Privacy policy

Tables

When someone starts a split, SwipeSplit creates a table: the restaurant name, the line items and amounts, the display names people type in, who claimed what, and any pay handles the host adds. Tables live in our database for 24 hours and are then deleted. Each table is reachable only through its unguessable link, and the tokens that prove who the host and each guest are stored hashed, so nobody at Tiny Mammoth can use them to act as you. When you tap 👍 or 👎 on a dish picture, or pick the right one, we store that vote with the table's anonymous participant id, never a name.

Receipt photos

When you tap Scan a receipt, your photo is sent over an encrypted connection to our server, which passes it to Anthropic's API to read the text. We keep the photo and what the reader saw for 30 days so we can find and fix scans that read wrong, then delete them. A scan that read wrong may be kept for up to a year for that fix. Photos are not linked to your account or name. Anthropic processes the photo under its commercial API terms and does not use it to train its models. If the AI reader is unavailable, SwipeSplit reads the receipt on your own phone and sends us the photo and the result the same way.

Accounts (optional)

You never need an account to start or join a table. If you sign in with Apple or Google, we store the sign-in provider's user id, the email address it shares with us (Apple may give us a private relay address), the display name you choose, and the pay handles you save so they follow you between devices. A sign-in cookie keeps you signed in on that browser. You can delete your account at any time from Settings, and everything above is removed immediately.

If you are signed in, SwipeSplit also keeps a short history of your tables, so you can look back at them after they close. For each table we keep only the restaurant, the date, the total, your share, what is owed, whether it is settled, and how many people were there, for your most recent 200 tables. We never keep receipt photos, the items, other people's names, or pay handles in your history, and nothing is kept for anyone who is not signed in. You can remove any one table, or all of them, from Account, and deleting your account deletes them too. The tables themselves still close after 24 hours.

Founding member list

If you join the founding member list, or the mailing list that replaces it once the founding spots are full, we keep the email address and the optional first name you enter so we can tell you about the paid plan, new features, and other real news. We only email you when there is something worth saying, and every email has an unsubscribe link. This list is separate from tables and receipt photos.

Pay-back links

Pay handles open Venmo, Cash App, Zelle, or Apple Cash on your phone. No money moves through SwipeSplit, and we never see your payment details. Those apps' own privacy policies apply once you are in them.

What stays on your phone

SwipeSplit uses your browser's local storage to remember your display name, your pay handles, whether you have seen the swipe hint, and whether this device has joined a table as a guest. That data stays on your device and is not sent to us until you put it into a table. If you sign in, we'll ask before saving them to your account.

While you are building a table, the list of items you are editing is also kept in this browser tab so a refresh does not lose it. That copy is removed when the table is created, when you discard it, or when the tab closes. The receipt photo is not kept there. This is separate from scanning: scanning a receipt sends the photo to us, as described above.

What we don't do

We do not run advertising or analytics trackers, we do not sell or share personal information, and we do not build profiles. When a table is created we record where the visit came from (the referring website's domain, or a tag like ?ref=oji on a table-tent QR code) so we can tell which restaurants and posts are working. If this device joined a table as a guest before, a table you start later is counted as a returning guest. That is a yes-or-no flag with no name or ID attached. That record contains no personal information. We also count how often the account prompts in the app are shown or tapped, with no name, email, or ID attached. If the app hits an error, it sends us a short technical report (what broke, your app version and device type). It never includes your receipt, names, or payment details.

Service providers

SwipeSplit runs on Cloudflare, which serves the site, stores tables, and sees the connection details (such as your IP address) that any website host sees, for security and performance. Anthropic reads receipt photos as described above. Feedback you send from the Send feedback link, along with the page you sent it from, goes to Tiny Mammoth's internal tools.

Children

SwipeSplit is not directed at children under 13, and we do not knowingly collect information from them.

Security

Everything travels over HTTPS. Host and guest tokens are stored hashed. Tables expire after 24 hours. No system is perfectly secure, so please do not put anything in a table that you would not want the other people at that table to see.

Your choices and deleting your data

Delete your account from Settings at any time, and everything tied to it is removed immediately. To delete anything else SwipeSplit holds about you, email support@tiny-mammoth.com from the address you want removed (or tell us the table link or name you used) and ask us to delete your data. We delete founding member list entries, account data, and any receipt photos or tables we can match to you within 30 days and confirm by email. Tables already delete themselves after 24 hours and receipt photos after 30 days; a scan kept to fix a misread may be held for up to a year unless you ask us to delete it. You can also email us for a copy of what we hold about you. If you are a California resident: we do not sell personal information, and the rights above apply to you.

Changes

If this policy changes in a way that matters, we will note it on the What's new page. The date at the top tells you when it was last updated.

Contact

Tiny Mammoth · support@tiny-mammoth.com