← Back to SplitHaus

Privacy Policy

Effective date: October 14, 2026

SplitHaus exists so a family or group can share a vacation home without stepping on each other. That means the people in your house see your name and your stays, and if your house keeps shared books, your share of the costs. It does not mean anyone else does. We do not sell your information, we do not show ads, and we do not track you around the web.

This policy explains, in detail, what we collect, why, who sees it, how long we keep it, and what you can do about it.

1. Who we are and what this covers

This Privacy Policy describes how the operator of SplitHaus ("SplitHaus," "we," "us") collects, uses, shares, and protects personal information when you use the SplitHaus website at splithaus.com, the SplitHaus mobile apps, our email and calendar integrations, and related features (together, the "Service"), and when we reach out to people who may be interested in SplitHaus.

SplitHaus is a tool for families and groups who share a vacation home. Much of the information in the Service is, by design, shared among the members of a house. This policy explains what that means and what stays private.

For the purposes of European and UK data-protection law, we are the controller of the personal information described here, except where a house administrator decides whose information to enter and who may see it; for those decisions the administrator is independently responsible.

2. Information we collect

Information you give us

  • Account: name, email address, and the identifier from any sign-in provider you use. Optionally a phone number, a profile photo, and payment handles (for example a Venmo or Zelle name) you choose to share with your house so others know where to pay you.
  • House setup: the house name, nickname, type, and time zone; group and member names; sharing rules, draft order, and settings entered by administrators. We do not ask for the property's street address.
  • Calendar activity: stays you book, cancel, request, offer, trade, or claim; guests or parties you add to a stay; notes you attach.
  • House guide and messages: pages, photos, FAQs, contacts, and documents added to the house guide; notification preferences; anything you write in a note or request.
  • Finance (if your house turns it on): shared costs, dues, stay charges, plans, savings goals, allocations, balances, payment reports and confirmations, references and notes, uploaded receipts and attachments, and corrections.
  • Billing: the billing contact's email. Payment card or bank details for your subscription are entered directly with Stripe and never reach our servers.
  • Support and feedback: what you send us by email or through the app, including a deletion request.

Information other members provide about you

A house administrator or group lead may enter your name, email address, and sometimes a phone number to invite you, assign you to a group, record a stay for you, or record that you paid or owe a shared cost. Members may also upload a receipt or write a note that mentions you. We process this information so the house can function, and we rely on the person entering it to have the right to do so.

Information collected automatically

  • Device and usage: IP address, browser and operating system, device type, language, pages and features used, the time of each request, and the page that referred you. On selected public marketing pages and the property setup page, PostHog also records mouse movement, clicks, scrolling, and page structure so we can see where people get stuck. Form values, account details, and personal content in generated previews are masked before recording data is sent. Page headings, labels, and other public interface text remain readable. Session replay is off in the app.
  • Attribution: if you arrive from a mailer, QR code, referral link, or campaign link, a first-party cookie remembers that so we can tell which channels work. It does not follow you to other websites.
  • Diagnostics: error reports and server logs, which can include your account identifier and the request that failed. Logs never include bank tokens, cursors, or raw bank descriptions.
  • Mobile app: a push-notification token if you allow notifications; app version and platform. The app does not collect your precise location or your contacts.

Information from third parties

  • Sign-in provider: your name, email, and profile photo as shared by the provider you choose to sign in with.
  • Plaid (optional bank connection): when a finance manager connects a house bank account, Plaid supplies the institution name, account name and last digits, account type and currency, current balance, and transactions (date, amount, description, merchant, category, and pending or posted status), plus later corrections from the bank. We never receive or store your bank sign-in credentials; they go directly to Plaid.
  • Stripe: subscription status, renewal date, and invoice and payment events, so the Billing page can show where the house stands.
  • Calendar invitations by email: if your house uses email booking, we receive the calendar attachment and headers of the message you send to the house address, and we check the message's authentication records to confirm it came from your domain.

Prospective customers

We sometimes reach out by mail or online to people who appear to co-own a vacation property. See Marketing to prospective customers for what we collect and from where.

3. How we use information

We use personal information to:

  • provide the Service: show your name and stays to your house, run bookings, requests, trades, drafts, and allocation rules, and keep the calendar in sync across members and devices;
  • run Finance: keep the house's shared financial records, calculate shares and balances, prepare bank activity for review, suggest categories or payers from that house's own prior entries, and record payment reports and confirmations;
  • send notifications you have not turned off: booking confirmations, reminders, requests awaiting you, finance updates, digests, and, if enabled, push notifications;
  • send messages we must send to operate your account: billing receipts, security alerts, changes to terms, and deletion confirmations;
  • bill the house and apply referral credits;
  • provide support, including letting a support person view an account with their access recorded (see Support access);
  • keep the Service secure: authenticate you, rate-limit abuse, verify webhooks and inbound email, detect fraud, and investigate violations of our Terms;
  • understand and improve the product: see which features and pages are used, where people get stuck, and which marketing channels lead to real houses;
  • comply with law and enforce our Terms.

We do not sell personal information, do not share it for cross-context behavioral advertising, do not build advertising profiles, and do not use your content or your house's data to train artificial intelligence models. Learning features in Finance (for example "this merchant is usually Utilities") are computed only from your own house's confirmed entries and are never shared across houses.

Legal bases (EEA, UK, and Switzerland)

  • Contract: providing the Service, billing, and support.
  • Legitimate interests: security, fraud prevention, analytics to improve the Service, communicating with existing customers, and marketing to prospective customers, balanced against your rights.
  • Consent: optional bank connections, push notifications, sharing your phone number, non-essential cookies where consent is required, and marketing email to people who are not yet customers. You can withdraw consent at any time.
  • Legal obligation: tax, accounting, and responding to lawful requests.

4. What the members of your house can see

Sharing a house means sharing information with the people in it. Within a house:

  • Everyone sees member names, group membership, the calendar (who is staying when), pending requests and offers, and the house guide.
  • Your phone number and payment handles are visible only if you turn sharing on in your profile.
  • Guests or party details you add to a stay are visible to the house.
  • Finance starts private. Only administrators and finance managers see it, and Finance emails and push notifications are paused, until the house chooses to share it. Once shared, members see shared costs, receipts, plans, and balances according to their role. Payment reports and their history are visible to the people involved, to group leads for their group, and to administrators and finance managers.
  • Bank data is manager-only. Connected-account balances and transactions are visible to administrators and finance managers. Member-facing reports omit raw bank descriptions.
  • Administrators see the activity log for the house, which records who did what and when.

Information is never shared between different houses. If you belong to two houses, each sees only its own data about you.

5. How we share information

We share personal information only in these ways:

  • With your house, as described above.
  • With service providers that process it on our behalf under contracts that limit their use to providing their service to us. The current providers are listed below.
  • With services you connect: your bank through Plaid, your calendar app through a feed you subscribe to, your device's calendar if you add a stay to it, and your sign-in provider.
  • For legal reasons: to comply with law, a subpoena, or a court order; to enforce our Terms; or to protect the rights, safety, or property of SplitHaus, our users, or the public. We will tell you about a request for your data unless the law forbids it or the request is an emergency.
  • In a business transfer: if SplitHaus is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will post notice and this policy will continue to apply until it is changed as described below.
  • With your direction or consent, for example when you share a link or export a file.
  • In aggregated or de-identified form that cannot reasonably identify you.

Service providers

ProviderPurposeInformation involved
Vercel Inc.Hosts the website, apps, and server codeAll traffic to the Service, including IP address and request logs
Supabase, Inc.Database and file storage (United States region)All account, house, calendar, finance, and attachment data
Clerk, Inc.Sign-in and account securityEmail, name, sign-in provider identifiers, session and device information
Stripe, Inc.Subscription billing and referral creditsBilling contact email, payment method (held by Stripe only), invoices, house identifier
Plaid Inc.Optional read-only bank account connection for FinanceBank credentials (entered directly with Plaid, never seen by us), account, balance, and transaction data
Resend, Inc.Sends our email and receives calendar-invitation emailEmail address, message content, delivery and bounce events
PostHog, Inc.Product analytics, server logs, and session replay on selected marketing and property setup pagesAccount identifier, pages and features used, device and browser type, approximate location from IP, diagnostic logs; mouse movement, clicks, scrolling, and page structure with form values and personal preview content masked on selected marketing and property setup pages
Functional Software, Inc. (Sentry)Error monitoringError reports with account identifier, browser or device details, and the request that failed
Upstash, Inc.Rate limiting to protect the Service from abuseShort-lived counters keyed by IP address, account, or token
Apple Inc. and Google LLCPush notification delivery for the mobile appsDevice push token and notification content

Analytics and error-monitoring providers receive your account identifier and usage data, not the content of your house (no notes, receipts, amounts, or bank descriptions). We may change providers; when we do, we update this list.

6. Bank connections through Plaid

A house may connect one dedicated checking or savings account so bank activity can be matched to the house's records. When a finance manager chooses to connect:

  • You enter bank credentials with Plaid, not with us. We receive an access token that Plaid issues; we store it encrypted in a secrets vault on the server and never send it to a browser.
  • Access is read-only. SplitHaus can read balances and transactions. It cannot move money, make payments, or change anything at the bank.
  • You choose how much history to request before connecting. After that, new activity arrives as the bank reports it to Plaid.
  • Bank activity is visible only to administrators and finance managers of that house. Nothing is posted to the books automatically; a person confirms every match, expense, or classification.
  • You can pause updates (we keep the connection but stop reading) or remove access (we ask Plaid to revoke our access and then delete the token). Removal can take a short time to complete; Finance shows the status and lets a manager retry.
  • Removing access does not delete activity already saved to the house. Those records are part of the house's books and remain subject to the retention rules below.

Plaid's handling of your information, including data it collects from your bank, is described in the Plaid End User Privacy Policy. You can review and manage the apps connected to your bank through Plaid at my.plaid.com.

7. Cookies, analytics, and tracking

We use a small number of cookies and similar technologies:

  • Essential: a sign-in session cookie from our identity provider, a cookie that remembers which house you were in, security tokens, and (for unlisted previews) a cookie that confirms you were given a preview link. The Service does not work without these.
  • Analytics: PostHog uses first-party browser storage so we can tell returning visits apart and tie in-app usage to your account once you sign in. Session replay is off in the app.
  • Marketing-page research: PostHog session replay runs only on selected public marketing pages and the property setup page. It records mouse movement, clicks, scrolling, and page structure. Public interface text remains readable; form values, account details, and personal content in generated previews are masked before data is sent. Recording stops when you leave those pages and never runs on app.splithaus.com, including its sign-in and account registration pages.
  • Attribution: a first-party cookie remembers the campaign, mailer, or referral link that brought you here.

We do not use third-party advertising cookies, do not place tracking pixels for ad networks, and do not share browsing data with ad platforms. Because we do not engage in cross-site tracking or sale of data, there is nothing for a Do Not Track or Global Privacy Control signal to turn off; we treat such signals as a request not to sell or share, which we already honor.

You can block or delete cookies in your browser. Blocking essential cookies will sign you out. Where local law requires consent for analytics cookies, we ask before setting them.

Email. Our emails may include a link-tracking redirect so we can see that a message was useful and which campaign a new house came from. We do not use invisible open-tracking images.

8. Your choices

  • Profile: edit your name, photo, phone number, payment handles, and whether they are shared, in Profile.
  • Email: adjust per-house notification preferences in Profile, or use the unsubscribe link in any non-essential email. One click turns off that kind of mail without turning anything else on. Account, billing, and security messages cannot be turned off while you have an account.
  • Push notifications: allow or revoke them in the app or your device settings.
  • Calendar feeds: regenerate or stop a feed from your profile; the old URL stops working immediately.
  • Bank connection: pause or remove it from Finance, or from my.plaid.com.
  • Leave a house: ask an administrator to remove you, or delete your account.
  • Export: finance managers can export a house's complete finance archive and reports from Finance, and members can export their own finance reports. Your stays are available to any calendar app through your personal feed. Email us for a copy of anything else we hold about you.
  • Delete your account: see the next section.

9. Data retention and deletion

We keep personal information for as long as your account exists and as needed for the purposes above. Specific rules:

  • Account deletion. Request it in Profile, Manage account, or on our account deletion page. Your sign-in account, name, email, phone number, photo, payment handles, push tokens, calendar-feed tokens, and notification preferences are permanently deleted within 30 days, you are removed from every house, and any upcoming stays you hold are released back to the house. You can cancel a pending request during that window by emailing [email protected].
  • Shared house records survive, without you. A house's calendar history, allocation history, activity log, and financial books are records the other members rely on, and posted financial entries are immutable by design. When you are deleted we keep those records but replace your name with "Deleted user" and remove your email and contact details from them. Free-text notes, payment references, and receipt images you or others uploaded remain part of the house's record and may still contain personal details written into them; email [email protected] if you need help with a specific item.
  • House deletion. A house administrator can ask us to delete a house by emailing [email protected]. After we confirm the request with the administrators, the house's calendar, settings, finance records, attachments, memberships, and queued email are deleted and any bank connection is revoked. This cannot be undone, so export anything the house needs first.
  • Expired trials and cancelled subscriptions. We keep the house in read-only form so members can still see the calendar. We may delete houses that have had no activity for an extended period after giving the administrators notice by email.
  • Bank data. Imported transactions a house has reviewed are part of its books. Imported rows that were never accepted into the books are purged 30 days after they stop being referenced. Access tokens are deleted when a connection is removed.
  • Attachments. Uploaded receipts and photos are deleted with the record they belong to. Uploads that were started but never attached to a record are cleaned up automatically.
  • Activity and email logs. A house's activity log is kept for two years. Records of email we sent or suppressed are kept for 90 days.
  • Diagnostics, analytics, and backups. Error reports, server logs, and analytics events are kept only as long as needed to operate and improve the Service, and deleted data may persist briefly in encrypted backups before they roll over.
  • Legal holds. We may keep information longer where required by law, to resolve a dispute, or to enforce our agreements, for example billing records kept for tax purposes.

10. Security

We work to protect your information with measures appropriate to a product that holds a family's calendar and shared books:

  • Encryption in transit (TLS) everywhere, and at rest for the database, file storage, and backups.
  • Every record is tagged with the house it belongs to, and the database itself enforces that a member can only read their own house's data, independent of the application code.
  • Bank access tokens are stored in a server-side secrets vault and never sent to a browser. Bank-webhook signatures and inbound-email authentication are verified before anything is processed.
  • All changes to a house go through server-side commands that re-check who you are and what your role allows. Browsers cannot write directly to the database.
  • Rate limiting and audited support access.

No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and any regulator as required by law. Please report security concerns to [email protected].

11. Support access to your account

To help with a problem, a SplitHaus support person may view a house or account as you see it. This access is limited to a small number of authorized operators, is read-only by default, is recorded in an audit log including who accessed what and when, and is used only to resolve support requests, investigate abuse, or fix a defect. Support staff do not see bank credentials (we never have them) or full payment card details (Stripe holds them).

12. Your privacy rights

Everyone who uses SplitHaus, wherever you live, can ask us to access, correct, export, or delete their personal information, or to restrict or object to how we use it. Email [email protected] from the address on your account, or use the in-app tools described under Your choices. We will verify that the request comes from you (usually by confirming the account email) and respond within 30 days, or sooner where the law requires. We will not treat you differently for exercising a right.

You may use an authorized agent to make a request. We will ask the agent for proof of your written permission and may ask you to confirm the request directly.

If you live in California

The California Consumer Privacy Act gives you the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit use of sensitive personal information; and to not be discriminated against. In the last 12 months we have collected the categories below for the business purposes described in this policy and disclosed them only to the service providers listed above. We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the last 12 months. We use sensitive personal information (bank data) only to provide the Finance features a manager asked for, which is a permitted purpose that does not require a limit-use option.

CategoryExamplesCollected
IdentifiersName, email, phone number (optional), account and membership IDs, IP address, device push tokenYes
Customer recordsBilling contact and Stripe customer ID; payment card details are held by Stripe, not usYes
Commercial informationSubscription status, invoices, referral credits, shared-cost and payment records in FinanceYes
Financial informationIf a house connects a bank: account mask, balance, and transactions supplied by Plaid; receipts and payment references members enterYes, when Finance or a bank connection is used
Internet or network activityPages and features used, referring URL, browser and device type, diagnostic logsYes
GeolocationApproximate location derived from IP address, and the house time zoneApproximate only
Audio, visual, or similarPhotos and documents uploaded to a house guide or as receiptsYes, if you upload them
InferencesSuggested expense categories or payers learned from a house's own prior entries; fair-access standings computed from a house's calendarWithin a house only
Sensitive personal informationBank account and transaction data (see above). We do not collect government IDs, precise location, health, biometric, or similar data, and we do not use sensitive information to infer characteristics about youBank data only, with a manager's consent
Protected classifications, biometric, employment, or education informationNot collectedNo

Sources: you, other members of your house, your devices, our service providers (sign-in provider, Stripe, Plaid), and, for prospective customers, public records and licensed lists as described below.

Other U.S. states

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale, or profiling. We do not engage in targeted advertising, sale, or profiling that produces legal or similarly significant effects. If we deny a request, you may appeal by replying to our response; we will answer the appeal within the time your state's law requires and tell you how to contact your state attorney general if you are unsatisfied.

EEA, UK, and Switzerland

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local supervisory authority. We do not make automated decisions with legal or similarly significant effects. Our services are hosted in the United States; see the next section.

13. Where information is stored and international transfers

SplitHaus is operated from the United States and our database, file storage, and service providers are located there. If you use the Service from outside the United States, your information is transferred to and processed in the United States, where privacy laws may differ from those of your country. For transfers from the EEA, UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses, the UK Addendum, and the equivalent Swiss mechanisms with our providers, together with the Data Privacy Framework where a provider is certified. You can request a copy of the relevant safeguards by emailing [email protected].

14. Children

The Service is for adults. We do not knowingly collect personal information from children under 13, and people under 18 may not hold an account. A member may record that children are part of a stay or, for example, note a grandchild's name on a house-guide page; that information is entered by an adult and belongs to the house. If you believe a child has created an account, email [email protected] and we will delete it.

15. Marketing to prospective customers

To find families who might want SplitHaus, we sometimes identify vacation properties that appear to be owned by more than one person or by a family trust or LLC, and send a letter or postcard to the property or its owners. For that we may collect and keep:

  • property address, type, and owner names as they appear in public county property records, and in lists licensed from data vendors;
  • our own notes about whether the property seems a fit, which campaign it was included in, and whether anyone responded;
  • if you scan a QR code or visit a personalized link from a mailer: the fact that you visited, pages you viewed, and anything you choose to enter on the page;
  • if you fill out a form or start setting up a house: the information you provide.

We may use a third-party AI service to help draft the wording of a landing page tailored to a market or to a mailer recipient. The information sent for that purpose is limited to the market description and, for a personalized page, the recipient's name, city, and property type. It is not used to train the provider's models.

We do not send marketing email to people who have not asked for it. We never sell or rent prospect lists. To stop receiving mail from us or to have your prospect record deleted, email [email protected] with the address on the mailer, or use the opt-out instructions printed on it. We keep a minimal suppression record (the address, and if you give it, your name) so we can honor the request.

16. Changes to this policy

We may update this policy as the Service or the law changes. We will post the new version with a new effective date. If a change materially reduces your rights or materially expands what we collect or how we share it, we will notify active account holders by email or in the app at least 14 days before it takes effect. Your continued use of the Service after the effective date means you accept the revised policy.

17. Contact us

Privacy questions, requests, and complaints: [email protected]. General support: [email protected].

If you are in the EEA, UK, or Switzerland and believe we have not resolved your concern, you may contact your local data-protection authority.