Overview
CoSplit is a receipt-splitting application. This policy explains what data we collect, how we use it, and your choices regarding that data.
Information We Collect
Account information
When you sign in with Google, we receive and store your name, email address, and profile picture. We use Google OAuth with the openid email profile scopes.
Receipt data
You provide receipt images and financial details including store names, addresses, dates, item names, prices, tax amounts, and totals. You also provide participant names and optionally their email addresses for bill splitting.
Receipt images
Uploaded receipt images (JPEG, PNG, or WebP, up to 5 MB) are stored in Cloudflare R2 object storage. Unattached uploads are automatically deleted after 1 hour.
Automatically collected data
- IP address — used by Cloudflare for rate limiting and security. Not stored long-term by CoSplit.
- Usage analytics — we use analytics services to understand traffic, feature usage, and product performance. Analytics data may include pages viewed, referring sources, device and browser information, approximate location derived from network information, interaction events, and error categories.
Cookies
__Host-cosplit_session — an HTTP-only, secure cookie used to keep you signed in across the app and support server-rendered authenticated pages. Expires after 30 days.- Analytics cookies and storage — used by our analytics providers to distinguish visitors and sessions, measure traffic, and understand product usage.
How We Use Your Data
- Authentication — your Google account information is used solely to identify you within the app.
- Receipt processing — receipt images are sent to Google Gemini AI for optical character recognition (OCR) to extract item details automatically. The extracted data is stored in our database.
- Bill splitting — receipt and participant data is used to calculate how costs are divided among participants.
- Participant linking — if a participant's email matches a CoSplit account, they may be automatically linked so they can view receipts shared with them.
- Product analytics — usage events help us understand whether key flows such as sign-in, receipt creation, OCR recovery, sharing, and public receipt views are working well.
Public Receipt Sharing
You can choose to make a receipt publicly accessible via a shareable link. When a receipt is public, anyone with the link can view the store name, items, prices, participant names, and split amounts. A social preview image (Open Graph) is generated containing the store name, total amount, and participant count.
Receipts are private by default. You can revoke public access at any time.
Third-Party Services
We use the following third-party services:
Data Retention
- Account data and receipts are retained until you delete your account.
- Deleting your account permanently removes all associated data including receipts, items, allocations, participants you created, attachments, and your profile picture.
- Pending (unattached) receipt uploads are automatically deleted after 1 hour.
- Revoked authentication tokens are cleaned up within 7 days.
- Cloudflare retains server logs (including IP addresses) for 7–30 days per their standard policy.
Data Security
We protect your data with HTTPS encryption in transit, HTTP-only secure cookies, SHA-256 hashes for stored session and refresh tokens, rate limiting on all endpoints, and strict same-site cookie policies. Web session cookies expire after 30 days.
Your Rights
You can:
- Access all your data through the app at any time.
- Delete your account and all associated data by contacting us.
- Revoke public access to any receipt at any time.
- Revoke CoSplit's access to your Google account through your Google Account settings.
Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated through the app. Continued use of CoSplit after changes constitutes acceptance of the updated policy.
Contact
For privacy-related questions or data deletion requests, contact us at support@cosplit.net.