Privacy Policy for Kloopy Ltd (TripSplit)

Last Updated: September 2026

At Kloopy Ltd, we believe your data should remain exactly that: yours. We built our product, TripSplit, with privacy at its core. This policy explains what information we collect, how we use it, who else sees it, and how long we keep it, under the UK GDPR and the UK Data Protection Act 2018.

We've written it in plain English and we've tried to be specific rather than reassuring. Where something leaves our servers, we name who receives it and why.

1. Who We Are (The Data Controller)

Kloopy Ltd is the "Data Controller" for the information processed through TripSplit.

• Company Name: Kloopy Ltd
• UK Company Number: 17257918
• Contact Email: [email protected]

2. The Data We Collect

We follow a strict policy of data minimisation. We do not collect your phone number, your postal address, or your location. We never see your card details.

Things you give us:

• Account information: Your name and email address, and a securely hashed version of your password. If you sign in with Google or Apple, we receive your name and email address from them instead.
• Trip and expense data: Trip names and descriptions, the names of the people you're splitting with, amounts, currencies, categories, dates and any notes you type. This is what lets TripSplit work out who owes what.
• Receipt and cover photos: Photos you attach to an expense, photos you choose to scan, and trip cover images. When you scan a receipt we also store the text read from it, which typically includes the merchant, the address printed on the receipt, the date and the individual items.
• Support messages: If you email us, we keep your message and your email address so we can resolve your question.

Things collected automatically:

• Device and app information: Your device model, operating system version, app version, language and timezone.
• Notification details: If you turn on notifications, a push token for the device, plus the device's model and operating system version so you can tell your devices apart, e.g. "iPhone 15 Pro (iOS 26.0)". We deliberately do not collect the name you have given your device, because those often contain a person's name.
• Security records: The IP address and browser/app identifier recorded alongside your consent when you agree to this policy or to receipt scanning, and the IP address of failed sign-in attempts, to stop people brute-forcing accounts.
• App update checks: An identifier generated when you install the app, sent to our app-update provider each time the app starts so it knows whether there's a newer version.

We never see your payment details. Purchases are handled entirely by Apple or Google. All we receive back is a transaction reference so we can confirm the purchase was genuine.

A copy lives on your device too. So the app works offline, TripSplit keeps a local copy of your trips, your group members (including their email addresses) and your recent activity on your phone. Deleting the app removes it.

3. Why We Use It, and Our Lawful Basis

Under the UK GDPR we must have a lawful reason for everything we do with your data.

4. Who We Share It With

We do not sell your data. We don't sell, rent or trade your personal information, and we don't use it for advertising. We have no advertising SDKs, we don't use advertising identifiers, and we don't track you across other companies' apps or websites.

We do rely on a small number of suppliers to run TripSplit. Each one is contractually bound to protect your data and forbidden from using it for their own purposes.

5. Receipt Scanning and OpenAI

Receipt scanning is optional, and it's the one part of TripSplit that sends your content to a third party. We ask before the first photo is taken, and nothing is sent until you tap Continue.

What we send. When you scan a receipt we send the photo to OpenAI, L.L.C. to read the text on it, so the merchant, date, total, currency and line items can be picked out.

What we don't send. We do not send your name, your email address, your TripSplit account ID, your trip details, the other people on your trip, your device identifiers, or any location data.

Your data is not used to train AI models. OpenAI does not use data submitted through its API to train or improve its models.

How long they keep it. OpenAI receives the image and text for the duration of the request. Inputs and outputs may be held for up to 30 days for abuse monitoring and are then deleted, unless the law requires them to keep it longer. We keep the receipt image and the details read from it as part of your expense record.

Leaving the UK. OpenAI processes data in the United States. That transfer is made under the safeguards in OpenAI's data processing agreement, which incorporates the European Commission's Standard Contractual Clauses and the UK Addendum.

You can skip it entirely. If you never give permission, you can still enter every expense by hand and use every other TripSplit feature, including attaching a photo of a receipt to an expense for your own records. A photo attached that way is stored only on our servers and is never sent to OpenAI. Only the "Scan a receipt" flow involves OpenAI. We record the date and time you gave permission and which version of this notice you were shown, and you can ask us to withdraw it at any time.

6. Analytics

We use PostHog, hosted in the European Union, to understand how the app is used so we can fix what's broken and improve what isn't.

What PostHog receives: an identifier generated when you install the app, which becomes your TripSplit user ID once you sign in; event names such as "expense created" or "receipt processing completed"; the type of screen you're on, as a pattern like /trips/:id/expenses/new rather than the actual address; and your device model, operating system, app version, language and timezone. Your IP address reaches PostHog as part of making the request; we have their location lookup switched off, so no location is derived from it.

What PostHog does not receive: your name, your email address, your trip names, your expense descriptions, or any amounts.

There's no screen recording, no session replay, and no crash-report capture. Analytics start when you first open the app rather than waiting for you to agree, on the basis of our legitimate interest in a working product.

7. Notifications

If you turn notifications on, the message itself has to travel through Apple's or Google's push service to reach your phone. That's how push notifications work on every app.

This means the content of a notification passes through them, and it can include another group member's name, an expense description and an amount — for example "Alex added 'Dinner' (£25.00)". Notifications appear on your lock screen, so anyone looking at your phone can see them. Apple and Google may hold undelivered messages for a short period while your phone is offline.

You can turn notifications off at any time in TripSplit's settings or in your phone's settings, and nothing further is sent.

8. Where Your Data Lives

Everything we store ourselves — your account, trips, expenses, receipt images and their text — is hosted in the United Kingdom.

The exceptions are the suppliers named in section 4. Where those transfers leave the UK, they're covered by Standard Contractual Clauses and the UK Addendum, or by the provider's own adequacy arrangements.

9. How Long We Keep It

• Your account and trip data: for as long as your account is open.
• Receipt images and their text: as part of the expense record, for as long as the trip exists.
• Notification records: deleted after 7 days.
• Consent records: kept for as long as we need to show that permission was given.
• Support emails: kept while we resolve your question, and afterwards for record-keeping purposes.

10. Deleting Your Account

You can delete your account from inside the app, or by emailing us. Full instructions are on our account deletion page.

• A 14-day grace period. Once you request deletion we start a 14-day cooling-off period. Logging back in during those 14 days cancels the deletion — so if you've changed your mind, just sign in; and if you haven't, don't.
• What we erase. Your name, email address, password, any linked Google or Apple sign-in, every logged-in session and every notification registration are permanently removed. Notifications stop as soon as you request deletion.
• What stays, and why. We keep an empty placeholder record so the maths still works for the people you travelled with. Your past expenses, splits and settlements remain in their trips, shown as "Deleted User" and no longer linked to you by name or email. The receipts and photos attached to those shared expenses stay with them too. We keep this on the basis of our legitimate interest, and the group members' legitimate interest, in not corrupting shared financial records that other people still rely on.

11. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate — you can edit most of it yourself in the app
• Erase your data (see section 10)
• Receive a copy of your data in a portable format
• Object to or restrict how we use it, including our legitimate-interest processing
• Withdraw consent for receipt scanning at any time, without affecting anything else

To exercise any of these, email [email protected].

12. Children

TripSplit isn't designed for children and isn't intended for anyone under 13. We don't knowingly collect data from children. If you believe a child has created an account, email us and we'll remove it.

13. Changes to This Policy

If we change how we handle your data we'll update this page and the date at the top. For anything significant we'll tell you in the app or by email, and where the change needs your consent we'll ask for it again rather than assume it.

14. Questions

Email [email protected] and a person will read it. See also our App Terms · Account deletion