Privacy Policy
Overview
RoundSplit is a bill-splitting app that helps you divide restaurant receipts among friends. We are committed to protecting your privacy. This policy explains what data the app handles and how it is used.
Data We Collect
Information You Provide
- Participant names — First names entered during the bill-splitting flow to identify who owes what. Stored locally on your device only.
- Receipt images — Photos captured via the camera or selected from your photo library. Used to extract receipt details.
- Receipt data — Restaurant name, item names, quantities, prices, tax, and totals — either extracted from images or entered manually.
Automatically Generated Data
- Anonymous device identifier — A randomly generated ID (UUID) stored securely in your device's Keychain. This ID is not linked to your Apple ID, name, or any personal information. It is sent to our backend server solely to enforce daily scan limits and prevent abuse.
Information We Do NOT Collect
How We Use Your Data
All data is used solely to provide the bill-splitting functionality:
- Receipt scanning — Receipt images are sent to our backend server, which uses Google's Gemini Vision API for text extraction (OCR). The image and your anonymous device ID are sent — no names or other personal data accompanies the request.
- Bill calculation — Names and item data are used locally to calculate each participant's share.
- Bill history — If you save a bill, the receipt data and image are stored on your device for future reference.
Data Storage
- All data is stored locally on your device using Apple's SwiftData framework.
- Data is protected by iOS Data Protection (encrypted at rest).
- No data is uploaded to our servers — we do not operate any servers or cloud services.
- No iCloud sync or cloud backup of app data is performed.
Third-Party Services
RoundSplit Backend Server
When you scan a receipt, the image is sent to our backend server. The server processes the image using Google's Gemini Vision API and returns structured receipt data.
- Data sent — The receipt image (as a compressed JPEG) and your anonymous device ID (for rate limiting).
- Data NOT sent — Your name, Apple ID, location, or any other personal data.
- Purpose — To extract restaurant name, item names, and prices from the receipt image.
- Data retention on server — Images are processed in memory and are not stored on our server. The anonymous device ID is used only to enforce daily scan limits.
- Encryption — All communication uses HTTPS/TLS encryption.
Google Gemini Vision API
Our backend server forwards receipt images to Google's Gemini Vision API for text extraction. No personal data is included in these requests.
- Google's privacy practices — Please refer to Google's Privacy Policy for how they handle data received through their APIs.
No Other Third Parties
The app does not integrate any analytics or tracking services, advertising networks, crash reporting tools, social media SDKs, or data brokers.
Device Permissions
The app requests the following permissions, both solely for capturing receipt images:
| Permission | Purpose |
|---|---|
| Camera | To photograph restaurant receipts |
| Photo Library | To select a receipt photo from your library |
You can revoke these permissions at any time in iOS Settings. The app will continue to function for manual entry without these permissions.
Data Sharing
- We do not sell, rent, or share your personal data with any third party.
- Receipt images are sent to our backend server (and forwarded to Google Gemini) solely for text extraction as described above.
- The app includes a Share Sheet feature that lets you choose to share a bill summary image via Messages, Mail, or other apps. This sharing is entirely user-initiated.
Data Retention and Deletion
- Saved bills remain on your device until you delete them.
- You can delete individual saved bills at any time by swiping to delete in the bill history.
- Uninstalling the app removes all stored data from your device.
- You can also clear all app data through iOS Settings › General › iPhone Storage › RoundSplit › Delete App.
Children's Privacy
The app does not knowingly collect data from children under 13. The app does not require an account and does not collect personal identifiers.
Tracking
This app does not track you. We do not link your data with third-party data for advertising, share data with data brokers, use advertising identifiers, or perform cross-app or cross-site tracking.
Security
- On-device data is encrypted at rest via iOS Data Protection.
- Network communication with our backend server uses HTTPS/TLS encryption.
- The anonymous device ID is stored securely in the iOS Keychain, encrypted and protected by the operating system.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected in the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact
If you have questions or concerns about this privacy policy, please contact us at:
App Store Privacy Label Summary
Data Used to Track You
None
Data Linked to You
None
Data Not Linked to You
- User Content (Photos) — Receipt images sent to our server for text extraction via Google Gemini
- Identifiers (Device ID) — Anonymous UUID used solely for rate limiting