← Back to Owlsplit

Privacy

Last updated 29 October 2026

Owlsplit helps a group keep track of what they spent together and who owes whom. This page explains what we keep, who can see it, which services handle it, and how to have it removed. We follow the Philippine Data Privacy Act of 2012 (RA 10173).

You can use it without an account

The first time you open the app, your device gets an anonymous guest session — no name, email or phone number. Trips you make or join are tied to that session. Guest trips stay on the device you used; clearing the browser or switching devices can lose them.

If you sign in

Signing in is optional. You can continue with Google or with a one-time code sent to your email; there are no passwords. We keep your email address, and if you use Google, the basic details Google shares when you sign in. Anything you made as a guest on that device moves into your account.

What we keep

• Trip details: trip names, the names given to members, expenses, how they were split, repayments (and whether the person paid confirmed them), budgets, and any receipt photos, cover photos, payment QR images or proof-of-payment screenshots added to a trip.
• Your profile (accounts only): the name, profile picture and payment QR you choose to add.
• Purchases: what you bought, the amount, when, and any voucher code used. Card and e-wallet details go straight to PayMongo; we never see or store them.
• Abuse limits: how many receipt scans, trip-code lookups and voucher tries a session makes, plus a one-way scrambled tag of your network address, so free allowances can’t be farmed.
• Email settings (accounts only): whether you want payment reminder emails, and when a trip last sent reminders and deadline emails.
• Deleted expenses: when an expense is deleted, a short note of it (what it was, the amount, who shared it and who deleted it) so the others on the trip are told. Kept for 30 days.
• System logs: a record of what our server does — reminder emails sent, invites, payments confirmed, accounts deleted, errors — sometimes with the account it was about, so we can find and fix problems. Only we can see them. Kept for 90 days.
• On your device: your sign-in session, small preferences such as light or dark mode, and a copy of the app’s own files so it can open without a signal. A receipt photo you share into Owlsplit from another app is held on your phone only until you pick its trip.

Who can see it

• Everything in a trip is visible to everyone who has joined that trip, and to no one else.
• Your profile name, picture and payment QR are visible only to people who share a trip with you.
• Anyone with a trip’s code can join it and pick an untaken name, so share codes only with your group.
• When something on a trip involves you — a new expense you share, a repayment to or from you, someone joining, or an expense being deleted — it shows in the bell in the app.
• If you have an account and the person who made a trip sets a deadline, we email you 2 days before each due date, on the day and the day after, while you still owe. If they turn on reminders, we also email you regularly — as often as every day while a payment is overdue — with who to pay and how much. Turn them off under Account, or from the link at the bottom of any reminder.
• If you invite a friend by email, we send them one email with the trip’s name, its join link and code, and your name and email address. We don’t keep their address: only a one-way scrambled copy, for 30 days, so the same address can’t be invited to a trip again and again.
• We don’t sell your information or show you ads.

Services we use

• Supabase stores the data and photos, and handles sign-in.
• Vercel hosts the app.
• Google handles “Continue with Google”.
• Anthropic’s Claude reads a receipt photo when you tap Scan items. Only that photo is sent, and Anthropic does not use it to train its models.
• PayMongo processes Premium payments.
• Resend delivers our emails, including sign-in codes. It receives your email address and the email’s contents.
• open.er-api.com provides exchange rates; no personal information is sent to it.

How long we keep it

• Trips stay until the person who made them deletes them.
• Guest sessions that never made or joined anything are removed after 30 days.
• If you leave a trip, you lose access to it, but your name and expenses stay in it so the group’s totals don’t change.
• If you delete your account (Account → Delete account), we remove your account, email address, profile, picture and payment QR, and take you off every trip. Trips you made pass to the next person on them; trips only you were on are deleted, photos included. Receipts and other photos you added to trips that carry on stay there for the group, no longer linked to you.
• System logs are deleted after 90 days. A log line about you can still mention your email address until then, even after you delete your account.
• Purchase records are kept, without your name, for as long as the law requires for receipts.

How it’s protected

Access is checked by the database itself, not just the app: you can only read or change trips you’re on. Photos are stored privately and shown through short-lived links. Payments are confirmed directly with PayMongo before Premium turns on.

Your rights

You can see, correct and delete your own information in the app at any time. To get a copy of your data, or for anything you can’t do in the app, contact us and we’ll respond within 15 days. Owlsplit is not meant for children under 13.

Changes

If we change how we handle your information, we’ll update this page and post a notice under What’s new in the app.