Privacy, plainly.

Trial data information · Updated 27 September 2026

What CanSplit saves

Tables include restaurant and item details, diner names and avatars, chosen shares, bill charges and payment reports or host confirmations. An account also stores your email with our sign-in provider and any profile preferences you save, including an optional PayNow QR. Saved dining groups store the group name and the names you enter within your private account profile; they are not a contacts upload or a list of joined diners. Groups remain until you remove them or delete your account.

Who can see your table

People with the table link can see joining information. Joined diners can see table information needed to split and settle, including names, shares and the host’s payment QR. Treat table and guest-return links as private. CanSplit records payment reports and host confirmations; it does not access your bank account or verify transfers.

Invitations and reminders

Group invitations and payment reminders are editable messages you choose to share or copy. Nothing is sent automatically. Your chosen messaging service receives the text and table link you send; check the recipient before sharing. A reminder does not verify or initiate a bank transfer.

Receipt photos

When you choose automatic receipt reading and confirm, your photo is sent through our server to OpenAI. CanSplit does not save the original receipt photo in its bill database; the extracted bill details are saved. The recognition request asks OpenAI not to store the response, but this is not a promise of zero provider retention. See OpenAI’s API data information. You can enter a bill manually instead.

Travel bills

The host can enter a total card charge in another currency. The receipt total, entered settlement total and time are saved with the bill and visible to its diners. CanSplit does not access bank statements or retrieve exchange rates. Trip names are private labels on your saved bills, visible only through your account. They follow the same retention, bin and account-deletion rules as those bills.

Scan usage

We record scan time, outcome, correction-retry links, model and token counts to show allowances and measure operating costs. These records contain no receipt photo or extracted text and are removed after 90 days by scheduled cleanup. Account scan records are removed with account deletion. Without an account, a signed browser cookie identifies your scan allowance for up to 90 days; clearing it may reset that browser allowance, while separate abuse controls still apply.

How long information stays

• Unsaved tables have 24-hour access. Expired unsaved records are removed on a later table creation or scheduled cleanup.
• Saved bills remain in the host’s account; we have not introduced a seven- or 30-day history limit. Reopening a saved bill renews table access for 24 hours.
• Closing a table ends guest access and records any cleared balance as waived. It does not delete the saved bill. Archiving also keeps it.
• Bills in the bin can be restored for 30 days, then are removed by scheduled cleanup.
• Support reports and any supplied reply email are removed from the support database after 90 days by scheduled cleanup.

Scheduled deletion depends on cleanup completing successfully. These periods describe the application database; infrastructure logs and provider backups can have separate retention periods.

Services and device storage

CanSplit uses Vercel for hosting, Supabase for database and sign-in, Resend for sign-in email delivery, and OpenAI when you request receipt reading. Your browser stores sign-in and table-session information to keep access working. Abuse protection uses temporary counters keyed by a daily hash of an IP address; hosting providers may also process connection logs.

Your choices and requests

Guests do not need an account. Account holders can edit preferences, remove their saved PayNow QR, export individual bill summaries and move bills to the bin. Removing a profile QR does not remove copies already attached to existing bills.

You can permanently delete your account from My bills → Account settings → Delete my account, using a fresh email code. This removes your profile, hosted bills and support reports associated with your account email. Hosted table links stop working. Guest entries on other hosts’ bills are not linked to your account and remain with those hosts. For help identifying those entries or other privacy questions, use Help & support, choose Account or data and provide a reply email. Ownership may need verification. Sending a request is not confirmation that deletion is complete.