Privacy Policy

Last updated: August 6, 2026

This Privacy Policy explains what information TanukiSplit ("TanukiSplit", "we", "us") collects when you use our app, and how that information is used. It applies to users worldwide, including the European Economic Area (EEA) and the United Kingdom, where it also serves as our GDPR disclosure.

1. Who we are

TanukiSplit is operated by TanukiSplit. You can reach us at contact@tanukisplit.com.

2. Information we collect

Account data. When you create an account we collect your email address and password. Your password is hashed by Firebase Authentication and never stored in plain text.

Budget and expense data. We store the budget names, people's names, expense descriptions, amounts, currencies, and dates you enter. This data is shared with anyone who knows your budget's invite code.

Push notification tokens. If you enable notifications, we store a device token (FCM token) in your account to deliver push notifications about new expenses, payments, and budget alerts. You can disable notifications at any time in Settings.

Subscription data. If you subscribe to Premium, we store your Stripe customer ID and subscription status. We never store your card details — those are handled entirely by Stripe.

We do not collect your location or phone number.

3. Legal basis for processing (GDPR)

• Contract performance — your email address and budget data are processed so we can provide the service you signed up for (Art. 6(1)(b) GDPR).
• Legitimate interests — we may analyze aggregate, non-identifying usage patterns to improve the app (Art. 6(1)(f) GDPR).

4. How we use your information

• To authenticate you and keep your account secure.
• To sync your budget and expense data across your devices.
• To allow others to view shared budgets when you give them the invite code.

We do not sell your personal information to third parties. We do not use your data for advertising.

5. Data processors

We use the following sub-processors:

• Google Firebase (Google LLC, USA) — authentication, database, and push notifications (FCM). Firebase Privacy Policy.
• Stripe Inc. (USA) — payment processing and subscription management. Your card details are stored solely by Stripe and never by TanukiSplit. Stripe Privacy Policy.
• Anthropic PBC (USA) — AI-powered receipt scanning. When you use the receipt scanner, the image is sent to Anthropic's API to extract expense details. Images are not stored by Anthropic beyond the duration of the request. Anthropic Privacy Policy.
• Vercel Inc. (USA) — hosting. Vercel Privacy Policy.

All processors participate in the EU–US Data Privacy Framework, providing an adequate level of protection for EEA users.

6. Data retention

Your account and budget data are retained for as long as your account is active. If you request deletion, we will remove your data within 30 days.

7. Children's privacy

TanukiSplit is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.

8. Your rights

Depending on where you live, you may have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your account and all associated data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

EEA and UK users also have the right to lodge a complaint with their local data protection authority (e.g., AEPD in Spain, CNIL in France, ICO in the UK).

To exercise any of these rights, email us at contact@tanukisplit.com.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted here with an updated date. Continued use of the app after a change constitutes acceptance of the updated policy.