Privacy Policy

Tablesplitter is responsible for the processing of personal data carried out in connection with the service. For privacy-related questions, you can contact us through the contact form linked in the footer of the site.

We value your privacy and collect as little data as possible. We are committed to transparency in how we process personal data and comply with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

We do not require registration and we do not collect email addresses during normal use. We do not sell or rent data to third parties for marketing purposes. We use data only to operate the service, prevent abuse, and improve the service.

Bill and split data: the lines and prices read from the receipt, the bill title, place and total, the first names people enter at the table, what each person selected, and the payment method the host chooses to share. Source: directly from the people using the split.

Receipt photos: the original image of the receipt uploaded by the person who paid. Source: directly from the user's device.

Device identity: a pseudonymous identifier created from browser storage on your device. This lets you see your own splits and rejoin a table without creating an account. Source: your browser's local storage.

Technical data: IP address, browser type and version, device information, and server logs. Source: directly from your device and our servers.

Contact form messages: name, email address, and message content sent through the contact form. Source: directly from you.

Providing the service: we process data to display the bill, let people pick their items, calculate shares, and keep the split available through the same link or table code. Legal basis: legitimate interest in providing the service.

Preventing abuse and maintaining security: we use IP addresses, device identifiers, and usage patterns to prevent spam, manipulation, and other misuse, and to apply rate limits. Legal basis: legitimate interest and legal obligation.

Content moderation: we may use automated tools and human review to prevent unlawful or inappropriate content from being uploaded. The final decision on removing content is always made by a person.

Improving the service: we analyse aggregated and anonymised usage statistics to identify improvements and technical issues. Legal basis: legitimate interest.

Complying with legal obligations: we may process data if required by law, a binding authority request, or to establish, exercise, or defend legal claims. Legal basis: legal obligation.

Bill text data, including lines, prices, selections, and names, is kept for as long as the split is relevant, because the split must remain accessible through its link and code.

Original receipt photos are stored for 90 days and then deleted automatically. The extracted text and split data remain available after the photo is deleted.

Technical logs and IP addresses are kept for up to 12 months for security and abuse prevention.

Device identifiers and related split data are kept as long as the corresponding split is stored in the service.

Contact form messages are kept for as long as needed to handle the request, typically no longer than 24 months.

We do not sell, rent, or transfer personal data to third parties for marketing purposes. We do use carefully selected service providers to run the service. They process data only under binding contracts and only on our behalf.

Cloud and database services are used to host the service and store data. Servers are located in the EU/EEA area.

AI services are used to read lines and prices from receipt photos. Our providers are contractually prohibited from using our data to train their models.

We may disclose data to authorities if required by law or a binding order, for example to prevent or investigate crime.

We aim to keep data processing within the EU/EEA. If we use providers outside this area, we ensure the transfer is covered by appropriate safeguards under the GDPR, such as EU Commission approved standard contractual clauses.

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These include encryption, access controls, and regular monitoring of security threats.

Under the GDPR, you have the right to be informed about processing (this policy), access your data, rectify inaccurate or incomplete data, request erasure, restrict or object to processing, and lodge a complaint with a supervisory authority.

Because the service does not require an account, you are usually not directly identifiable to us. You can anonymise your device identifier by clearing your browser's cookies and local storage. You can also remove content you added from the same device and browser, because we recognise your device through its stored identifier. If you have cleared that data or changed devices, you can request deletion through the contact form. We aim to respond within 30 days.

The service is not directed at children under 15, and we do not knowingly collect personal data from them. If we become aware that a child under 15 has provided personal data, we will delete it promptly.

We do not use traditional tracking cookies or advertising identifiers. We use browser local storage to keep a pseudonymous device identifier and your list of previous splits on your own device. This identifier is needed to recognise your device when you return to a table or view your split history.

You can manage or delete local storage through your browser settings. Removing it may affect the service, for example by clearing your split history or making you appear as a new participant at a table.

We use artificial intelligence to read receipt photos and extract lines and prices. AI is always used as a tool under human oversight. We do not delegate decisions that significantly affect users to fully automated systems. Our AI providers are contractually prohibited from using our data to train their models.

We may update this privacy policy to reflect changes in our practices, legal requirements, or industry standards. Material changes will be announced in the service. The updated policy takes effect when published on this page. We recommend checking the policy regularly.

For privacy questions, exercising your rights, or making a complaint, contact us through the contact form linked in the footer. We aim to respond within 30 days.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority in your country. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).