Privacy Policy

Welcome to Paji Splitly (hereinafter referred to as "the Service"). We value transparency. This policy explains what data we collect, how long we keep it, and how you can submit privacy requests.

Data Collection and Usage

  • Local usage (not signed in): If you use Splitly as a guest, split bill data is stored only on your device (browser local storage) and is not synced to our servers.
  • Cloud sync (signed in): If you sign in and enable sync, split bill data is stored in Firebase (Google Cloud) to support cross-device access and backup.
  • Google Analytics (GA4): Used for traffic and behavior analytics to improve product experience.
  • Microsoft Clarity: Used for behavior analytics (heatmaps and session replay) to improve usability.
  • Google AdSense: Ads may be shown for free plan users. Google may use cookies for personalized or non-personalized advertising.

Data Retention Period

These are our current default retention rules:

  • Guest-mode local data: Kept on your device until you clear browser data, switch devices, or use a different browser.
  • Cloud split bill data (Firebase): Kept while your account is active. If you delete your account or submit a deletion request, deletion is initiated and primary data is usually removed within 30 days (required backups may take up to 90 days to be overwritten).
  • GA4 analytics events: Uses GA4 default retention of 14 months.
  • Microsoft Clarity session data: Uses Clarity default retention of 30 days.
  • Google AdSense advertising data: Retention is managed by Google under its product and legal policies (may vary by region and configuration).

If those third-party defaults change, we follow the latest vendor policy and update this page when needed.

Cookies

This site uses cookies for core functionality, analytics, and advertising:

  • Functional cookies: For example, maintaining sign-in status and essential preferences.
  • Analytics cookies: Used by Google Analytics and Microsoft Clarity.
  • Advertising cookies: Used by Google AdSense.

You can disable cookies in browser settings, but some features (especially sign-in and sync) may not work properly.

Data Rights Requests (Access / Delete / Rectify)

You can submit a privacy request using the contact channel listed on our Support page. To make requests auditable and faster to process, please use this format:

  • Contact email: paji.contact [at] gmail [dot] com
  • Subject format: [Splitly Privacy Request] <Access|Delete|Rectify> - <your sign-in email>
  • Include at minimum:
    1. Account email (Google sign-in email)
    2. Request type (access / delete / rectify)
    3. Related group or data scope (if applicable)

Default handling timeline:

  • We send an acknowledgement within 3 business days.
  • Standard requests are completed (or updated with progress) within 14 business days.
  • For complex requests requiring additional verification, processing may extend up to 30 days, with notice of the reason.

Legal Basis and Regional Rights

Legal basis for processing:

  • Consent: When you sign in, enable sync, or accept cookies.
  • Legitimate interest: For basic analytics (traffic patterns, usability improvements) where data is aggregated or pseudonymized.
  • Contract performance: When processing data is necessary to deliver core bill-splitting features you request.

If you are located in the European Economic Area (EEA) — GDPR:

Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, use the Data Rights Request process above. If you believe your rights have not been adequately addressed, you may lodge a complaint with your local data protection authority.

If you are a California resident — CCPA / CPRA:

Under the California Consumer Privacy Act and its amendments, you have the right to know what personal information we collect and how it is used, to request deletion, and to opt out of the sale or sharing of personal information. Splitly does not sell personal information. To submit a request, use the Data Rights Request process above.

Other regions:

If local privacy law provides additional rights beyond what is described here, we will honor those rights when applicable. Contact us through the process above for any data-related request.

Third-Party Roles and Policy Links

In practice, our processing roles are:

  • Paji Splitly: Primary service provider deciding product functions and processing purposes (Controller).
  • Google Firebase / Google Cloud: Cloud storage and infrastructure under our instructions (Processor).
  • Google Analytics (GA4): Analytics service provider; Google may act as an independent controller for certain data under its terms.
  • Microsoft Clarity: Behavior analytics provider; Microsoft may act as an independent controller for certain data under its terms.
  • Google AdSense: Advertising provider; Google is typically an independent controller for ad-related data.

Third-party policy links:

Policy Updates

We may update this policy from time to time. For material changes, we will update this page accordingly, and we encourage you to review it periodically.