Privacy Policy for Kloopy Ltd (TripSplit)

Last Updated: June 2026

At Kloopy Ltd, we believe your data should remain exactly that: yours. We built our product, TripSplit, with privacy at its core. This policy explains what information we collect, how we use it, and how we protect it under the UK GDPR and the UK Data Protection Act 2018.

1. Who We Are (The Data Controller)

Kloopy Ltd is the "Data Controller" for the information processed through TripSplit.

• Company Name: Kloopy Ltd
• UK Company Number: 17257918
• Contact Email: privacy@kloopy.com

2. The Data We Collect & How We Use It

We follow a strict policy of data minimisation. We do not collect your phone number or address, nor do we process any financial payments inside the app. We only process data necessary to make TripSplit work for you.

Data You Provide Directly:

• Account Information: Your name, email address, and profile picture (if provided) to create your account and secure your access.
• Trip & Expense Data: Trip names, group member names, currencies, and transaction information that you type into the app so TripSplit can calculate who owes what.
• Support Communications: If you contact us for support, we will hold your email and the contents of your message to resolve your issue.

Technical Data Collected Automatically:

• Performance & Crash Analytics: We collect basic, internal-only technical data (such as app crash logs, device types, and performance metrics). We use this purely to monitor app stability, fix bugs, and improve performance. This data is kept strictly internal.

Our Lawful Basis for Processing Under the UK GDPR, we process this data because:

• Contractual Necessity: We need this information to perform the service you signed up for (i.e., running the TripSplit app for you).
• Legitimate Interests: To maintain app security, fix technical bugs, and respond to your customer support requests.

3. Third Parties & Selling Data

• We do not sell your data. We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.
• Essential Sub-processors: We only share data with trusted infrastructure providers strictly necessary to host and run the app. Any sub-processors are contractually bound to look after your data securely and are forbidden from using it for their own purposes.

4. Where Your Data Lives

We host, store, and process all personal data entirely within the United Kingdom and EU. Your data does not leave the UK or EU, ensuring it benefits from the robust protections of UK and EU data privacy laws at all times.

5. Account Deletion & Retention

If you want to close your account, you can request account deletion at any time by contacting us.

• The 14-Day Grace Period: Once you request deletion, we initiate a 14-day cooling-off period. If you do not log back into your account within these 14 days, your data erasure will be finalised.
• Anonymisation: When your account is deleted, your personal identity (your name, email, and profile photo) is permanently and irreversibly scrubbed from our systems. However, to keep the mathematical balances accurate for the remaining group members, your past expense splits and settlements will stay intact but will be completely anonymised and displayed simply as "Deleted User".