Privacy
Last updated 30 October 2026
In short: your bill photo is read once and thrown away; we never save it. Your bills, friends and API keys stay on your phone. We keep only what we need to count scans and record payments, and we don't sell data or show ads.
1. Who is responsible
Holysplit (holysplit.app) is run by an individual based in Thailand, who is the data controller under Thailand's Personal Data Protection Act (PDPA). Contact: holysplit.app@gmail.com.
2. Bill photos
When you use the Holysplit reader, your photo goes over an encrypted connection to our server, which passes it to an AI model to read the items and sends the result back to you: Anthropic's Claude, or Google's Gemini as a backup. The photo is not saved by us, in any database, log or backup. We use both providers' paid API services, under which your photos are not used to train or improve their models; the providers keep them only for a limited time to check for misuse.
If you use your own API key instead, the photo goes from your browser straight to the provider you chose (Google or MiniMax), under that provider's terms. It never passes through us.
3. What stays on your device
The bill itself (items, prices, who ate what), your friends and lists, your payment details for settling up, and any API keys are stored only in your browser. We never receive them. The image you share with friends is made on your phone.
4. What we keep
- Google sign-in: your Google account ID and email address. Your name and profile picture are kept only in your browser's sign-in cookie, to show your avatar.
- A device ID: a random ID made by your browser, used to count free scans before you sign in.
- Scan records: when you scanned and whether it was a free, PASS or PACK scan. Not the photo and not what was on the bill.
- Payments: what you bought, the amount, the date, and Stripe's reference numbers. We give Stripe your sign-in email so it can send your receipt; Stripe handles the payment, and we never see your bank details.
- Abuse protection: your IP address is turned into a scrambled code that can't be turned back, used only for daily scan limits and deleted after about 2 days. Our hosting provider also keeps short-lived technical logs.
5. Why
To run the service you asked for (reading bills, counting scans, unlocking what you paid for); to protect it from abuse; and to keep the payment records that tax and accounting law require.
6. Who else handles it
- Cloudflare: hosts the site and our database.
- Anthropic: reading bill photos (Claude API).
- Google: sign-in, and reading bill photos as a backup (Gemini API).
- Stripe: PromptPay payments and receipt emails.
These providers may process data outside Thailand, under their own privacy and security commitments. We don't sell or share your data with anyone else, and there are no ads or tracking cookies.
7. Cookies
One sign-in cookie (lasts 90 days, or until you sign out) and a short-lived one used during Google sign-in. That's all.
8. How long
Account and scan records: while you have an account. Payment records: as long as Thai tax and accounting law requires. If you ask us to delete your account, we delete everything except the payment records we have to keep.
9. Your rights
Under the PDPA you can ask to see, get a copy of, correct or delete your data, to restrict or object to how we use it, and to withdraw consent. Email holysplit.app@gmail.com from the address you sign in with; we reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee (PDPC).
10. Changes
If this policy changes, the date above changes, and we'll tell you about important changes.