Privacy Policy
Service: SplitKit — shared expenses inside Telegram (bot and Mini App)
Version: 2026-11-01 · This English text is the governing version; translations are provided for convenience.
1. Who is responsible for your data
The controller of your personal data is Sergei Ianchuk, Republic of Serbia. Contact for privacy questions: support@dailykit.top.
Members and each other's data. In a group, members record expenses that name other members: who paid and who shares the cost. We are responsible for what the service does with this data: storing it, showing it to the members of the group, calculating balances and sending notifications. What members do with what they see in a group is their own matter.
2. The short version
- The members of a group see each other's Telegram name and username, every expense and repayment, and everyone's balance. Nobody outside the group sees them — except in a group started from a Telegram chat, where the bot announces new expenses in that chat.
- Your payment details (such as a phone number or a card number for transfers, a payment link, Revolut, PayPal, Venmo, Cash App, UPI, Pix or an IBAN) are shown only to members of your groups who, by the service's calculation, should pay you.
- A photo of a receipt is read on your device and is never sent to us.
- We do not hold or move money and never receive card details.
- We do not use advertising or tracking tools and do not sell data.
- You can delete your account in the Mini App at any time.
3. What data we process
Account
| Data | Where it comes from | Why we need it |
|---|---|---|
| Telegram user ID, first and last name (kept as one display name), username, language code | Telegram, when you open the Mini App, send /split in a group chat, or pay for Pro |
To sign you in, to show you to the other members of your groups, and to write to you in your language |
An account is created the first time you open the Mini App. Writing /start to the bot does not create one. The name and username are refreshed from Telegram each time you sign in.
Where you came from. When your account is created we note how you first reached the service: by the invitation to a group, from a group chat the bot is in, or by a link that carries a tag saying where it was posted (including the link at the foot of a PDF report). We use this to see which ways of spreading the word work. It is not shown to other members, is not changed afterwards, and is erased with your account. Separately we count how many times the links of each tag were opened, as a number per tag and day; who opened them is not recorded.
Groups, expenses and repayments
| Data | Where it comes from | Why we need it |
|---|---|---|
| Group: name, currency, who created it, its invite link, whether it is archived; for a group started from a Telegram chat, the identifier of that chat | The member who creates the group; Telegram, for the chat | To keep the group and let people join it; to post announcements in the chat |
| Membership: who is in which group and since when | You, when you create or join a group | To show the group to its members only |
| Expense: what it was for, the amount, who paid, who added it, how it is split and each member's part, the day it was spent, when it was added and when it was last changed | The member who adds or changes the expense | To calculate balances and show the list |
| Repayment: who paid whom, how much, who recorded it, the day and the time | One of the two members involved | To calculate balances |
An expense names members other than the one who entered it. If you are in a group, other members can record that you paid or that you share a cost.
Payment details (optional)
| Data | Where it comes from | Why we need it |
|---|---|---|
| The ways to pay you back that you enter: Revolut tag, PayPal.Me name, Venmo username, $Cashtag, UPI ID, Pix key, phone number for transfers and the service it goes through, card number, payment link, other details in your own words, IBAN, name of the account holder | You, in Settings | To show members who should pay you how to do it |
You do not have to enter any of them. We check only their format, never whether the account exists.
Pro
| Data | Where it comes from | Why we need it |
|---|---|---|
| Plan: Pro expiry date, subscription identifier and renewal status | Telegram, when you pay | To apply the plan limits and manage renewal |
| Payments: Telegram payment identifier, Telegram user ID, plan, amount in Stars, date, subscription period | Telegram, when you pay | To activate and renew Pro, handle refunds and keep accounting records |
| Withdrawal from a purchase: the name of your Telegram account as the statement showed it, the language of your Telegram, the date and time of the statement, of the refund and of the acknowledgement | You, when you withdraw, and the service | To carry out the withdrawal, return the Stars, send you the acknowledgement and show later when the withdrawal was made |
Messages to the bot
The bot answers commands (/start, /split, /terms, /privacy, /paysupport) and does not store the messages it receives. In a group chat the bot is meant to run with Telegram's privacy mode switched on, in which Telegram passes it only commands and the fact that it was added to or removed from the chat, not the conversation. The service checks this setting when it starts and does not start with it switched off. If a group makes the bot an administrator, Telegram passes it every message of that group; the bot stores none of them.
Files
- Receipts. A photo you scan is processed in the Mini App on your device. Neither the photo nor the recognised text is sent to us. The recognition program and its language data are downloaded from our own server, not from a third party.
- PDF report. The report is drawn on your device and sent to our server only to be passed on to Telegram, which delivers it to your chat with the bot. We do not keep it.
- CSV table. The table is made on our server from the group's records and passed on to Telegram in the same way; outside Telegram it is downloaded by a link that works for 10 minutes. We do not keep the file.
Technical data
| Data | Where it comes from | Why we need it |
|---|---|---|
| Logs: IP address, time, requested address, response code, size and duration of the response; for errors, the Telegram user ID | Your device, with each request | To keep the service secure and to find faults |
| Request counters by IP address and Telegram user ID | Your device, with each request | To limit the rate of requests; kept for about a minute |
The requested address can contain the identifier of a group or of a record, or a temporary download link.
We do not receive your contacts, your card details, your location, or your messages in other chats. We never learn whether a payment between members was actually made: we only store the record that a member adds.
4. Who sees what
- Members of a group see each other's name and username, all expenses and repayments with who paid, who added them and each member's part, and all balances.
- A person with an invite link, after signing in and before joining, sees the group's name, currency and number of members.
- Members who should pay you see your payment details next to that payment. The payment plan is recalculated whenever expenses change, so who sees your details changes with it. Other members and people outside your groups do not see them.
- Everyone in a Telegram chat the group was started from sees the bot's announcements there: what an expense was for, the amount, who paid and between whom it is split.
- Members an expense concerns receive a private message from the bot about it, where the bot can write to them.
- After you delete your account, other members of shared groups still see the amounts, without your name.
- We have access to the database for support and maintenance.
5. Legal grounds
- Performing our contract with you (the Terms of Service): your account, groups, the records you add, your payment details, notifications, Pro, withdrawal from a purchase.
- Our legitimate interest and that of the other members in keeping a shared record complete and correct: records that other members add about you, and amounts that stay in shared groups after you delete your account; also technical logs and rate limiting, for keeping the service secure and working.
- Legal obligations: keeping payment records for as long as accounting and tax law requires.
These grounds correspond to Article 6(1)(b), (f) and (c) of the EU General Data Protection Regulation and to the equivalent provisions of the Serbian Law on Personal Data Protection.
The service is not meant for health data or other sensitive information, or for data about people who are not in the group. Please do not put such information into the names of groups and expenses.
6. Who else is involved
- Telegram. You use the service through Telegram. Telegram processes your messages and payments as an independent service under its own privacy policy. Notifications and exported files are delivered to you as messages from the bot.
- Hosting provider: DigitalOcean, LLC (United States). The servers we rent from it are in its data centre in Frankfurt am Main, Germany. It runs them on our behalf under its data processing agreement.
- Payment services you open yourself. When you tap a payment link, your device opens the payment service (Revolut, PayPal, Venmo, Cash App or the page of a link the member entered), and that service receives what the link contains (the recipient's tag, name or address and, for PayPal, Venmo and Cash App, the amount; for Venmo, also the name of the group as the note) together with what your device normally sends to a website. A QR code for a bank transfer, UPI or Pix and a "Pix Copia e Cola" code are read by your banking or payment app. These services act independently under their own terms and privacy policies; we receive nothing from them.
We do not share your data with anyone else, except where the law requires it.
7. Where data is kept and international transfers
The database is located in Germany, in the European Union. The hosting provider is a company from the United States; if its staff reach the servers from there, the transfer is covered by the EU–U.S. Data Privacy Framework and, should that framework fall away, by the standard contractual clauses of its data processing agreement. We are established in Serbia and access the data from there for support and maintenance.
8. How long we keep data
| Data | Kept for |
|---|---|
| Account: name, username, language, payment details | Until you delete the account; payment details also until you clear them in Settings |
| Groups, expenses and repayments | Until the creator deletes the group or a record is deleted |
| Amounts of a deleted account in shared groups, without a name | As long as the group itself |
| Payment records | 10 years after the end of the year of the payment (the period Serbian accounting law sets for such books); then they are deleted. Deleting the account does not delete them earlier: they stay with the Telegram user ID and without a link to the group records |
| Withdrawal statements | Together with the record of the payment they belong to, and deleted with it |
| Technical logs | Up to 14 days |
| Session token | Kept only in the memory of the open Mini App; valid for up to 7 days |
If the service is discontinued, all user data is deleted, except records the law requires us to keep.
9. Your rights
You have the right to access your data, to have it corrected, deleted or restricted, to object to processing, and to receive your data in a portable form.
- Delete your account yourself: Mini App → Settings → Delete account. What happens to your groups is described in the Terms of Service, section 13.
- Change or remove payment details: Mini App → Settings. Clear a field and save.
- Delete a record: open it in the group. You can delete records you added, paid for or received; the creator of the group can delete any record and the whole group.
- Your name is taken from Telegram: change it there and open the Mini App again.
- A copy of a group's records: export (Pro), or write to us.
- Anything else, including a record about you that you cannot delete yourself: write to support@dailykit.top. We answer within 30 days.
Payment records we are legally required to keep are retained until that obligation ends.
You may also complain to a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU, the data protection authority of the country where you live.
10. Cookies and storage on your device
The Mini App does not set cookies and does not use analytics, advertising or tracking tools. It keeps two things on your device, neither of which is sent to us: the currency of the last group you created, to suggest it next time, and a copy of the receipt recognition data, so that it is not downloaded again.
The website dailykit.top sets no cookies either, runs no analytics and loads nothing from other servers; the server that delivers its pages writes no log of visits.
11. Children
The service is not directed at children. You may use it only if you are old enough to use Telegram under Telegram's terms.
12. Security
Access to the Mini App is authenticated with launch data signed by Telegram; no passwords are used. Requests are sent over an encrypted connection. A group can be opened only by its members, and joined only with its invite link, which the creator can replace. Download links are signed and expire after 10 minutes. Access to the database is limited to the operator.
13. Changes
We may update this policy. The current version is always available from the bot (/privacy) and the Mini App. If a change is significant, we will tell users in the bot chat.