Privacy

Last updated: July 2026

What we store

A group stores exactly what you type into it: the group name, member names (first names or nicknames are fine — we never ask for emails, phone numbers, or real identities), expense descriptions, amounts, and dates. That's the whole list. There are no accounts, so there is no profile, no password, and no tracking identity.

Where it lives

Group data is stored in a Cloudflare D1 database so everyone with the link sees the same up-to-date balances. Access to a group is controlled by its unguessable link — anyone you share the link with can read and edit the group, so share it like you'd share a house key.

Splitpond is operated from Canada, and we host on Cloudflare's global network, so your group data may be stored on and processed by servers outside Canada — including in the United States. While it is held in another country it is subject to that country's laws, which can include lawful access requests by its courts and government agencies. We keep what we store deliberately minimal (see above) so there is very little to disclose.

Receipt scanning

When you scan a receipt, the photo is sent to Anthropic's Claude API to extract the line items, then discarded — we do not store receipt images. Don't scan documents containing information you wouldn't want processed this way.

Payments

Pro purchases are processed by Lemon Squeezy; we never see your card details. The license key you enter is validated against Lemon Squeezy and kept in your browser's local storage.

Analytics

We use Cloudflare Web Analytics, which is cookieless and does not track you across sites. No advertising trackers, ever.

Deleting your data

Every group has a delete button. It permanently removes the group, its members, and every expense from the database — no grace period, no soft delete, no email required. Export your JSON first if you want a copy.

Anything Splitpond remembers about you specifically — your recent groups and which member you are in each — is stored only in your own browser, never on our servers. Clearing your browser data removes it, and there's a "forget" control on each entry in the recent-groups list.

Questions

Splitpond is run from Canada and handles personal information under PIPEDA. If you have a privacy question or want data removed, use the group's delete button for immediate removal, or contact us (address in the footer once we're out of preview).