Privacy Policy
Last updated: June 17, 2026
Split ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect through the Split mobile app, why we collect it, and how it is used and protected. By using Split you agree to this policy.
1. Information We Collect
Account Information
When you register or sign in we collect:
- Email address and/or phone number
- Name and profile photo (if provided via Google or Apple Sign-In)
- A unique user ID assigned by our systems
Sign-in methods include Google Sign-In, Apple Sign-In, and direct email/phone via Firebase Authentication.
Usage & Analytics (Firebase Analytics)
We use Firebase Analytics to understand how users interact with the app. This includes:
- Screens visited and events triggered within the app
- Your assigned user ID and custom user properties (e.g., team, score tier)
- Session duration and engagement metrics
On iOS, ad-related data (advertising identifier, ad personalisation) is only collected if you grant permission through Apple's App Tracking Transparency (ATT) prompt. Core analytics are always collected in production builds to operate and improve the app.
Crash & Error Reports (Firebase Crashlytics)
We use Firebase Crashlytics to automatically capture crash reports. Reports may include:
- Device model, OS version, and app version
- Stack traces and error messages
- Your user ID and custom diagnostic attributes set at the time of the crash
This data is used solely to diagnose and fix bugs.
Performance Monitoring (Firebase Performance)
Firebase Performance Monitoring collects anonymised metrics such as app startup time, network request latency, and screen rendering performance to help us optimise the app.
Push Notifications (Firebase Cloud Messaging)
If you grant notification permissions, we store your FCM device token to send you push notifications (e.g., game events, score updates, announcements). You can disable notifications at any time in your device settings or within the app.
Device Information
We collect a unique device identifier and may check whether GPS/location services are enabled on your device (we do not collect your precise GPS coordinates). This information helps with fraud prevention and account security.
Security Monitoring (Talsec / freeRASP)
We use freeRASP by Talsec to protect the app against bots, rooted/jailbroken devices, and tampered builds. freeRASP sends anonymised threat signals to Talsec's security dashboard at security@splitapp.com. No personally identifiable information is included in these signals. See Talsec's Privacy Policy for details.
User-Generated Content
Content you submit—such as usernames, avatars, captions, and referral activity—is stored on our servers (Firebase Realtime Database and Firebase Storage) to operate the service.
2. How We Use Your Information
- To create and manage your account
- To operate game mechanics (teams, scoring, streaks, events)
- To send push notifications you have opted into
- To diagnose crashes and improve app stability
- To monitor app performance and user experience
- To detect and prevent fraud, cheating, and abuse
- To communicate important updates about the service
3. Third-Party Services
We rely on the following third parties, each with their own privacy practices:
| Service | Purpose | Provider |
|---|---|---|
| Firebase Authentication | User sign-in & account management | Google LLC |
| Firebase Analytics | Usage analytics & event tracking | Google LLC |
| Firebase Crashlytics | Crash reporting | Google LLC |
| Firebase Performance | App performance monitoring | Google LLC |
| Firebase Cloud Messaging | Push notifications | Google LLC |
| Firebase Realtime Database | Game data storage | Google LLC |
| Firebase Storage | Media file storage | Google LLC |
| Firebase Cloud Functions | Server-side logic | Google LLC |
| Google Sign-In | OAuth authentication | Google LLC |
| Apple Sign-In | OAuth authentication | Apple Inc. |
| freeRASP (Talsec) | Security & anti-tampering | Talsec s.r.o. |
Google's data practices are governed by the Google Privacy Policy.
4. Data Retention
We retain account data for as long as your account is active. Crashlytics and analytics data are retained according to Google Firebase's default retention schedules. You may request deletion of your account at any time via the app or by contacting us (see Section 9).
5. Account & Data Deletion
You can request deletion of your account at any time from within the app (Settings → Delete Account) or by emailing us at jonrobertcorasanti@gmail.com.
When your account is deleted:
- Your personal information is removed. Your name, email address, profile photo, and any other identifying details are erased from your account record.
- Your account is anonymised, not fully purged. To preserve the integrity of historical game records—battle results, war outcomes, and team scores that other users participated in—your user ID is retained in our database but relabelled as "Deleted User". No personal information is associated with this placeholder.
- Historical game records are kept. Battles and wars you participated in remain intact so that results for other players are not distorted. These records are linked only to the anonymised placeholder, not to you personally.
- Firebase Analytics & Crashlytics datais retained according to Google Firebase's standard retention schedules; we cannot retroactively delete events already logged to those services.
- Push notification token is deleted immediately upon account deletion.
If you are located in the EU/EEA or another jurisdiction that grants a right to erasure, you may contact us to discuss your options. We will respond within 30 days.
7. Children's Privacy
Split is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such data, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.
8. Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data (see Section 5 for how deletion works)
- Object to or restrict certain processing
- Withdraw consent (e.g., revoking ATT or notification permissions on your device)
To exercise any of these rights, contact us at jonrobertcorasanti@gmail.com.
9. Data Security
We implement reasonable technical and organisational measures to protect your data, including Firebase's built-in security infrastructure, app-level tamper detection via freeRASP, and secure HTTPS communication between the app and our servers. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Email: jonrobertcorasanti@gmail.com
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified within the app. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Split after changes take effect constitutes acceptance of the revised policy.