights, email us at support@splitnpay.io. We will respond within 30 days.

We use industry-standard security measures including HTTPS encryption, hashed OTP codes, short-lived JWT tokens, and strict access controls on our infrastructure. No method of transmission over the internet is 100% secure, but we take every reasonable precaution.

SplitNPay is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will post the revised version here with an updated effective date. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

Questions about this policy? Reach us at support@splitnpay.io or via our contact page.