← Back to Owlsplit

Privacy

Last updated 15 October 2026

Owlsplit helps a group keep track of what they spent together and who owes whom. This page explains what we keep, who can see it, which services handle it, and how to have it removed. We follow the Philippine Data Privacy Act of 2012 (RA 10173).

You can use it without an account

The first time you open the app, your device gets an anonymous guest session — no name, email or phone number. Trips you make or join are tied to that session. Guest trips stay on the device you used; clearing the browser or switching devices can lose them.

If you sign in

Signing in is optional. You can continue with Google or with a one-time code sent to your email; there are no passwords. We keep your email address, and if you use Google, the basic details Google shares when you sign in. Anything you made as a guest on that device moves into your account.

What we keep

• Trip details: trip names, the names given to members, expenses, how they were split, repayments, budgets, and any receipt photos, cover photos or payment QR images added to a trip.
• Your profile (accounts only): the name, profile picture and payment QR you choose to add.
• Purchases: what you bought, the amount, when, and any voucher code used. Card and e-wallet details go straight to PayMongo; we never see or store them.
• Abuse limits: how many receipt scans, trip-code lookups and voucher tries a session makes, plus a one-way scrambled tag of your network address, so free allowances can’t be farmed.
• On your device: your sign-in session and small preferences such as light or dark mode.

Who can see it

• Everything in a trip is visible to everyone who has joined that trip, and to no one else.
• Your profile name, picture and payment QR are visible only to people who share a trip with you.
• Anyone with a trip’s code can join it and pick an untaken name, so share codes only with your group. The person who made a trip can lock it once everyone is in.
• We don’t sell your information or show you ads.

Services we use

• Supabase stores the data and photos, and handles sign-in.
• Vercel hosts the app.
• Google handles “Continue with Google”, and its Gemini service reads a receipt photo when you tap Scan items. Only that photo is sent.
• PayMongo processes Premium payments.
• open.er-api.com provides exchange rates; no personal information is sent to it.

How long we keep it

• Trips stay until the person who made them deletes them.
• Guest sessions that never made or joined anything are removed after 30 days.
• If you leave a trip, you lose access to it, but your name and expenses stay in it so the group’s totals don’t change.
• If you delete your account (Profile → Delete account), we remove your account, profile, picture and payment QR, and take you off every trip. Trips you made pass to the next person on them; trips only you were on are deleted, photos included.
• Purchase records are kept, without your name, for as long as the law requires for receipts.

How it’s protected

Access is checked by the database itself, not just the app: you can only read or change trips you’re on. Photos are stored privately and shown through short-lived links. Payments are confirmed directly with PayMongo before Premium turns on.

Your rights

You can see, correct and delete your own information in the app at any time. To get a copy of your data, or for anything you can’t do in the app, contact OwlOpsCo using the details on your PayMongo receipt and we’ll respond within 15 days. Owlsplit is not meant for children under 13.

Changes

If we change how we handle your information, we’ll update this page and post a notice under What’s new in the app.