Privacy Policy

1. Who we are

TicketSplitter is developed and operated by kukapu, an individual developer based in Spain. For GDPR purposes, kukapu is the data controller. Contact for any privacy matter: [email protected] .

2. Data we process

Ticket photos you upload

• The photo is optimized (converted to WebP and reduced in size) and stored in S3-compatible object storage (Cloudflare R2) under a random, unguessable UUID name.
• Images are served from public URLs. Anyone who obtains the link can view the image. We do not publish the links; share them only with people you trust.
• If automatic parsing fails, the image is kept in a separate error folder to diagnose and improve the parser.

AI processing of your ticket

• The image is sent to our parsing service and then to OpenRouter Inc., which routes it to Google "Gemini" models (Google LLC) to extract items, amounts and merchant data.
• Opik (Comet) receives traces of the parsing runs (status, models used, token usage; traces may include the extracted ticket content) so we can monitor quality and costs.
• We do not use AI output to make automated decisions about you (no profiling).

Parsed ticket data and dataset

• The extracted content (merchant, items, amounts) and the image reference are retained as a dataset to develop, evaluate and improve our ticket-parsing models.
• The splitting data itself (ticket, products, participant assignments) is retained without automatic expiration. Removing a ticket from your history does not delete the shared ticket.
• Dataset entries have no fixed expiry: they are kept until you request deletion.

Accounts and sessions

• You can use the service as a guest with a random anonymous ID (no personal data), or sign in with Google or Apple. For social sign-in we store your name, email and provider user ID.
• Mobile sessions use a short-lived access token and a refresh token valid for up to 30 days. Apple refresh tokens (when issued) are stored encrypted (AES-256-GCM) solely to support revocation and account deletion.
• Google sign-in on the website is optional. An encrypted, signed HttpOnly session cookie lasts up to 30 days; signing out revokes the browser session. Google access and refresh tokens are not stored in browser storage.

History sync (website and mobile app)

If you are signed in, the ticket IDs you bookmark are linked to your account to sync your history across devices. They are deleted together with the account.

Akorda promotions and advertising

• Mobile app and website: while a receipt is being processed, a full-screen promotion of our own products (for example, AudiblePort) may appear. It can be closed after 5 seconds and stays until you close it. Neither the app nor the website contains third-party ad networks, advertising identifiers, tracking, in-app purchases or paid plans: everyone gets the same service.
• The app downloads the same public catalogue for everyone from our own server, without account credentials, cookies, user or ticket identifiers, or analytics; on the website our server includes that same catalogue in the page. Optional images and videos are downloaded from our Cloudflare R2 storage. As with any network request, our server and CDN receive your IP address, the requested path, time and technical HTTP metadata in temporary security and operational logs. Promotions are chosen by availability, dates and priority, never by your account or receipt data. We do not measure impressions or clicks: the button opens exactly the displayed website in your browser, with nothing appended, and that website applies its own privacy policy.
• We do not run our own analytics or tracking on the website or in the app.

Functional and technical data

• A locale cookie (1 year) and your theme and display name, kept in your browser's localStorage, remember your preferences.
• Your participant choice for each ticket is stored locally. The website uses IndexedDB for guest history, account-specific cached history and changes waiting to sync. Local copies remain until you clear the site's data; signing out hides the account's history rather than transferring it to the next account.
• Server logs with request metadata (including IP address) are kept temporarily for security and troubleshooting.

3. Legal bases

• Contract: processing your uploads, account and history sync to provide the service you asked for.
• Legitimate interest: retaining the parsing dataset to improve our models, showing promotions of our own products in the mobile app, and keeping the service secure and abuse-free. You may object by contacting us.

4. Retention summary

5. Deleting your account and data

• In the app: Settings → "Delete account" removes your account, sign-in identities, sessions and synced history bookmarks.
• Deleting the account does not delete tickets, images or dataset entries, which are collaborative/service data. To request deletion of a ticket image or its parsed data, email us with the ticket link or ID.

6. Who we share data with

• Cloudflare, Inc. — object storage of ticket images and promotional media (R2), DNS/CDN.
• OpenRouter Inc. — AI model routing for ticket parsing.
• Google LLC — Gemini parsing models and Google Sign-In.
• Apple Inc. — Sign in with Apple.
• Comet (Opik) — observability traces of AI parsing.
• The application and database run on a self-managed server (Dokploy) operated by us.

We do not sell your personal data. See also our Terms of Service.

7. International transfers

Some providers above are established in the United States or other countries outside the EEA. Where required, transfers rely on the EU-US Data Privacy Framework (when the provider is certified) or on standard contractual clauses.

8. Your rights (GDPR)

You may access, rectify, erase, restrict or object to the processing of your personal data, request portability, and withdraw consent at any time. To exercise any right, email [email protected] (identify yourself with your account email or the ticket link).

If you believe we mishandled your data, you may complain to the Spanish supervisory authority (Agencia Española de Protección de Datos, aepd.es) or your local authority.

9. US residents (CCPA/CPRA)

We do not sell your personal information. Neither the mobile app nor the website shares it for cross-context behavioral advertising: they only show promotions of our own products, without advertising identifiers. You may request knowledge, access or deletion of your personal information by email.

10. Security

Traffic travels over TLS, secrets are encrypted at rest and image names are random UUIDs. Remember that image links are public-by-design: anyone with the exact link can open the image.

11. Minors

The service is not directed at children under 16.

12. Changes to this policy

We may update this policy as the service evolves. Changes are published here with a new "last updated" date.