Privacy at xplit
What xplit keeps, where, and why. Written to be read, not scrolled past.
The short version
Everything you enter in xplit, the trips and the costs you split, stays in your browser until you sign in. When you sign in, a copy is kept on our servers so that it can reach your other devices and the people you share a trip with. We do not sell data, we do not show ads, and we never ask for payment details, because xplit does not handle money.
What xplit stores
- Your trips and activities: their names, dates and settings.
- Transactions: amounts, what they were for, who paid, and the date if you entered one.
- The names of the people on your trips, and, for friends you keep, the email address you typed in for them.
- Groups, which participant is you on a shared trip, and any themes you made.
- When you sign in with Google or Apple, we receive an identity token from that provider and keep the account identifier, name and email address it carries, so that we can recognise you next time. We do not receive your password.
Where it lives
In your browser, always: the app keeps a full copy of your data in the browser's own storage, and that is what every screen reads. When you are signed in, the app also sends changes to our servers and fetches changes made elsewhere, so that your devices agree. The servers run on Cloudflare's infrastructure.
A trip you share is visible to the people who join it, with the access you chose for them. They see the trip's activities, transactions and participants, including the names you entered. They do not see your other trips.
What we do not do
- We do not sell or rent your data, and we do not use it for advertising.
- We do not run third-party trackers inside the app. The only scripts loaded from elsewhere are Google's and Apple's sign-in libraries, on the sign-in page, and only when those sign-in options are offered.
- We do not ask for card numbers or bank details. Settling up happens outside xplit.
This website
The site you are reading keeps one thing of its own in your browser: whether you chose light, dark or automatic appearance. It also uses Google Analytics to count visits and see which pages are read, which sets Google's analytics cookies. We see totals, not people, and you can keep it from running with a browser extension or by blocking cookies for this site. The app at app.xplit.ai does not use it.
Removing your data
Signing out removes the copy in that browser and leaves the account as it was. To have an account and everything in it deleted, get in touch and we will do it. Trips you shared with others stay with them if they still need them.
Changes to this page
When this page changes, the date in the site's sitemap changes with it. We keep the wording plain on purpose.