Privacy Policy

Account Information

When you register or sign in we collect:

• Email address and/or phone number
• Name and profile photo (if provided via Google or Apple Sign-In)
• A unique user ID assigned by our systems

Sign-in methods include Google Sign-In, Apple Sign-In, and direct email/phone via Firebase Authentication.

Usage & Analytics (Firebase Analytics)

We use Firebase Analytics to understand how users interact with the app. This includes:

• Screens visited and events triggered within the app
• Your assigned user ID and custom user properties (e.g., team, score tier)
• Session duration and engagement metrics

On iOS, the advertising identifier and ad-personalisation signals are only collected if you grant permission through Apple's App Tracking Transparency (ATT) prompt. Core analytics are always collected in production builds to operate and improve the app.

Install Attribution & Advertising Measurement (AppsFlyer, TikTok, Meta)

We use AppsFlyer, a mobile measurement partner, to understand which advertisement, invite link or other source led you to install Split, and to measure whether our advertising works. For this, AppsFlyer receives:

• Device information: model, operating system version, language, time zone, IP address and a vendor or installation identifier
• The advertising identifier (IDFA on iOS, GAID on Android) only where you allow it: on iOS through the ATT prompt, on Android unless you have deleted the advertising ID in your Google settings
• The install event, app opens, and the same in-app events we send to Firebase Analytics (for example completing onboarding, checking in, sharing, or copying an invite link), together with your assigned user ID
• If you installed Split after tapping an invite link, the click that led to the install, so that the referral code can be applied to your account

AppsFlyer matches this information against clicks reported by the advertising networks we use, currently TikTok and Meta (Facebook and Instagram), and reports aggregated campaign results back to them. On iOS this also uses Apple's SKAdNetwork, which reports installs to the advertising network without identifying you. Attribution takes place whether or not you allow tracking; the ATT prompt controls only whether the advertising identifier is used. We do not sell this data, and we do not use it to show you advertisements inside Split.

The TikTok and Meta software development kits included in the app also report a small set of standard events (such as sign-in and onboarding completed) to those networks to measure the campaigns we run on them, subject to the same ATT permission on iOS. You can opt your device out of AppsFlyer measurement at appsflyer.com/optout.

Crash & Error Reports (Firebase Crashlytics)

We use Firebase Crashlytics to automatically capture crash reports. Reports may include:

• Device model, OS version, and app version
• Stack traces and error messages
• Your user ID and custom diagnostic attributes set at the time of the crash

This data is used solely to diagnose and fix bugs.

Performance Monitoring (Firebase Performance)

Firebase Performance Monitoring collects anonymised metrics such as app startup time, network request latency, and screen rendering performance to help us optimise the app.

Push Notifications (Firebase Cloud Messaging)

If you grant notification permissions, we store your FCM device token to send you push notifications (e.g., game events, score updates, announcements). You can disable notifications at any time in your device settings or within the app.

Device Information

We collect a unique device identifier and may check whether GPS/location services are enabled on your device (we do not collect your precise GPS coordinates). This information helps with fraud prevention and account security.

Security Monitoring (Talsec / freeRASP)

We use freeRASP by Talsec to protect the app against bots, rooted/jailbroken devices, and tampered builds. freeRASP sends anonymised threat signals to Talsec's security dashboard at security@splitapp.com. No personally identifiable information is included in these signals. See Talsec's Privacy Policy for details.

User-Generated Content

Content you submit—such as usernames, avatars, captions, and referral activity—is stored on our servers (Firebase Realtime Database and Firebase Storage) to operate the service.