Privacy Policy — KhataSplit

Last updated: August 2026

KhataSplit ("the app") is developed by Attar Developer. This policy explains what information the app collects, how it is used, and the choices you have.

Information We Collect

• Account information: your name and email address, via Google Sign-In or email/password sign-up.
• Trip data: trip names, member names, amounts, balances, and notes you enter for expense tracking.
• Chat messages and photos: messages and photos you send in a Shared trip's chat with people you've invited.
• Bill/receipt photos: photos you attach to expense entries.
• Device information: basic technical data (app version, device type) used for crash reporting and app functionality.

How We Use Information

Information is used only to operate the app's features: tracking expenses, syncing Shared trips between people you invite, chat, notifications, and optional backups. We do not sell your data or share it with advertisers.

End-to-End Encrypted Chat

Chat messages (text and photos) sent in a Shared trip are end-to-end encrypted on your device before being sent. They can only be decrypted by devices belonging to people in that trip — not by KhataSplit or its developer. A recovery key lets you keep access to your encrypted chats when you switch devices; if this key is lost, those chats cannot be recovered by anyone, including us.

Trip data other than chat (member names, amounts, balances, bill photos) is not end-to-end encrypted — it is protected by access rules (only people you invite to a trip can see it) and encrypted in transit (HTTPS), but is technically accessible to the app's administrators. Please avoid entering highly sensitive information in notes or remarks.

Data Storage

Data is stored using Google Firebase (Firestore, Storage) and, for optional backups, your own Google Drive account (a private, app-only folder not visible in your regular Drive files).

Sharing Shared Trips

If you join or create a Shared trip, your name and the data you enter is visible to other members of that trip. You control who joins via invite codes and admin approval.

Third-Party Services

The app uses Google Firebase (authentication, database, storage, notifications) and Google Sign-In. These providers may process data per their own privacy policies.

Data Deletion

You can delete your account and associated data at any time from within the app: Account → Settings → Delete Account. See our Data Deletion Policy for details on what is deleted and how long it takes.

Children's Privacy

KhataSplit is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy occasionally. Continued use of the app after changes means you accept the updated policy.