Privacy Policy
Effective 23 October 2026
In short
- We keep what you add (your spending, income, cards, events, groups) only to run mysplix for you.
- We don't sell your data, show ads, or use analytics or tracking tools.
- Friends and groups see only what you share with them. Your own entries and payment methods stay private.
- You can delete your account from Profile. It's deleted with your data 15 days later.
1. Who we are
mysplix is run by OPERATOR_NAME ("we", "us"). We decide how your personal data is used in mysplix and are responsible for it. Questions or requests about your data: CONTACT_EMAIL.
2. What we collect
| What | Examples | Why |
|---|---|---|
| Account | Your User ID, the name you go by (optional), your password (stored only as a one-way hash), currency and time zone | To create your account, log you in and show amounts and dates the way you chose |
| What you add | Spending, income and transfers (amounts, dates, notes), categories, payment methods and card bill days, events, splits | To show your totals, charts, bills and reports |
| Friends and groups | Friend requests, groups you create or join, shared spending and settle-ups | To share costs with the people you choose |
| Logins and devices | The IP address you log in from, a device label such as "Chrome on macOS", when each login started and was last used | To list your logged-in devices so you can log any out, and to protect your account from password guessing |
| Your activity | A list of things done in your account, such as logins, password changes and entries added | So you can see what happened in your account and notice anything you didn't do |
| Security records | Failed logins, rate-limit and lockout events, with the User ID and IP address | To keep mysplix and your account secure |
| Notifications (mobile app) | If you allow notifications: a notification address for your phone, given by Apple or Google, and whether it's an iPhone or Android phone | To tell you about friend requests, groups, group spending and settle-ups that involve you |
We don't collect your bank or card numbers: payment methods are just names you choose, such as "Visa" or "Cash". Please don't put sensitive information like card numbers in names or notes.
3. Why we're allowed to use it
We use your data to provide mysplix, which you signed up for (to perform our agreement with you, the Terms of Use), and to keep it secure (our legitimate interest in protecting mysplix and its users). Where the law requires your consent, creating an account and adding your data is how you give it, and you can withdraw it at any time by deleting your account.
4. Who can see it
- You. Everything in your account.
- Friends and group members. Your User ID and name, and the spending and settle-ups in groups you share. Never your own entries, income, balances or payment methods.
- mysplix administrators. To run mysplix and help with problems, administrators can see account details (User ID, name, when it was created and last used) and can open an account read-only for up to 30 minutes. Every such view is recorded. When you've asked for your account to be deleted, an administrator can download a copy of your data during the 15 days before it's deleted.
- Hosting providers. mysplix runs on servers provided by Amazon Web Services, and its database is hosted by MongoDB Atlas. They store and process the data only on our behalf, to run mysplix.
- Notification services. To send notifications to the mobile app, mysplix passes the notification's short text to Expo, which delivers it through Apple (iPhone) or Google (Android). Only if you allow notifications.
- When the law requires it. If we're legally required to share data (for example, by a court order), we share only what's required.
We don't sell or rent your data, share it for advertising, or use third-party analytics, ad or tracking tools.
5. What's stored on your device
mysplix doesn't use cookies. On the website, it keeps a few things in your browser's local storage: your login (so you stay logged in for up to 7 days), your light or dark choice, and the account you last paid each card bill from. In the mobile app, your login is kept in your phone's secure storage (the iPhone Keychain or Android Keystore), with your theme and app lock choices. Logging out removes your login from that browser or phone.
6. How long we keep it
- Your account and what you add: until you delete your account.
- Deleting your account: it's deleted with your data 15 days after you ask, unless you log in and keep it. It can be delayed while you still owe or are owed money in a group, until you settle up. Your past spending in groups stays visible to the other members, shown as a former member's, so their balances stay right.
- Your activity list: each entry is kept for 6 months. It's deleted with your account when you delete it yourself.
- Logins: each device's login is removed when it expires (7 days) or when you log it out. A phone's notification address is removed with its login.
- Backups: the database is backed up nightly, and backups are kept for 14 days, so deleted data disappears from backups within 14 days.
- Security records: kept only as long as needed to keep mysplix secure.
7. Your choices and rights
- See and correct: everything you've added is in mysplix, where you can change or delete it. Your name, currency, time zone and password are in Profile (More in the mobile app).
- Delete: Profile → Delete account (More → Delete account in the mobile app). Or write to us.
- Get a copy: write to us and we'll send you a copy of your data.
- Log out devices: Profile → Logged-in devices (More → Security → Devices you're logged in on, in the mobile app).
- Notifications: turn them off at any time in your phone's settings.
- Ask or complain: write to CONTACT_EMAIL. You can also complain to the data protection authority where you live.
Depending on where you live, you may have further rights, such as to object to or restrict how your data is used, or to name someone to act for you. Write to us to use any of them.
8. How we protect it
Connections are encrypted (HTTPS). Passwords are stored only as strong one-way hashes. Logins expire and can be ended from any device, and repeated wrong passwords are locked out. Each account can only reach its own data. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
9. Children
mysplix is meant for adults. Don't create an account if you're under 18.
10. Where data is processed
Your data is stored and processed by our hosting providers, which may be in a different country from yours. We use providers that protect data under contract.
11. Changes to this policy
If we change this policy, we'll update the date at the top. For important changes, we'll tell you in mysplix before they take effect.
12. Contact
OPERATOR_NAME · CONTACT_EMAIL