Privacy

Last updated 15 September 2026

Zen Split splits shared costs between people who already know each other. It is built so that there is very little about you to hold in the first place: there are no accounts, so there is no email address, no phone number and no password anywhere in it.

What it stores

A name you choose, and a profile photo if you add one. Neither has to be your real name or face.
An identifier generated on your device the first time you open the app. That is what a group membership points at.
Your groups — their names, icons, colours, cover photos, and who is in them.
Your expenses — description, amount, date, category, any note or receipt photo you attach, who paid, and each person's share.
Settlements you record between members.
A recovery code, so you can move to a new phone.
An assistant link, if you use the MCP connector.
A notification token, only if you turn notifications on.

What it does not store

No email address, phone number or password. No contacts, no location, no calendar. No analytics, no advertising identifier and no third-party trackers of any kind — the app contains no such code, so nothing is measured, profiled or sold. Nothing you enter is used to train anything.

Photos are stored at public web addresses. Profile pictures and group cover photos are served from a public URL so they appear instantly for everyone in a group. The address is long and random and is not listed anywhere, but anyone who has it can open the image without being in your group. Please do not use a photo you would mind being seen.

Who can see it

People in your groups. They see your name, your photo, and the expenses and balances you share with them. That is the point of the app.
Nobody outside them. Every read and write is checked against group membership on the server, not in the app, so a person who is not in a group cannot reach its contents.
Anyone you give your assistant link to. That link acts as you — treat it like a password. You can replace it at any time.

Services it relies on

Supabase — the database, file storage and anonymous sign-in that hold everything above.
Apple Push Notification service — only if you turn notifications on, and only to deliver them.
Vercel — serves this page and the web version of the app.

Data is stored in the United States. Nothing is sold or shared with anyone else.

Removing your data

Reset this device in the You tab clears the identity held on your phone.
Delete a group you created and its expenses go with it, for everyone.
Leave a group and you stop being a member. Expenses you were part of stay, because other people's balances depend on them.
To have everything associated with you erased, email the address below and say so. There is no form to fill in.

Children

Zen Split is not directed at children under 13 and does not knowingly collect anything from them.

Changes

If this policy changes in a way that affects what is collected or who can see it, the date at the top changes and the app will say so before the change takes effect.

Contact

support@zenfo.biz — questions, deletion requests, anything.