— Privacy Policy
How we look after your data
Last updated: 29 June 2026
Splithaus helps households keep track of shared bills and work out who owes who. This policy explains what personal data we process, why, and what rights you have. See also our data rights (GDPR) page.
Who is responsible
Splithaus is operated by Splithaus, CVR no. 40938184. For any question about your data, email privacy@splithaus.dk.
What we collect
- Account: name, email address, password (stored hashed), phone number (optional) and language preference.
- What you enter: your home's name and address, apartment/member names, bills (amounts, dates, categories, descriptions, who paid), settlements (amounts, notes and an optional payment-proof screenshot), and documents and receipts you upload (e.g. insurance papers, contracts, receipts).
- Payment: for a Pro subscription, card details are handled by Stripe. We never store your card numbers — only your subscription status.
- Technical: limited server logs (e.g. time, path, response status). We do not log IP addresses.
- Communications: the emails we send you (password reset, email verification, invites).
Why — and on what legal basis
- Provide the service (create your account, store your records, compute balances) — performance of our contract with you (GDPR Art. 6(1)(b)).
- Security & reliability (prevent abuse, keep the service running, debugging) — our legitimate interest (Art. 6(1)(f)).
- Send necessary emails — contract / legitimate interest.
- Process payment for Pro — performance of the contract.
- Meet legal obligations (e.g. accounting) — legal obligation (Art. 6(1)(c)).
Processors we use
We only share data with providers that process it on our behalf:
- Resend — sending email (EU, Ireland).
- Railway — hosting, database and file storage (EU).
- Stripe — payments and subscriptions (EU/US).
- Axiom — operational logging (US).
- Cloudflare — DNS and serving this website (global).
Where your data is stored
Your account, your household's data, your uploaded files and our email are processed within the EU/EEA (Railway, EU region; Resend, Ireland). A few operational services may process limited technical data outside the EEA — Axiom (logging), Cloudflare (delivering this website) and Stripe (payments, where used) — under appropriate safeguards such as the EU Standard Contractual Clauses (SCCs). [Confirm each provider's transfer basis.]
How long we keep it
We keep your data for as long as you have an account. Reset/verification tokens are short-lived (1–24 hours). If you ask us to delete your account, we remove your personal data within a reasonable time, subject to backups and any legally required retention.
Security
Passwords are stored hashed (bcrypt), all traffic is encrypted (HTTPS), and access to data is restricted. No service is 100% secure, but we work to protect your information.
Acceptable use & account termination
Splithaus is meant for ordinary household bookkeeping. We reserve the right to suspend or terminate an account, and to remove content, if the service is abused or used unlawfully — for example uploading illegal or infringing files, storing content unrelated to a shared household, abusing the document or receipt upload (such as bulk-uploading large numbers of files), or attempting to disrupt or overload the service. Where we can, we'll warn you first; serious or unlawful abuse may lead to immediate termination. On termination for abuse, your data may be deleted in line with the retention section above.
Cookies & local storage
The app stores your session and preferences in your browser's local storage so you stay signed in. This marketing site uses only a functional cookie to remember your language choice. We use no advertising or tracking cookies and no third-party analytics.
Children
Splithaus is not directed at children, and we do not knowingly collect data about children.
Changes
We may update this policy. We'll note material changes in the app or on this page and update the date above.
Contact & complaints
Email privacy@splithaus.dk. You can also complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.