Privacy Policy

TripSplit Pro ("we", "our", or "us") is a mobile application that helps users track and split travel expenses with friends and groups. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our app.

2.1 Information You Provide

• Phone Number — used for account registration and login via OTP verification
• Full Name — used to identify you within trips and expense splits
• Trip Information — trip names, dates, descriptions, currencies, and icons you create
• Expense Data — descriptions, amounts, categories, dates, notes, and split details
• Member Information — names of trip members you add
• Settlement Records — payment settlements between trip members
• Advance Payments — advance amounts collected within trips

2.2 Information Collected Automatically

• Device Token (FCM Token) — a unique device identifier used solely to deliver push notifications to your device
• Sync Activity — connectivity status used internally to improve sync reliability (not stored on server)

We use the information we collect to:

• Authenticate your identity via OTP sent to your phone number
• Sync your trip and expense data across your devices
• Send push notifications when trip members add expenses or join your trips
• Enable real-time collaboration on shared trips via WebSocket connections
• Calculate and display expense splits, balances, and settlements accurately
• Store your data locally on your device for offline access

4.1 Local Storage

All your trip, expense, member, and settlement data is stored locally on your device using a SQLite database. This data is available even when you are offline and is never shared without your explicit action.

4.2 Cloud Storage

When you log in and sync, your data is securely transmitted to and stored on our server hosted at tripsplitpro.in. Your data is associated with your phone number and is accessible only to you and members of trips you explicitly share.

4.3 Data Retention

• Your account and trip data is retained as long as your account is active
• Device FCM tokens are removed automatically when you log out
• Stale or expired FCM tokens are periodically cleaned up from our server
• To request complete deletion of your server-side data, contact us at the email address below

TripSplit Pro uses the following third-party services to provide core functionality:

5.1 Firebase Cloud Messaging (Google)

We use Firebase Cloud Messaging (FCM) to deliver push notifications to your device when the app is not open. FCM uses your device's FCM registration token to route notifications. We do not share any personal data with Firebase beyond the notification payload (trip event, title, body).

• Firebase Privacy Policy
• Google Privacy Policy

5.2 MessageCentral (OTP Delivery)

We use MessageCentral to send one-time passwords (OTP) to your phone number for authentication. Your phone number is shared with MessageCentral solely for OTP delivery and is subject to their privacy policy.

• MessageCentral Privacy Policy

We do not sell, trade, or rent your personal information. Your data is shared only in the following limited circumstances:

• With trip members — your name and expense contributions are visible to other members of trips you join or create
• With service providers — only as described in Section 5 (Firebase, MessageCentral) and only for core app functionality
• Legal requirements — if required by applicable law, court order, or to protect our legal rights

We take reasonable technical and organisational measures to protect your personal information:

• All client-server communication uses HTTPS / TLS encryption
• WebSocket connections use WSS (WebSocket Secure)
• Authentication uses industry-standard JWT tokens stored securely on your device
• OTP codes expire after a short window and cannot be reused
• Our server infrastructure is protected with standard cloud security practices

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

TripSplit Pro is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such data from our systems.

TripSplit Pro is designed to work fully offline. When you are offline:

• All your trips, expenses, and member data remain accessible on your device
• New expenses and changes are queued locally in a pending sync queue
• Pending changes are automatically synced to the server when you reconnect
• No data is transmitted to our servers while you are offline

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of any inaccurate personal data
• Deletion — Request deletion of your account and all associated data — submit a deletion request →
• Portability — Export your trip and expense data
• Opt out of notifications — Disable push notifications at any time via your device Settings → Notifications → TripSplit Pro

To exercise any of these rights, please contact us at privacy@tripsplitpro.in

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this page
• Sending an in-app notification for significant changes

Your continued use of TripSplit Pro after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: