Privacy policy
Settled keeps the records you need to split shared costs, and nothing for advertising. This page says exactly what that means.
Last updated: 24 October 2026. Settled is run by Daven Chang, an individual developer in the United States. Questions, requests and complaints go to support@settledsplit.com.
The short version. Settled stores what you and the people you split with enter, so the app can work out who owes whom. Nothing is sold, shared for advertising, or used to track you across other sites. You can download everything about you, or delete your account, from the Account page at any time.
What Settled collects
| What | Details | Why |
|---|---|---|
| Your account | Display name, username, email address and password. The password is stored only as a salted hash by our authentication provider; nobody can read it. | To sign you in, let people invite you by username, and send account emails. |
| What you record | Groups, expenses, items and prices, dates, categories, who paid, how a cost is split, transfers, and a history of edits within each group. | This is the service: working out balances. |
| Receipt photos | Up to two optional photos per expense. They are kept for reference only; Settled does not read or analyse them. | So your group can look at the receipt. |
| People added by others | Names typed in for people who don't have an account ("temporary people", names in your Personal section, people in a quick split), and optionally a username that a Personal name is linked to. | So a cost can be split with someone who hasn't signed up. |
| Quick splits | The title, items, prices, tax, tip and the names people join with. If you aren't signed in, a one-way hash of your IP address is stored with a split you create, for rate limiting; the address itself is never stored. | To run the shared page and stop abuse. |
| Technical data | Our hosting and database providers log requests (IP address, browser, time, page) for a short period. | To keep the service running and secure. |
Settled does not use advertising, analytics or tracking cookies, and does not collect your location, contacts or payment details. It never moves money: "Mark received" only records that a payment happened elsewhere.
Your browser's storage
Settled keeps a few things in your browser's local storage, all needed for features you use: your sign-in session (sb-…-auth-token), how you sort your groups, feature preferences (splitpot:flags), and, for quick splits you join, the private key that lets you tap your own items. None of it is shared with anyone else or used for tracking, so there is nothing to consent to and no cookie banner.
Who can see your data
- People in your groups see the group's expenses, items, photos, transfers and edit history, and the display names and usernames of other members. They never see your email address.
- Your Personal section is visible only to you. Linking a name to a username there notifies nobody and shares nothing.
- A quick split is visible to anyone who has its link, which is a long random token. Quick split pages are kept out of search engines.
- The operator can see account details (name, email, sign-up and sign-in dates) and counts of activity, to run and support the service. Your expenses are not browsed.
Service providers
These companies process data on Settled's behalf, under contracts that limit them to providing their service:
- Supabase: database, sign-in, photo storage and background jobs. Data is stored in the United States (Ohio).
- Vercel: hosting the website.
- Resend: sending account emails (sign-up confirmation, password reset, invitations).
- Google Fonts: the typefaces on the site load from Google's servers, which receive your IP address and browser details when a page loads.
Settled does not sell or share personal information for advertising, and has never done so. If you have an AI chat read a receipt (the "Open ChatGPT", "Open Claude" and "Open Gemini" buttons, or "Copy prompt"), you choose that service and send it the photo yourself, under that service's own privacy terms. The buttons only open the chat with Settled's instructions filled in; they carry none of your data, and Settled never sends your data to an AI service.
How long data is kept
- Your account and what you record: until you delete it, or delete the group it's in.
- Unsaved drafts: removed after a day.
- Quick splits: removed 30 days after anyone last changed them.
- Accounts never confirmed by email: removed after 2 days.
- Receipt photos: removed when you remove them or the expense. Photos of a deleted group or account are removed by a weekly clean-up, so they can last up to about a week.
- Request logs: kept by our providers for a short period, typically a few days.
Settled keeps no separate backups. Our database provider may keep short-lived copies for its own reliability, which expire on their own.
Deleting your account
Account, then Delete account removes your account, your profile, your Personal section, and groups you own that nobody else is in. If you own a group other people are in, delete it first, so nobody loses their records by surprise. In other people's groups, you are removed: expenses you added stay for the others, with no author shown, and stop counting toward balances. Names that other people typed for you in their own records are theirs; you can ask us to remove them (see below).
Your rights
You can see, correct, download (Account, then Download my data, as a JSON file) and delete your data yourself. For anything else, such as a copy of what we hold about you, a correction you can't make, removal of your name from someone else's records, or an objection to how your data is used, email support@settledsplit.com. We answer within 30 days and may need to confirm the request comes from you. You will never be treated differently for asking.
If you are in the European Union or the United Kingdom, the legal bases we rely on are performing our contract with you (running the service you signed up for) and our legitimate interests (keeping the service secure, preventing abuse, and storing the names users enter for people they split costs with). You have the rights of access, rectification, erasure, restriction, portability and objection, and you can complain to your data protection authority. Data is processed in the United States; our providers transfer it under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
People who don't use Settled
If someone added your name to a split, Settled stores only that name (no contact details), so we can't tell you directly. To have your name removed, email support@settledsplit.com with the group or quick split it appears in.
Children
Settled is not meant for children under 13, and accounts may not be created by anyone under 13. If we learn an account belongs to a child under 13, we delete it. If you believe that has happened, email us.
Security
Connections are encrypted (HTTPS) and data is encrypted at rest by our providers. Database rules let each person reach only their own groups, photos are stored privately and shown through links that expire after an hour, and passwords are stored only as hashes. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Do Not Track and Global Privacy Control
Settled does not track you across other websites and does not sell or share personal information, so it treats every visitor the same whether or not the browser sends a Do Not Track or Global Privacy Control signal. No third party collects data about your activity across sites through Settled, apart from what Google Fonts receives when a page loads, described above.
Changes
If this policy changes, the date at the top changes too. For a material change, signed-in users will be told in the app or by email before it takes effect.