Privacy Policy for CashOut (Split-Money)

Last updated: April 23, 2026

This Privacy Policy describes the policies and procedures of Sahit Mamidipaka ("We", "Us", or "Our"), an individual developer based in Georgia, United States, on the collection, use, and disclosure of Your information when You use the CashOut mobile application (also marketed on the App Store as "Split-Money") and the associated website at https://cashout-delta.vercel.app (collectively, the "Service"), and tells You about Your privacy rights and how the law protects You.

By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined below.

Definitions

  • Account means a unique account created for You to access the Service.
  • Application or CashOut refers to the Split-Money mobile application (iOS and Android).
  • Developer (referred to as "We", "Us", or "Our") refers to Sahit Mamidipaka, an individual developer based in Georgia, United States.
  • Device means any device that can access the Service, such as a phone, tablet, or computer.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Application and the associated website.
  • Service Provider means any third party that processes data on behalf of the Developer.
  • Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure.
  • You means the individual accessing or using the Service.

Information We Collect

Personal Data You Provide

When You create an account or use the Service, We collect:

  • Email address — used for authentication and account identification.
  • First and last name — used for Your profile and to display You to other group members.
  • Phone number (optional) — used only if You choose to provide it for account contact purposes.
  • Profile photo (optional) — uploaded by You from Your photo library.

User-Generated Content

When You use the Service, We store content You create, including:

  • Group names and group images You create or upload.
  • Expense information You enter, including expense names, amounts, optional notes, categories, and how the expense is split between group members.
  • Activity records reflecting actions You take within the Service (creating expenses, settling up, etc.).

This content is visible only to other members of the same group.

Photo Library Access

With Your permission, the Application accesses photos You select from Your Device's photo library so You can set a profile picture or a group image. We do NOT access Your camera, and We do NOT browse or scan Your photo library — We only receive the specific image You pick.

Push Notification Tokens

If You grant permission to receive push notifications, We collect a push notification token associated with Your Device. This token is used to deliver notifications about activity in Your groups.

Usage Data

We automatically collect limited technical information, which may include Your Device's IP address, device type, operating system, crash logs, and diagnostic data.

How We Use Your Personal Data

We use Personal Data to:

  • Provide, maintain, and improve the Service.
  • Manage Your Account and authenticate You.
  • Enable core features (tracking shared expenses, calculating balances, sending notifications).
  • Communicate with You about the Service (security updates, transactional notifications).
  • Respond to Your support requests.
  • Comply with legal obligations and defend legal claims.

We do NOT:

  • Sell Your Personal Data to any third party.
  • Share Your Personal Data with advertisers.
  • Use third-party analytics or tracking SDKs.
  • Track You across other apps or websites.
  • Send You marketing, promotional emails, or offers for unrelated products.

Third-Party Service Providers

We share Personal Data with the following Service Providers strictly to operate the Service:

  • Supabase Inc. (United States) — Backend database, authentication, file storage. Receives all account data, user-generated content, and profile information.
  • Google LLC — "Sign in with Google" identity verification (only if You choose this sign-in method). Receives email, name, and Google account ID.
  • Apple Inc. — "Sign in with Apple" identity verification (only if You choose this sign-in method). Receives email (which may be Apple's private relay address) and name.
  • Expo (650 Industries, Inc.) — Push notification token delivery. Receives only the push notification token.

Each of these providers maintains its own privacy policy governing its handling of Your data.

Data Retention

We retain Your Personal Data for as long as Your Account is active. If You delete Your Account, We delete Your Personal Data promptly, except:

  • Data We are legally required to retain.
  • Residual copies that may remain in encrypted backups for up to 30 days before being overwritten.
  • Anonymized or aggregated data that cannot identify You.

Usage Data and diagnostic logs are retained for up to 24 months for security, troubleshooting, and fraud prevention.

Deleting Your Account and Data

You can delete Your Account and associated Personal Data directly within the Application:

  1. Open the Application and navigate to Profile → Settings → Delete Account.
  2. Confirm the deletion.
  3. Your Account, profile, and personal data will be permanently deleted from Our systems, subject to the retention exceptions above.

You may also request deletion by emailing splitmoney.mobile@gmail.com. We will respond within 30 days.

International Data Transfers

Your Personal Data is processed and stored in the United States. If You are located outside the United States, please be aware that Your information will be transferred to, and processed in, the United States. We take reasonable steps to ensure appropriate safeguards are in place for international transfers.

Security

We use commercially reasonable security measures to protect Your Personal Data, including:

  • HTTPS/TLS encryption for all data in transit.
  • Encryption at rest via Supabase's managed infrastructure.
  • Secure credential storage via platform-provided secure storage (iOS Keychain / Android Keystore).

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Your Rights

California Residents (CCPA / CPRA)

If You are a California resident, You have the following rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

  • Right to Know — request disclosure of the categories and specific pieces of Personal Information We have collected about You.
  • Right to Delete — request deletion of Personal Information We have collected.
  • Right to Correct — request correction of inaccurate Personal Information.
  • Right to Opt-Out of Sale or Sharing — We do not sell or share (as defined by the CCPA/CPRA) Personal Information for cross-context behavioral advertising. You have nothing to opt out of.
  • Right to Limit Use of Sensitive Personal Information — We do not use or disclose sensitive Personal Information for purposes other than providing the Service.
  • Right to Non-Discrimination — We will not discriminate against You for exercising any of these rights.

To exercise these rights, email splitmoney.mobile@gmail.com. We will verify Your identity (typically by confirming ownership of Your account email) and respond within 45 days.

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If You are located in the EEA, UK, or Switzerland, You have the following rights under the General Data Protection Regulation:

  • Right of Access to Your Personal Data.
  • Right to Rectification of inaccurate data.
  • Right to Erasure ("right to be forgotten").
  • Right to Restrict Processing.
  • Right to Data Portability.
  • Right to Object to processing based on legitimate interests.
  • Right to Withdraw Consent at any time (where processing is based on consent).
  • Right to Lodge a Complaint with Your local data protection authority.

Our legal bases for processing Your Personal Data under the GDPR are:

  • Contract — to provide the Service You have requested.
  • Consent — for optional features such as push notifications.
  • Legitimate interests — for security, fraud prevention, and Service improvement.

To exercise any of these rights, email splitmoney.mobile@gmail.com.

"Do Not Track" Signals (CalOPPA)

We do not track You across third-party websites or online services. The Service does not respond differently based on "Do Not Track" browser signals, because We do not engage in the type of tracking such signals are designed to prevent.

Children's Privacy

The Service is not directed to children under the age of 16, and We do not knowingly collect Personal Data from anyone under 16. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us at splitmoney.mobile@gmail.com and We will delete the information.

Links to Other Websites

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage You to read their privacy policies.

Governing Law

This Privacy Policy is governed by the laws of the State of Georgia, United States, without regard to its conflict of law principles. Your statutory rights under applicable data protection laws in Your jurisdiction (including, where applicable, the CCPA/CPRA and GDPR) are not affected by this choice of law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, We may also notify You by email or via an in-app notice.

Contact

If You have any questions about this Privacy Policy or wish to exercise any of the rights described above, contact:

Sahit Mamidipaka
Email: splitmoney.mobile@gmail.com