This page explains what We Split Fun stores and where it is sent, in plain language.
Who provides We Split Fun
We Split Fun is operated by Maksym Grigorash, a sole trader based in the United Kingdom, trading as We Split Fun. Support and purchase enquiries: hello@wesplit.fun.
What you enter
We store profile details such as your chosen name, emoji, colour, profile photo, payment details and, for new email or OAuth sign-ins, a verified email or provider ID. Existing device profiles may not have an email. We store the groups, expenses, payments, comments, notes and receipt images that people enter.
Why we use it
We use this information only to run We Split Fun: to sign you in and protect your profile, show groups, entries and balances to their members, work out the debts between members, send the notifications and emails you ask for, process Group PRO purchases, answer support requests and prevent abuse. We do not sell personal data, show ads or use your information to train AI models.
Who can see it
Information in a group is available to that group’s members. Payment details are shown to people who need to settle with you. Receipt images and comments follow the same group access.
Sessions and cookies
The app uses a necessary HTTP-only session cookie containing a random token. The database stores its hash and expiry so the app can keep you signed in. Recovery codes are stored only as hashes.
Expense notifications
Expense notifications are on by default in the app. Push delivery also requires permission on your device. If you allow it, we store the device subscription endpoint, encryption keys and language, linked to your login. Encrypted messages travel through your browser's push service, such as Apple, Google or Mozilla. Notifications can include an expense description and your share, depending on your device's preview settings. You can turn notifications off in your profile or for a group. Signing out removes that login's device subscriptions.
Google and Apple sign-in
If you use Google or Apple, the app receives the basic profile and email information needed to sign you in, plus a provider ID. It does not request or read Gmail, iCloud mail or other mailbox contents. Apple may provide a private relay email address.
Receipt scanning
Receipt scanning is optional. A photo is sent to our recognition provider (Cloudflare) only when you tap Scan. Photos added without scanning are stored with the expense but are not sent for recognition.
Group PRO payments
If you buy Group PRO, Stripe processes your payment details. We store the payment provider IDs, status, price, payer and group needed to record the purchase. We do not store card details.
Service providers
The app runs on Cloudflare and keeps its data in a Turso database. Cloudflare handles your email address and sign-in link only when you ask for an email sign-in or link an email, and a receipt photo only when you request scanning. Daily backups are kept for 31 days and then deleted.
How long we keep it
Profiles, groups, entries, comments and receipt photos are kept while you use We Split Fun, because other members’ balances depend on them. If you ask us to delete your profile, we remove your personal details within 30 days; entries in shared groups stay for the other members without them. Email sign-in links expire after 15 minutes and sessions after a year or when you sign out. An AI assistant’s access lasts an hour at a time and ends after 60 days without use or as soon as you disconnect it. Counters that limit repeated attempts are deleted after 45 days, purchase records are kept as long as accounting law requires, and backups are deleted after 31 days.
Your choices
You can edit or delete entries in your groups, change your profile and payment details, turn notifications off for the app or for a group, sign out, and disconnect AI assistants in your profile. To get a copy of your data, correct it or have your profile deleted, email hello@wesplit.fun; we reply within 30 days. You can also complain to a data protection authority, such as the ICO in the United Kingdom.
Questions and data requests
For questions about your profile or a request concerning your account data, contact hello@wesplit.fun. Never send a recovery code.
Automatic support
Support questions and replies are stored with your account. The conversation text and public help guides are sent to Cloudflare AI to select relevant instructions. The assistant does not receive your group's financial records, sign-in secrets or other users' conversations. You can delete your support conversations. Questions requiring an account change or a software fix remain open; an automatic answer is not a promise of human follow-up.
AI assistants and connected apps
You can connect an AI assistant such as ChatGPT, Claude or Codex. With your permission it can read your groups, their members, expenses and balances and, if you allow changes, add, edit or delete entries, record repayments and create groups in groups you belong to. We store which app you connected, the permissions you allowed, when it was last used, and hashed access tokens. Access tokens expire after one hour, refresh tokens after 60 days without use, and every token ends when you disconnect the app in your profile. The assistant’s provider, for example OpenAI or Anthropic, processes the information it receives under its own privacy policy. We do not receive your chat history.
Contact: hello@wesplit.fun (email)
Terms of use