About This Policy
Simplaful ("we," "our," or "us") operates a suite of applications including Splitsa (splitsa.com), eTimesheet, Invoicily, and Peepaly, collectively the "Simplaful Platform" or "Services." This Privacy Policy applies to all Simplaful products. Splitsa is a Simplaful product.
1. Who We Are
Simplaful is operated by Show 4 Reel Media Pty Ltd, based in New South Wales, Australia. For privacy enquiries contact privacy@simplaful.com.
2. Information We Collect
Information you provide to us:
- Account information: your name, email address, and password (stored securely — we never store passwords in plain text).
- Google Sign-In: if you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
- Profile: you may provide a display name, photo, and contact details. This profile is stored once and may be accessible across Simplaful products you use.
- Event data: events you create or join, invitations, RSVPs, attendee lists, items people are bringing, shared responsibilities, contribution and cost-split records, accommodation and transport details, messages posted within an event, and shared event links.
- Payment information: we use Stripe to process Splitsa subscription payments. Stripe collects and stores your card details — we never see or store your card number. We store only your Stripe Customer ID and subscription status.
- Communications: if you contact us for support, we collect the content of your message.
Information collected automatically:
- Device type, browser type, and operating system
- Usage data — features accessed and actions taken
- Approximate location from your IP address
3. How We Use Your Information
- Provide and operate the Services and the events you organise or join
- Process subscription payments and manage access to paid features
- Send transactional emails — account confirmation, password resets, payment receipts, and event notifications you have opted into
- Respond to support requests
- Improve existing features and develop new ones
- Monitor for security threats and fraud
- Comply with legal obligations
We do not sell your data. We do not use your data for advertising.
4. Cross-App Data Within Simplaful
Because all Simplaful products share a common platform:
- Shared automatically: your account identity (name, email) and profile.
- Not shared by default: your event data remains within Splitsa unless you enable a cross-app feature.
5. Third-Party Services
- Supabase — database and authentication infrastructure
- Stripe — payment processing and subscription management
- Google — optional Google Sign-In (OAuth)
6. Data Retention
- Free plan: past events are archived 60 days after the event date; data older than 24 months is deleted.
- Pro plan: full event history retained while your account is active.
- Account deletion: all personal data deleted within 30 days of account deletion.
- Payment records: retained for 7 years for Australian tax compliance.
7. Your Rights
- Access, correct, or delete your personal data
- Export your data in a portable format
- Object to certain types of processing
Australian users: Simplaful handles personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). To exercise your rights or raise a concern, contact privacy@simplaful.com.
8. Cookies and Local Storage
We use essential cookies to keep you logged in and maintain your session. We use browser local storage for guest mode — if you use the app without an account, your data is stored locally on your device only. Clearing your browser data will permanently delete this information. We do not use advertising or tracking cookies.
9. Children's Privacy
Splitsa is intended for users aged 16 and over. We do not knowingly collect information from anyone under 16. If you believe a minor has provided us information, contact privacy@simplaful.com.
10. Security
All data is encrypted in transit using TLS. Passwords are hashed and never stored in plain text. Database access is controlled by Row Level Security policies. Payment data is handled entirely by Stripe.
11. Changes to This Policy
We will notify you of material changes by email and by updating the date above.
12. Contact Us
Privacy enquiries: privacy@simplaful.com
Full platform privacy policy: simplaful.com/privacy