Privacy Policy

Last updated: 7 November 2026

This policy explains what BudSplit stores about you, why, and who can see it. BudSplit is run by Dhanesh S R. Contact: dhaneshsr@gmail.com.

What we store

• Your account: your name, email address, a securely hashed form of your password (never the password itself), your profile photo if you add one, and your email settings.
• Your groups: group names and photos, members, invitations (the invited email address and an optional name), expenses, payments and notes, and a history of changes to them.
• Security data: for each login, its IP address, browser details and times, so you stay logged in and we can spot misuse. Failed logins are recorded by email address and IP address to slow down password guessing.
• Emails we send: verification, password reset, invitation and notification emails.
• Trip plans: when you use Plan a trip, we record that you asked (when, in which group, whether it worked and how long it took) to apply the daily limit. The plan and the trip details you typed are kept for 24 hours, visible only to you, so you can save it; unsaved plans are then deleted. A plan you save to a group is seen by everyone in that group until you or the group owner delete it.

Why we use it

Only to run BudSplit: to keep your account secure, show your groups and balances, send the emails you've asked for, and answer you when you contact us. We don't sell your data, show ads or use tracking or analytics services.

Who can see it

• Members of your groups see your name, your photo and everything in the groups you share. Your photo is shown only to people who share a group with you.
• Group owners also see members' email addresses. Other members don't.
• Our hosting and email providers store and deliver the data for us.
• Google (Gemini), only when you use Plan a trip: it receives the trip details you type into that form (destination, dates, number of travellers, budget, pace, interests, starting point and notes) and the group's currency. Never names, email addresses, the group's name or its expenses. We use Gemini's free tier, under which Google may use what we send to improve its products, so please don't put personal details in the notes.
• Authorities, only when the law requires it.

Cookies and storage on your device

• bs_session keeps you logged in. It expires after 14 days without use, and after 30 days at most.
• bs_csrf protects forms from being sent by other websites when you're logged out.
• If you choose “No thanks” on the install banner, your browser remembers it. The app may also keep its own files (styles, scripts and icons) on your device so it loads faster. Your expenses are never stored there.

How long we keep it

We keep your account and group data while your account exists, because balances depend on the full history. Login records are kept until they expire. Failed-login records are cleared regularly. Trip planner request records are kept while your account exists. Unsaved trip plans are deleted after 24 hours; saved ones stay with the group until deleted.

Your choices and rights

• Change your photo, email settings and password under Account.
• Download a group's expenses as a CSV file from its Trip summary.
• Ask us for a copy of your data, to correct it, or to delete your account by emailing dhaneshsr@gmail.com from the address you signed up with. When we delete an account, we remove your login, email address and photo. Your name may stay on expenses and payments you shared with others, so the group's balances stay correct.

Security

Passwords are hashed, login links and tokens expire, and only the people in a group can see it. No system is perfectly secure, so use a password you don't use anywhere else.

Children

BudSplit isn't meant for children under 13.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll let you know in the app or by email.