Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains what information TanukiSplit ("TanukiSplit", "we", "us") collects when you use our app, and how that information is used. It applies to users worldwide, including the European Economic Area (EEA) and the United Kingdom, where it also serves as our GDPR disclosure.

1. Who we are

TanukiSplit is operated by [YOUR NAME / COMPANY]. You can reach us at contact@[yourdomain.com].

2. Information we collect

Account data. When you create an account we collect your email address and password. Your password is hashed by Firebase Authentication and never stored in plain text.

Budget and expense data. We store the budget names, people's names, expense descriptions, amounts, currencies, and dates you enter. This data is shared with anyone who knows your budget's invite code.

We do not collect your location, phone number, or any payment information.

3. Legal basis for processing (GDPR)

• Contract performance — your email address and budget data are processed so we can provide the service you signed up for (Art. 6(1)(b) GDPR).
• Legitimate interests — we may analyze aggregate, non-identifying usage patterns to improve the app (Art. 6(1)(f) GDPR).

4. How we use your information

• To authenticate you and keep your account secure.
• To sync your budget and expense data across your devices.
• To allow others to view shared budgets when you give them the invite code.

We do not sell your personal information to third parties. We do not use your data for advertising.

5. Data processors

We use the following sub-processors:

• Google Firebase (Google LLC, USA) — authentication and real-time database. Firebase Privacy Policy.
• Vercel Inc. (USA) — hosting. Vercel Privacy Policy.

Both processors participate in the EU–US Data Privacy Framework, providing an adequate level of protection for EEA users.

6. Data retention

Your account and budget data are retained for as long as your account is active. If you request deletion, we will remove your data within 30 days.

7. Children's privacy

TanukiSplit is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.

8. Your rights

Depending on where you live, you may have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your account and all associated data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

EEA and UK users also have the right to lodge a complaint with their local data protection authority (e.g., AEPD in Spain, CNIL in France, ICO in the UK).

To exercise any of these rights, email us at contact@[yourdomain.com].

9. Changes to this policy

We may update this policy from time to time. Changes will be posted here with an updated date. Continued use of the app after a change constitutes acceptance of the updated policy.