Slytlabs · SplitPi

Privacy, explained clearly.

What SplitPi handles, why it is needed, where it is shared, how long it is kept, and the controls available to you.

Effective and last updated: 16 September 2026

At a glance: SplitPi does not sell personal information, currently does not show third-party advertising, and does not request Advertising ID. Optional Analytics is off until you enable it. The Android SMS draft feature processes eligible financial alerts on your device; the complete message is sent to SplitPi only if you deliberately include it in an expense note and then save that expense.

1. Scope and operator

This Privacy Policy applies to the SplitPi mobile application, the website at slytlabs.com, and related SplitPi services operated by Slytlabs. It covers personal and business accounts, including expenses, groups, debts and money reminders, invoice scanning, individual and grouped daily records, milk purchase and sale records, FAT-based calculations, advances, settlements, budgets, insights, notifications, authentication and support.

Privacy or deletion questions can be sent to support@slytlabs.com.

2. Information SplitPi handles

Category Examples When it is handled
Account and identity Name, email address, phone number, hashed password for email login, internal user ID, language, account type, invitation code and profile or feature preferences When you register, sign in or update your profile
Financial record content Expense name, amount, date, category, payment method, payer, participants, distributions, notes, personal or shared status, debts, balances, budgets, settlements, advances and calculated totals When you create, join, edit or review records
Groups and participants Expense-group or records-group name, category, invite or membership details, members, roles, payer, allocations and activity When you create or participate in shared records
Daily and milk records Purchase or sale type, entered units, net units, base fat, measured fat, prices, amounts, dates and settlement status When individual or grouped daily records are used
Invoice content Invoice or receipt image sent for text extraction, plus extracted merchant, items, prices, taxes, totals and item assignments Only when you use invoice capture or upload
Selected contacts Name and phone number of a contact you choose for a buddy, member, debt or expense action After contact permission and your selection
Optional financial SMS drafts Inbox transaction alerts received during the previous 30 days are processed on the device to extract draft fields such as amount, date, direction, payment channel and counterparty. The app stores a source-message reference and derived draft fields, but not a persistent copy of the full message Only after you choose the SMS draft feature and grant Android SMS access
Authentication and security Firebase phone-authentication result where used, session and refresh tokens, app-generated device ID, IP address, request details and security or error logs To sign in, maintain sessions and prevent abuse
Notifications Push token, device platform and notification interaction When notifications are enabled
Optional analytics App opens, screens, button interactions, platform, app-instance identifier and the SplitPi user ID associated with analytics events Only after you affirmatively enable analytics
Support Feedback, issue details and messages you send to support When you contact Slytlabs

SplitPi is not designed to collect government identification numbers, full payment-card credentials, bank passwords, precise location or microphone recordings. Do not place sensitive credentials, OTPs or unnecessary personal information in a name, note, image, support message or other free-text field.

3. How information is used

  • Create and secure your account, authenticate login and maintain sessions.
  • Calculate splits, personal totals, debts, balances, rollovers, grouped settlements and daily-record amounts.
  • Show relevant dashboards, recent activity, monthly trends, budgets and transaction details.
  • Send an invoice image for automated extraction and present the returned information for your review before saving an expense.
  • Find or add a person when you deliberately use a supported contact feature.
  • Show optional expense draft suggestions from financial transaction SMS processed on your device. SplitPi does not create or upload an expense until you review a suggestion and explicitly save it.
  • Deliver notifications to the people affected by an action.
  • Respond to support, privacy and deletion requests.
  • Measure reliability and feature usage only when optional Analytics is enabled.
  • Detect abuse, diagnose failures and meet legal obligations.

4. Visibility, sharing and processors

Other SplitPi users

Personal records are private. Shared expenses, debts, groups and grouped daily records are visible only to users involved in those records according to their role. A selected contact may receive or become associated with a supported record when you complete that action.

Service providers

Slytlabs uses service providers to operate SplitPi. Google Cloud provides application infrastructure and hosting. Firebase provides phone authentication, push messaging, Remote Config and optional Analytics. Amazon Web Services Textract processes an invoice or receipt image only when you choose automated invoice extraction. These providers process data for the stated service purposes under their applicable terms and privacy commitments.

Other disclosures

Information may be disclosed when required by law, necessary to protect users or the service, or involved in a business reorganization subject to appropriate safeguards and notice where required. SplitPi does not sell personal information.

SMS message text and locally generated SMS draft fields are not transmitted to Slytlabs, other users, advertisers or analytics providers merely because the inbox is scanned. If you review a draft and save it, the expense fields you confirm are sent to SplitPi as an ordinary user-created record. If you also turn on Include full SMS in notes, the complete message becomes part of that expense note, is uploaded to SplitPi, and follows the same visibility, retention and deletion rules as the expense.

5. Device permissions and disclosures

  • Contacts: lets you select people for buddy, member, expense or debt actions. SplitPi requests access in the relevant flow and uses names and phone numbers needed for that action. It does not modify your address book.
  • Camera and photos: lets you capture or choose an invoice or receipt. The selected image is uploaded to the SplitPi API and sent to AWS Textract for extraction only after you initiate the action. The extracted details are editable and are not saved as an expense until you confirm creation.
  • Notifications: lets SplitPi deliver relevant expense, debt, group or daily-record updates.
  • SMS (READ_SMS, Android only): this optional permission supports SplitPi's SMS-based money-management feature. SplitPi requests it only after you deliberately open SMS expense drafts, see the in-app disclosure and choose to continue. When granted, SplitPi reads inbox messages received during the previous 30 days, filters for bank, card and UPI transaction alerts, and extracts limited editable draft fields on the device. OTP, personal, reminder, failed and non-financial messages are filtered out. The full text is not copied into persistent draft storage; it may be read again from the source SMS when you ask to view it or choose to include it in Notes. SplitPi never sends, changes or deletes your SMS messages and does not use SMS data for advertising or profiling.

You may decline an optional permission. The related feature may be unavailable, while unrelated features should continue to work.

SplitPi does not request location, microphone, broad storage management or Advertising ID. SMS access is optional and used only for the on-device financial draft purpose described above.

6. Security and network handling

Production communication is transmitted over HTTPS. Android cleartext traffic and application backup are disabled. Slytlabs applies access controls, authentication, session management and operational safeguards appropriate to the service.

No internet service can guarantee absolute security. Keep your device and login method secure, never share OTPs or tokens, and report suspected unauthorized access to support.

7. Retention and deletion

  • Account and active record data is generally kept while your account is active and as needed to provide the service.
  • Local preferences remain until cleared, the app is removed, or account deletion clears supported local data.
  • SMS-derived draft fields and source-message references remain only on the device for up to 30 days and can be cleared from the draft screen, by clearing app data, or by uninstalling the app. SplitPi does not persist the full text in draft storage. A full message that you intentionally include in Notes and save is retained as part of the resulting expense instead.
  • Push tokens are retained while needed for enabled notifications and are removed during account deletion.
  • Invoice images sent for extraction are not attached to the created expense by the current upload flow. Service-provider request records may remain for their ordinary security and operational periods.
  • Support messages, security logs and backups may be retained for a limited operational period and then deleted or de-identified under ordinary operational cycles.
  • Information may be retained longer where necessary for fraud prevention, legal compliance, dispute handling, or the rights of another participant.

When an account is deleted, private records and direct identifiers are removed. Shared ledger entries needed by other participants may remain, but the deleted user’s name, phone number and email are removed or anonymized. Details are available on the Account Deletion page.

8. Your choices and controls

  • Review and correct available profile and record information in the app.
  • Decline or revoke camera, contact and notification permission in device settings.
  • Decline or revoke SMS permission at any time. You can continue entering transactions manually without SMS access.
  • Enable or disable optional Analytics from Profile settings. Native Analytics starts disabled until consent.
  • Delete your account in the app through Profile → Settings → Delete account and data.
  • Request deletion without the app through the public deletion page.
  • Contact support for access, correction, privacy or deletion questions.

9. Children

SplitPi is intended for adults and is not directed to anyone under 18. Slytlabs does not knowingly seek to collect a child's personal information. If you believe a child has provided information, contact Slytlabs so the account can be reviewed and appropriate action taken.

10. Policy changes

This policy may be updated when features, service providers or legal requirements change. The effective date will be revised, and material changes will be communicated where required.

11. Contact

Slytlabs — SplitPi
Website: slytlabs.com
Privacy and support: support@slytlabs.com