Data

Privacy

SplitBill is designed so meter logs and balances live on your phone by default. Network calls only happen for features you enable. There is no SplitBill account.

Stored on your device

  • Room name, member names, and your selected member
  • Meter readings, recharge amounts, usage history, and computed balances
  • Room ID (Support ID) used for sync and crash-report correlation
  • Theme preferences and sync/update settings
  • Optional local JSON backups (optionally password-encrypted)
  • Backup password sealed in Android Keystore when set

Uninstalling removes local data unless you kept an export file.

Optional cloud sync

When enabled, SplitBill uploads gzip-compressed JSON room data keyed by your Room ID to a cloud backup proxy (MongoDB backend). Payloads are not encrypted before upload — only compressed. Off by default until you turn on cloud sync in Settings.

Anyone with your Room ID could theoretically fetch the same payload from the sync service. Treat the Room ID like a shared secret for your meter room.

Other network use

  • GitHub API — optional update checks on GitHub builds
  • APK download — opens GitHub Releases in your browser when you update

No ads. No analytics SDK beyond optional crash reporting on GitHub builds.

Crash reports (optional)

GitHub flavor builds can send anonymous crash reports to Sentry when you opt in. Reports include stack traces and your Room ID as user context — not member balances or meter readings by design. Crash reporting is optional and off by default.

Permissions

  • Internet — cloud sync and update checks
  • Notifications — sync alerts when new room logs arrive
  • Boot completed — reschedule background sync after reboot

Local backup encryption: Encryption · FAQ