Skip to content
split2trip
Privacy

Privacy policy

What Split2Trip does with your data, in plain words: what we keep, why, where, for how long, and how to get it all back or erase it all. No advertising, and your data is never sold.

Last updated: 16 October 2026

This translation is provided for information only. In case of any discrepancy, the French version prevails. Read the French version

1. Who is responsible for your data

Split2Trip is published by Emcorp (Sahinthan Punithanathan, sole trader (micro-enterprise), SIREN 842 863 011), 30 rue du Champ des Roses, 77127 Lieusaint, France. Emcorp is the controller of the data collected by the Split2Trip app (iPhone and Android) and by the split2trip.com website.

For any question or request about your data: contact@split2trip.com. Full publisher details are in the legal notice.

2. The data we process

Your account. Email address, display name, password (never stored in plain text), avatar (a photo you choose, an animal, or your Google account photo), creation and last sign-in dates. If you sign in with Google or Apple, we receive that account’s identifier, your name and your email address, depending on what you allow; we never receive your password.

Your trips. Trip name, destination and dates, list of travellers (including friends you add with just a first name, even without an account), subgroups, invitation links and QR codes, and your crew (the people you travel with).

Your expenses. Amount, description, category, date, who paid, how the expense is split, and the paybacks recorded between you.

Receipt photos. When you scan a receipt, the amount, date and shop are read by your phone itself: the photo is not sent to any external analysis service. If you save it with the expense, the photo is stored on our server and visible to the travellers on the trip.

Vault documents. Files (tickets, bookings, invoices, ID documents, visas, insurance…), links and practical notes (key-box code, wifi…). For each document, you choose who can see it: all travellers, only you, or the people you designate. No one else has access to it in the app.

Your purchases. For the trip pass: the trip concerned, the purchase channel (App Store, Google Play or website), the transaction identifier, the amount and the date. Your bank details never pass through Split2Trip: payment is processed by Apple, Google or Stripe.

Waiting list and beta. If you sign up on the website to be told when the app launches or to test it: your email address, your type of phone (iPhone or Android), whether you want to test the app, the website language, the campaign that brought you (UTM parameters of the link you followed, if any), and the dates of your consent, your confirmation and, where applicable, your unsubscription.

3. Why we use it

  • To provide the service you request: your account, your trips, sharing expenses and documents with travellers (performance of the contract).
  • To send you the emails the service needs: address verification, forgotten password, invitations.
  • To activate the trip pass and keep sales accounts (legal obligation).
  • To measure website traffic, without cookies and anonymously (legitimate interest, see section 8).
  • To tell you when the app launches and, if you asked, to invite you to test it (website waiting list): based on your consent, which you can withdraw at any time via the unsubscribe link in every email or by writing to us. This data is never sold or transferred.

No advertising, no profiling, and no selling of data.

4. Who sees what

Travellers on the same trip see your display name, your avatar, the trip’s expenses and balances, and the documents you have made visible to them. We only share your data with the service providers essential to the service, who may not use it for anything else:

  • Hostinger International Ltd: hosts the app server (accounts, trips, expenses, photos and documents), server located in Paris, France.
  • Emcorp: hosts the split2trip.com website and the Umami audience measurement tool.
  • Resend: sends the service’s emails (your email address and the content of the message).
  • Apple, Google and Stripe: payment for the trip pass, each under its own privacy policy; Apple and Google also for signing in with their account, if you choose to.
  • Authorised payment provider for transfers ([PROVIDER TO BE CONFIRMED]): see section 6.

5. Where your data is

Your data is hosted in France: the app server is in Paris, with Hostinger International Ltd, and the website is hosted by Emcorp. Emails go through Resend, and payments through Apple, Google or Stripe, which may process data outside the European Union with the safeguards provided for by the GDPR.

6. Paybacks between friends

When you settle your share from the app, the transfer is initiated from your own bank, via an authorised payment provider ([PROVIDER TO BE CONFIRMED]). You approve it with your bank, and the money goes directly from your account to your friend’s: Split2Trip never holds the funds. We only keep the payback tracking (amount, who pays whom, sent, received) to update the trip balances.

7. How long we keep it

  • Account, trips, expenses, photos and documents: as long as your account exists, or until you delete them.
  • ID documents stored in the vault (passport, ID card, visa): up to 6 months after the end of the trip.
  • Trip pass purchases: 10 years, the legal retention period for accounting records.
  • Export of your data: the file is created on request and deleted from our server as soon as it has been sent to you.
  • Waiting list and beta: until 6 months after the app launches, or until you unsubscribe if that happens first.

When you delete your account, your identification data (email address, name, avatar, password, links with Google or Apple) is erased immediately. What you shared in a trip with others (expenses, receipt photos, documents) remains visible to its travellers, under the name “Deleted user”, because it is part of their shared accounts. You can delete your documents before deleting your account, or write to us for any further erasure request.

8. Cookies and audience measurement

The app uses no cookies or advertising trackers. The website sets no advertising or audience measurement cookies: only technical cookies are used, to sign in to the web area and to remember the site language.

To understand website traffic, we use Umami, a cookie-free audience measurement tool hosted by Emcorp: it counts page views anonymously and in aggregate, without identifying visitors or tracking them from one site to another.

9. Security and encryption

Communications between the app and our server are encrypted (HTTPS), access to a trip is restricted to its travellers, and each document is only shown to the people you have chosen.

With the new version of the app, vault documents will be end-to-end encrypted: they will be encrypted on your phone before being sent, and only the chosen travellers will be able to decrypt them. We will then only store an unreadable file, which we will not be able to open ourselves. This page will be updated once this is in place.

10. Your rights

You have the right to access your data, rectify it, erase it, retrieve it (portability), object to processing or request its restriction. Two tools are provided for this:

  • Export my data: a ZIP file with your profile, your trips, your expenses and your crew.
  • Delete my account: immediate erasure of your identification data (see section 7).

You will find them in your profile, in the app or in the web area of the site. For any other request, write to us at contact@split2trip.com: we reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

11. Changes

We may update this policy. In the event of a significant change, we will let you know in the app and on this page, whose last update date appears at the top.