Nidus Splito privacy policy
Last updated 9 October 2026
Splito helps you keep track of shared expenses with friends and groups. It's made by Nidus Labs, the studio of Jatin, an independent developer in India. This policy explains what Splito collects, why, who it's shared with, and what you can do about it. Questions go to support@niduslabs.dev.
The short version: Splito collects only what it needs to split expenses with the people you choose. There are no ads, no tracking across apps or websites, and your data is never sold.
What Splito collects
| What | Why |
|---|---|
| Your sign-in account: your name, email address and account ID from Google or Apple | To create your account and sign you in. Splito never sees your Google or Apple password. |
| Passkeys: the public half of each passkey you add, its name and when it was last used | To sign you in with Face ID, Touch ID or your device's lock. The private key never leaves your device. |
| Your phone number | So friends who have your number can add you, and so expenses they added before you joined find you. It isn't verified and is never used for marketing. |
| What you record: groups, expenses, amounts, notes, categories, payments, and the edit history of each | This is the app. It's shared with the people in each expense, payment or group. |
| Your UPI ID, if you add one | So friends who owe you can pay you from their UPI app. |
| Sessions: your device's name and platform, and when it was last used | So you can see where you're signed in and sign out a device. |
| A push token for each device, if you allow notifications | To tell you when someone adds an expense or a payment. |
| Crash and error reports: what went wrong, your device model and OS, and your Splito account ID | To find and fix bugs. What you've recorded, email addresses, phone numbers and sign-in tokens are removed before a report leaves your device or our server. |
| Your IP address | To limit abuse (such as too many sign-in attempts). It appears in server logs, which are kept for a few days. |
Your contacts
When you add a friend, Splito can show your phone's contacts so you can pick someone. Your contacts are read on your phone and are never uploaded. Only the number and name of the person you choose to add are sent to Splito.
Information about people who haven't joined
You can add a friend by name and phone number before they use Splito. That number and the name you give them are stored so the expenses you share are waiting for them when they join. If someone added you and you'd like that removed, email support@niduslabs.dev.
Who can see your information
- People you share with. The people in an expense, payment or group see your name, your part in it, and its notes and history. People who added you by your number see that number, and your friends see your UPI ID if you've added one.
- Nobody else. Splito has no public profiles and no search for strangers.
Services Splito relies on
Splito uses these companies to run. Each handles data only to provide its service:
- Cloudflare: runs Splito's server and keeps its short-lived logs.
- Neon: hosts Splito's database, in Singapore.
- Google and Apple: sign-in, and delivering notifications to your device.
- Expo: passes notifications on to Google and Apple.
- Sentry: receives the scrubbed crash and error reports, kept for 30 days.
Some of these are outside India, so your data may be processed in other countries. Splito is never shared with advertisers or data brokers.
How long it's kept
Your account and what you record are kept while you use Splito. Signed-out sessions, expired sign-in challenges and old rate-limit records are deleted automatically. Server logs last a few days and crash reports 30 days.
Deleting your account
To delete your account, email support@niduslabs.dev from the address you sign in with (how to delete your account); deletion in the app is coming. Deleting removes your account, sign-in methods, passkeys, phone number, UPI ID, sessions and devices. Expenses and payments you shared with others stay in their records so their balances remain correct.
Your choices and rights
- See and correct your details in the app (Account), or ask for a copy of your data.
- Turn notifications off in your phone's settings, or per friend in Splito.
- Block someone so they can't add you to expenses or groups.
- Delete your account, as above.
Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU's GDPR) you may have further rights. Email support@niduslabs.dev and you'll get a reply within 30 days.
Security
All connections use HTTPS. Sign-in uses Google, Apple and passkeys, so Splito stores no passwords, and session tokens are stored only as hashes.
Children
Splito isn't meant for children under 13, and doesn't knowingly collect their information.
Changes
If this policy changes in a way that matters, the app will tell you before it takes effect. The date at the top shows the latest version.