Privacy Policy

Last updated: 25 October 2026

1. Who we are

Split Mudra is a mobile app for keeping track of shared expenses, with this website at splitmudra.com. It is operated by [Legal name of the business], [registered address, India] ("we", "us"). We decide how and why your personal data is used, which makes us the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023.

This policy covers the Split Mudra app on Android and iPhone, and this website.

2. What we collect

When you create an account

• Your name, and your email address and/or mobile number.
• A password, if you choose one. We store only a one-way scrambled form of it (a hash), never the password itself.
• If you sign in with Google or Apple, we receive your name, your email address and an identifier for your account from them. We never see your Google or Apple password.
• One-time codes we send by SMS or email to confirm your number or address.

What you choose to add

• Your profile photo, language, currency, time zone and date format.
• Groups you create or join, and their names, types and cover photos.
• Expenses and payments: amounts, descriptions, dates, categories, notes, who paid and how each one is split.
• Photos of bills you attach, comments and photos on expenses, and group chat messages.
• Reminders, repeating expenses and other settings you make.
• A Splitwise export file, if you import one. We read it to create the group and its expenses.

People you add to a group

When you add someone by name, mobile number or email (typed in, or picked from your phone's contacts), we keep those details so that person's share can be tracked, and so the expenses are waiting for them if they sign up. Split Mudra does not read or upload your address book. Your phone opens its own contact picker, and only the contact you choose is passed to the app. Please add only people who are happy to be added. Anyone added this way can ask us to remove their details (see section 13).

Collected automatically

• Device details: your phone's platform (Android or iOS), the app version, and a push notification token so we can send you notifications.
• IP address and basic request information, used to keep the service secure: limiting sign-in attempts, stopping abuse, and investigating problems.
• Records of notifications we sent you, and whether they were delivered.

Purchases

Premium is bought through Google Play or the App Store. They handle the payment; we never receive your card or bank details. We receive a purchase reference and the subscription's status, so we can turn Premium on for you.

What stays on your phone

• Bill scanning reads the photo on your phone. The photo is only sent to us if you attach it to the expense.
• Your app-lock PIN (stored as a hash) and your fingerprint or face check never leave your phone.

What we don't collect

We don't use advertising, we don't track you across other apps or websites, the app contains no third-party analytics, and we don't collect your location.

3. How we use it

• To run Split Mudra: work out balances, show your groups, sync your phones, and record payments.
• To send you notifications, codes and emails you ask for, or that are about your account and your groups (for example, "Riya added an expense").
• To provide Premium when you subscribe.
• To keep accounts secure and the service working: preventing fraud and abuse, fixing faults.
• To answer you when you contact us.
• To meet our legal obligations.

We use your data on the basis of your consent, which you give when you create an account and agree to this policy, and for the legitimate uses the law allows, such as complying with a legal obligation. You can withdraw consent at any time by deleting your account. That stops us using your data from then on, but doesn't undo what was done before.

4. Who can see it

• People in your groups see your name, profile photo and everything added to those groups, including your share of each expense and payments you record. Friends you share expenses with outside a group see those shared expenses.
• Our support staff, when needed to help you, keep the service safe or investigate abuse. Their access is limited to what their role needs, and it's logged.
• The service providers in section 5, only to do their job for us.
• Authorities, when Indian law requires it, or to protect someone's safety.

We never sell your personal data, and we never share it for advertising.

5. Services we use

These companies process data for us under their own security and privacy commitments:

Provider	What for	What they handle
Render	Servers and database	All Split Mudra data
Cloudflare (R2)	Storing photos and data exports	Photos you add, export files
Google Firebase Cloud Messaging, and Apple's push service	Push notifications	Push token, notification text
Our SMS provider	Sending sign-in and confirmation codes by text	Mobile number, code
Our email provider	Sending codes and account emails	Email address, message
Google and Apple	Sign-in with Google or Apple, and in-app purchases	What you share with them when you use these

6. Where it's stored

Split Mudra's servers and stored files are in Singapore. Some of the providers above may also process data in other countries. When your data leaves India, we do so as Indian law allows and we choose providers that protect it.

7. How long we keep it

• We keep your account and what you add for as long as your account is open.
• When you delete your account, we remove your name, email, mobile number, profile photo and sign-in methods, sign you out everywhere, and end any subscription with us. Expenses you shared with others stay in those groups, shown as "Deleted user", because they are part of other people's balances too.
• One-time codes expire within minutes. Security and delivery records are kept only as long as they're useful for keeping the service safe and working.
• Copies in our backups are replaced in the normal backup cycle.
• We may keep some records for longer where the law requires it.

8. Your rights and choices

Under Indian law you can:

• See and get a copy of your personal data. Ask in the app (Profile → Data & privacy) or by emailing us.
• Correct or update it. Most details you can change yourself in Profile.
• Delete your account from the app (Profile → Data & privacy), or ask us to.
• Withdraw consent, by deleting your account.
• Choose your notifications in Profile → Notifications, or turn them off in your phone's settings.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Raise a grievance with us (section 13). If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

9. Security

Everything between the app and our servers travels encrypted (HTTPS). Passwords and PINs are stored only as hashes. Keys for the services we use are stored encrypted. Staff accounts need two-step sign-in, and what they do is logged. No system is perfectly secure. If a breach affects your personal data, we'll tell you and the authorities as the law requires.

10. Children

Split Mudra is meant for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us personal data, contact us and we'll delete it.

11. This website

splitmudra.com uses no cookies, no analytics and no advertising. If you choose light or dark mode, that choice is saved in your own browser and never sent to us. Our host keeps standard server logs, including IP addresses, for security.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.

13. Contact and grievances

For anything about your data, including requests to see, correct or delete it, email support@splitmudra.com.

Grievance Officer: [Name], support@splitmudra.com, [postal address]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.