Privacy Policy

NestSplit (“we”, “us”, or “our”) is an expense-tracking web application available at https://nestsplit.app. NestSplit helps people track shared living bills, trip spends, personal expenses, and udhaar (money lent), and settle balances using UPI deep links.

Privacy questions or data requests: email praveensingh.us@gmail.com.

This policy applies to the NestSplit website and authenticated app features. It covers information processed when you visit the site, sign in with Google, and use rooms, expenses, balances, notifications, and related features.

Account information from Google Sign-In. When you choose “Continue with Google”, we receive basic profile information from Google that you authorize, typically including your name, email address, and profile picture. We use Google OAuth through Supabase Auth; we do not receive or store your Google password.

Profile information you provide. You may optionally save a UPI ID (VPA) and mobile number in your profile so members can contact you and open a pay link.

Group and expense data you create. This includes group names and settings (including group type, currency, trip dates, and archive status), invite / join activity, expense details (amounts, notes, categories or split types, participants, and shares), settlement records, and optional receipt images you upload. If you tap Scan receipt or Import PDF, we also send that file to Google Gemini to suggest expense fields (name, amount, date, category). You can edit or ignore those suggestions before saving.

Technical and usage data. Like most web apps, our hosting and authentication providers may process standard technical data such as IP address, device / browser type, and timestamps needed to operate security, sessions, and reliability. We may use privacy-friendly product analytics (for example Vercel Analytics) that do not sell personal information for advertising.

• Authenticate you and maintain your session
• Create and manage your profile, groups, expenses, balances, and settlements
• Show members relevant information (for example display name, avatar, and balances)
• Generate UPI pay deep links using a UPI ID you or a member chooses to share
• Send in-app notifications related to join requests and member activity
• Optionally extract expense fields from a receipt image or statement PDF when you choose Scan or Import PDF
• Operate, secure, debug, and improve the Service
• Comply with legal obligations and enforce our Terms of Service

NestSplit is not a payment processor. UPI links open your existing UPI apps; we do not collect bank passwords, UPI PINs, or complete payment credentials.

NestSplit’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google account data only to sign you in and to display your identity inside NestSplit (for example name and avatar in rooms). We do not sell Google user data. We do not use Google user data for advertising. We do not transfer Google user data to third parties except as needed to provide the Service through our infrastructure providers (currently Supabase for auth and database), or if required by law.

We share information only in these situations:

• With room members. People in the same room can see profiles and expense / balance information needed for shared tracking.
• With service providers. We use trusted processors such as Supabase (authentication, database, file storage), Vercel (hosting / analytics), and Google Gemini (optional receipt scan only, when you tap Scan) to run the app. They process data on our behalf under their own terms and security practices. We do not use receipt images for advertising.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or to protect rights, safety, and security.

We do not sell your personal information.

Account, room, and expense data are stored in our backend (Supabase). Receipt uploads are stored in private storage accessible only to authorized room members under our access rules. Optional receipt scan or PDF import sends a copy of that file to Google Gemini for that request so we can prefill expenses; we do not use that provider as long-term file storage. We use industry-standard safeguards appropriate for a web application, but no method of transmission or storage is 100% secure.

We retain information for as long as your account and related rooms need it to provide the Service, unless a longer retention period is required by law or for legitimate security / dispute needs. You may request deletion of your account data as described below.

• You can sign out at any time from the app.
• You can update optional profile fields such as UPI ID and mobile number in Settings (where available).
• You can revoke NestSplit’s access to your Google account in your Google Account permissions.
• To request access, correction, or deletion of your NestSplit personal data, email praveensingh.us@gmail.com. We will respond within a reasonable time.

NestSplit is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

NestSplit may be hosted and processed in countries other than where you live (for example via Supabase and Vercel infrastructure). By using the Service, you understand that your information may be transferred to and processed in those locations.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of NestSplit after changes means you accept the updated policy.

NestSplit — Privacy inquiries: praveensingh.us@gmail.com

Related: Terms of Service.