Terms of Service & Privacy Policy.

Splitsy ("we", "us") provides a prototype for scanning receipts, splitting shared costs, and settling test USDC payments on Arc Testnet. It is offered for demonstration and educational purposes only and involves no real funds. By using Splitsy you agree to this policy and to the Terms of Service below. If you do not agree, please do not use the app.

Splitsy offers four sign-in methods; you choose one. In every case we use the sign-in solely to identify you — we never post on your behalf, read your messages, or collect any content beyond the basic profile described here.

• X — OAuth 2.0 with the read-only scopes tweet.read, users.read, and offline.access (to keep your session alive). A single call to GET /2/users/me returns your user ID, username (handle), display name, and avatar URL. We do not request your email and do not read your timeline, follows, likes, or direct messages.
• Discord — OAuth 2.0 with the identify scope. We receive your user ID, username, display name, and avatar. We do not request the email scope or read your servers, messages, or connections.
• Google — OAuth 2.0 (OpenID Connect). We receive your verified email address, name, and profile picture. We require a verified email because it is your identity key.
• Email — you enter an email address and we send a one-time 6-digit code (via our email provider, Resend). Verifying it signs you in. We store your email address and a short-lived salted hash of the code.

We use this data only to (1) authenticate you, (2) show your handle, name, or email and avatar in the app, and (3) match you to shared bills that others tag you in, so you can view and settle what you owe. Google and email sign-in resolve to the same email-keyed identity — signing in either way with the same address is the same Splitsy account and wallet.

• Account & identity data — the sign-in data above for your chosen provider (an id/handle or email, plus name and avatar), used to create and identify your Splitsy account. If you use Google or email sign-in, this includes your email address.
• Wallet data — the address and identifier of the Circle wallet created for your account, so we can attribute bills, debts, and payments to you.
• Wallet PIN — stored only as a salted scrypt hash. Your raw PIN is never stored or transmitted in readable form.
• Receipt images — sent to our server only to perform optical character recognition (OCR); processed transiently and not persisted after the scan completes.
• Bill & split data — merchant names, amounts, line items, participants, and payment status you create or that others share with you.
• Onchain data — bills, debts, and payments submitted to Arc Testnet are written to a public blockchain and are inherently visible to anyone.
• Payment reputation— when your wallet pays an on-chain bill in full, an identity token and a positive, scored feedback record (bill reference, timeliness score, and payment transaction) are written to Arc's public ERC-8004 registries, and mirrored in our database for display. Reputation is created only by payments your wallet itself makes — being tagged into a bill records nothing — and having no history is always shown as neutral.

• To authenticate you and operate your account.
• To create and operate a wallet so you can view, receive, and settle debts.
• To match you to bills split with you and calculate what you owe or are owed.
• To extract structured data from receipts you upload.
• To maintain the security and integrity of the service.

We do not use your data for advertising, profiling, or automated decision-making, and we do not build marketing profiles from your sign-in data.

On first sign-in we create a Circle developer-controlled wallet on Arc Testnet keyed to your provider identity (your X or Discord id, or your email address for Google/email sign-in), so you can pay and get paid in USDC with no crypto setup. Because this is a testnet demo using test USDC with no monetary value, the wallet is operated server-side on your behalf. Sending USDC is protected by a wallet PIN that you set. A future mainnet version would offer genuine self-custody for real funds.

We do not sell, rent, or trade your personal data, and we do not transfer your sign-in data to any third party for their independent use. We share data only with the service providers that run the app — our hosting provider, our database provider, the OCR service that processes receipts, our email provider (Resend, for email one-time codes), and Circle's wallet infrastructure — and only to the extent needed to provide those functions. Data written to the public blockchain is, by nature, publicly visible.

We retain account and bill data for as long as your account is active. You may request deletion of your account and associated sign-in data at any time by emailing privacy@splitsy.xyz. We will delete the data we control, though information already written to a public blockchain — including payment-reputation records on the ERC-8004 registries — cannot be removed.

By accessing or using Splitsy (the "Service"), you agree to be bound by these Terms of Service and the Privacy Policy above, together with our Disclaimer & acknowledgments. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.

Splitsy is a prototype for demonstration and educational purposes, operating exclusively on Arc Testnet. All balances, payments, and tabs use test USDC, which has no monetary value and cannot be redeemed for real money. Never send mainnet assets or real funds to any address shown in the app. Onchain transactions are irreversible.

You must be at least the age of majority in your jurisdiction to use the Service. You are responsible for activity under your account and for keeping access to your account, wallet, and wallet PIN secure.

A Circle wallet is created for your account to send and receive test USDC on Arc Testnet. You set a wallet PIN that is required to send funds; keep it secret. Because the Service is a testnet demo with valueless test USDC, the wallet is operated on your behalf and Splitsy is not liable for any test balances.

You agree not to:

• Use the Service for any unlawful, fraudulent, or abusive purpose.
• Attempt to disrupt, overload, reverse-engineer, or gain unauthorized access to the Service.
• Upload content you do not have the right to submit, or that contains others' sensitive data.
• Misrepresent your identity or impersonate another person or entity.
• Use the Service to manage anything of real value or rely on it for production purposes.

Nothing in the Service constitutes financial, investment, legal, accounting, or tax advice. The receipt scanner, currency conversion, and split calculations are convenience features only. Always review extracted data and confirm amounts yourself before acting on them.

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, secure, or error-free, and it may change, break, or be taken offline without notice.

To the maximum extent permitted by law, Splitsy and its contributors will not be liable for any indirect, incidental, special, consequential, or exemplary damages, or for any loss arising from your use of the Service, including interactions with third-party wallets, networks, bridges, or smart contracts. You use the Service at your own risk.

The Service interoperates with third-party providers (for example, X, Discord, and Google for sign-in, Resend for email one-time codes, Circle wallet and blockchain infrastructure, and an OCR provider). Your use of those services is governed by their respective terms. Splitsy is an independent project and is not affiliated with, endorsed by, or sponsored by X/Twitter, Discord, Google, Circle, Arc, USDC, or any other referenced brand. All trademarks belong to their respective owners.

We may suspend or terminate access to the Service at any time, with or without notice, including for violation of these terms. You may stop using the Service and request deletion of your account at any time.

We use reasonable technical and organizational measures to protect your data, including HMAC-signed http-only session cookies and a salted hash for your wallet PIN. However, no method of transmission or storage is completely secure, and this is experimental software provided "as is". If you discover a security issue, please report it to security@splitsy.xyz.

We may update these terms and this policy from time to time. Material changes will be reflected by updating the date printed on the contents above, and continued use of the Service constitutes acceptance. For privacy requests, contact privacy@splitsy.xyz; for anything else, support@splitsy.xyz.