StackSplit Privacy Policy

Effective October 16, 2026

We keep what the app needs to split expenses: your Google email, the alias you choose, your groups and expenses.
No ads, no analytics or tracking tools, and we never sell your data.
The optional AI assistant sends your message and some group context to DeepSeek. Voice is turned into text by your phone's speech recognizer; we never receive audio.
You can delete your account in the app. Expenses you share with a group stay, because they are also the other members' records.

Who we are

StackSplit is an app run by Unsubscribed!, a small project that hosts open-source apps at cost. Questions or requests: jcrubioa2@gmail.com.

What we collect and why

Your Google email. You sign in with Google. Our server checks Google's signed sign-in token and keeps only your verified email address, which is your identity in StackSplit. We don't store your Google name, photo or the sign-in token itself.
Your alias. The display name you choose (up to 40 characters). Everyone in your groups sees it.
Groups. Each group's name, currency and members' email addresses. Anyone in a group can add people by email, so a group can hold the email of someone who hasn't installed StackSplit yet.
Expenses. Description, amount, who paid, how it is split, who created it and when it was created or edited, plus each member's running balance. All members of the group can see them.
Device sessions. After you sign in, the app gets a session token so it doesn't need Google again on that phone. We store only a one-way hash of it, with your email and the date it was created. On your phone the token is encrypted with a key kept in the Android Keystore. A session lasts until you sign out or delete your account.
API key (optional). If you create a personal API key to let your own tools or AI agent log expenses, we store only a one-way hash of it. Creating a new key revokes the old one.

The AI assistant

The assistant is optional: you only use it when you type or dictate a request in a group. To act on it, our server sends DeepSeek (an AI provider, deepseek.com) your message, the earlier messages of that same conversation (up to 10), the group's members (emails and aliases), the group's 15 most recent expenses, and the expense you are looking at, if any. DeepSeek processes this under its own terms and privacy policy, and is based outside the United States. Please don't put information in your messages that you wouldn't want an AI provider to see.

We don't store the conversation on our server. The app keeps it in memory only and forgets it when you close the conversation or leave the group's screen. If the assistant creates, edits or deletes an expense, that change is saved like any other.

Voice. When you tap the microphone, your phone's speech recognizer turns speech into text and StackSplit only ever receives the text. On Android 13 and later the app uses the phone's on-device recognizer when it has your language installed; otherwise it uses your phone's default speech service (often Google's), which handles audio under its own privacy terms. The microphone permission is used only while you are dictating.

Notifications

Once a month the app can show you a summary of the previous month. This runs on your phone: a background task asks our server for your summary and shows a local notification. We don't use a push notification service.

What we don't do

No ads and no advertising IDs.
No analytics, tracking or crash-reporting tools.
We don't sell, rent or trade your data, and we don't use it to profile you.

Who else handles your data

Amazon Web Services hosts the server and database in the US East (Ohio) region, with encryption at rest.
Google handles sign-in. On Android, the app's font is also provided by Google Play services.
DeepSeek processes assistant requests, as described above.
Other members of your groups see your email, alias and the group's expenses.

We may disclose data if the law requires it.

Security

All traffic uses HTTPS. Sessions and API keys are stored only as hashes, and the session on your phone is encrypted. No system is perfectly secure, but we keep what we hold to the minimum the app needs.

How long we keep data

Your alias, sessions and API key: until you delete your account (a session also ends when you sign out).
Groups and expenses: for as long as the group exists, including after a member deletes their account (see below).
Server error logs: 30 days. They are written when something fails and record technical details, not your expenses. Our hosting provider may also process technical data such as IP addresses to run and protect the service.
Database backups: point-in-time backups cover the last 35 days, so deleted data disappears from them within 35 days.

Deleting your account

In the app, open the menu (⋮) on the groups screen and tap Delete account. You can also email jcrubioa2@gmail.com from your Google address and we will do it for you. Full steps: Delete your StackSplit account.

Deleting your account removes your alias, signs out all your devices and revokes your API key. Your group memberships and shared expenses are kept, because they are the other members' financial records too (removing them would change everyone's balances). In those records you remain identified by your email. If you sign in again with the same Google account, you will see those groups again.

Your choices and rights

You can see your data in the app, change your alias at any time, and delete your account. Depending on where you live you may have further rights, such as access, correction or deletion. Email us and we will answer within 30 days. If someone added your email to a group and you never used StackSplit, you can also contact us.

Children

StackSplit is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes

If this policy changes, we will update this page and its effective date.