Privacy Policy

Your account. When you sign up, in the app or at splitclub.com, we collect your name, email address, mobile number, date of birth, gender, city and, if you add one, a profile photo and username. You can also tell us your profession or industry, bio, interests, LinkedIn, what you're looking for, and how you heard about us, including the name of anyone who referred you.

Signing in and verifying your number. You can sign in with Apple. If you do, Apple gives us a user identifier and, only if you choose, your name and email. When you verify your mobile number, Google's Firebase sends you the code, so Firebase receives your number.

Date of birth and age. We ask for your date of birth once and ask you to confirm you're 18 or older. We keep a record of when you confirmed and the wording you saw. Other people never see your date of birth.

Income range. If we ask for a rough annual income range on your profile, only SplitClub's administrators can see it. Other people on SplitClub, hosts, businesses and promoters never see it, and we don't use it for advertising or share it with anyone else. We delete it if you delete your account.

Instagram. If you give us your Instagram handle, hosts and venues can use it to see who's asking to join. We look up the public profile behind it and store what it returns: display name, follower count, verification status and profile photo. If you haven't added your own photo, we may show your Instagram profile photo as your SplitClub photo. You can replace it at any time. We don't post as you, read your private content, or ask for your Instagram password.

Connecting a business's Instagram. If you run a business and choose to create or fill its page from Instagram, you sign in on Meta's page and we read that account's profile and recent posts, read only, to show them on the business's page. You can disconnect at any time, which deletes what we copied. The details are on Instagram and your business page.

Bookings and splits. What you book, the splits you start or join, who is in them, what each person paid, deadlines, and check-ins. If you split with someone by phone number, we keep that number with the split so they can claim their share.

Flights. To book a flight we collect each traveller's name, date of birth, gender, email and phone, as the airline requires, and pass them to our flight partner Duffel and the airline.

Payments. Payments are processed by Stripe, Inc. We don't store your full card number; card entry happens in Stripe's own forms. Stripe collects card details, billing address and transaction history under its own privacy policy, and gives us the card brand, last four digits and payment status. If you withdraw from your wallet, Stripe collects the identity and bank details it needs to pay you.

Requests to join. When you ask to join a night, a channel or a group, a person at the venue, the host or SplitClub reviews your request. We don't ask for an ID or a selfie for this. We may ask for a short introduction video; we keep it privately and use it only to review your request.

Operators. If you apply to captain or provide a boat, we ask for a photo of your government-issued ID and your boating card, and may ask for licences and insurance. We store them privately and use them only to confirm who you are and that you're qualified to operate.

Messages and photos. Messages are stored on our servers so they can be delivered to the other people in your conversation, channel or split. When you upload a photo or video in the app, we remove its location and other hidden metadata on your phone before it is uploaded.

Searches. We record what you search for in the app, to improve results. When several people search for something and find nothing, we may use an AI service to draft an event for our team to consider; it receives only the search words, never who searched.

Device, usage and crash data. We collect analytics about how the app is used (screens viewed, features used), and crash and error reports, which include your device model, operating system and app version and may include your account id.

With your permission, SplitClub uses your approximate location while you use the app, to set your city and show channels, nights, splits and places near you. The app takes one reading at about one-kilometre accuracy, rounds it, and keeps only the rounded point on your phone; when it asks our servers for what's nearby, it sends the rounded point and we don't store it. We never store your precise location.

If you use a feature that needs a street-level pickup point, the app asks first and uses it only for that request. You can turn location off at any time in your device settings, and every screen works without it.

When a venue scans your pass at the door (section 3, Check-in at the door), the scan records where the scanning phone was, not where you are.

Suggest me for open seats. This is off by default. If you turn it on in your profile and pick categories (for example golf or dinners), hosts with open seats in those categories may see you suggested as someone likely to join, with your name, photo and what you have in common. It never applies while your profile is private. Turn it off any time.

Check-in at the door. Each paid seat gets a pass with a QR code. When venue staff scan it we record which pass, who scanned it, when, the result, the party size and the scanning phone's location. We use these records to check you in and as evidence if a payment is disputed.

Your contacts. Only if you allow access. With “Connect your contacts” your phone scrambles each contact's number into a code and sends the codes to us; we compare them with verified numbers on SplitClub and show you who matches. We don't keep the codes, only a count, to limit lookups. If you send someone a link, we use their number only to send it.

People you may know. We suggest people based on what you have in common on SplitClub: your city, your channels and clubs, and people you both follow.

AI features. When you describe a plan to SplitClub's assistant (for example in “Start a split” or Plan with SplitClub), what you type goes through OpenRouter to an AI model so it can suggest a plan. We ask your permission before your first message, and keep what you typed for 90 days to check and improve suggestions, then delete it. Businesses using our AI tools (importing their listings, drafting replies to guests) send their own text, and guest messages they ask the tool to answer, through OpenRouter in the same way. AI providers process this text to return a result and don't receive your contact details.

Push notifications. If you allow them, we send notifications about your splits, bookings and messages through Apple's push service and Firebase Cloud Messaging, which receive a device token. Turn them off any time in your device settings.

Giveaways. If you enter a SplitClub giveaway, we collect your name, your email and, if you give it, your Instagram handle. Entries made in the app also include the phone number and birthday on your profile, which we use to confirm you're eligible. If you name a guest, we collect their Instagram handle too. We use entries to run the giveaway and contact the winner, and may email you about SplitClub (you can unsubscribe at any time). We don't text or call entrants about SplitClub because they entered. Your guest's handle is used only if you win: if you don't win, it's deleted once the winner is confirmed; if you win, it's deleted after the event. If you don't have a SplitClub account, your entry is deleted 12 months after the giveaway ends.

Cookies. splitclub.com sets a sign-in cookie when you sign in, and a security cookie (sc_d) holding a random id, used only to detect and block automated scraping. We use no advertising cookies. Our page-view analytics count visits, the referring site, the country and the browser type. Google Analytics sets its own cookies (_ga) to count returning visitors, with Google signals and ad personalization turned off.

Scraping protection. If our systems detect automated scraping, we record the network (IP) address and the security cookie id involved, and block them.

AI assistants (MCP). When an AI assistant calls SplitClub's MCP server, we log the network address and a one-way hash of the assistant's session for about two hours, for rate limiting and abuse prevention, then delete them.

Split links. When you claim a seat through a split link on the web, we store one-way fingerprints of your network made with a secret key (never the address itself) with the claim, so we can limit how many seats one connection can take.

Sign-up and join forms. When you submit a form on the website we record your browser and device type, language, time zone, screen size and the approximate city, region and country your network resolves to, to detect automated and fraudulent submissions. Your network address is kept only as a keyed one-way fingerprint. On splitclub.com/apply we also record the visit (where you came from, any campaign tag, your device and approximate location) under a random id held only for that browsing session; if you submit the form, the visit is linked to your application so we can tell whether the page works.

• To create and run your account, and check you're 18 or older (and 21 or older where required).
• To show you stays, flights, nights, splits, classes and places you may like.
• To run splits and bookings: take payments, hold and capture them, return money when a split doesn't fill, and pay businesses.
• To review requests to join, and help you find people you know.
• To deliver messages, confirmations, reminders and account notices.
• To check people in at the door and resolve payment disputes.
• To detect fraud, scraping, automated sign-ups and abuse, and keep SplitClub safe.
• To fix problems and improve SplitClub.
• To meet legal, tax and accounting obligations.

Your name, username and profile photo can be seen by anyone signed in to SplitClub. Your city and Instagram handle (if you gave one) can be seen by anyone signed in. People signed in can find you by name or username and see who you follow and who follows you. Your bio, work, interests and LinkedIn are seen by your followers and, if your profile is public, by anyone signed in. New accounts start private. Badges, such as verified or operator, are visible to anyone signed in.

• Splits and nights. People in the same split or going to the same night can see your name, photo, city, age and gender. On a public night your name and photo can appear in its list of who's going.
• Hosts, businesses and promoters. When you ask to join or book, the people running it see your name, city and Instagram handle, and the business sees what is needed to serve you (your name, party size, check-in).
• People who have your number. If someone has your verified number in their contacts and uses “Connect your contacts”, they can see your name, username and photo.
• People not signed in can see the name of whoever hosts a public night or sends a split link, and the name and photo of a boat's captain.

Your email, phone number, date of birth, identity documents and payment details are never shown to other people. SplitClub staff can see your account when they need to, to run the service, keep it safe and answer you.

We use these companies to run SplitClub. Each handles data under its own privacy policy, only for the service it provides to us:

• Supabase: database, sign-in and file storage
• Stripe: payments, payouts and identity checks for withdrawals
• Duffel and the airline you choose: flight bookings
• LiteAPI (Nuitée) and the hotel you choose: hotel bookings
• Apple: Sign in with Apple, push notifications
• Google Firebase: phone number verification, push notifications, app analytics, crash reports and app integrity checks
• Sentry: crash and error reports
• Google Analytics (Firebase): website visit analytics for splitclub.com, with ad personalization off
• OpenRouter and the AI models it routes to: SplitClub's AI features (section 3)
• OpenAI: translating the app's text, and drafting events from popular searches (search words only)
• Resend: sending our emails
• Vercel: hosting and page-view analytics for splitclub.com
• Amazon Web Services: hosting for SplitClub's own usage analytics
• Meta (Facebook SDK): measuring our app ads: installs, opens, sign-ups and payments, without your name, email or phone
• Meta (WhatsApp): alerts to SplitClub's own staff about splits and payments
• Instagram: public profile lookup for the handle you give, through RapidAPI and the Instagram data service it connects us to
• IPinfo: approximate location of network addresses that call our partner API and MCP server

Your data is stored in the United States. What each provider receives, and where it is, is on our Service providers page.

We don't sell your personal information and don't share it for cross-context behavioral advertising. We share it only to run SplitClub: with the people in a split or night you join (section 6), with the business providing what you booked, with the providers in section 7, and with an AI assistant you connect to your account, within the permissions you approve. We also share it when the law requires, to protect people's safety or our rights, or as part of a merger or sale of our business, under this policy.

We keep your account information while your account is active. Requests to join that aren't accepted are kept until you delete your account.

Delete your account in the app: Profile, then Delete account. You can also email privacy@s7vc.com or business@splitclubapp.com from the email on your account. When you delete your account we delete your profile, and remove your name and contact details from the records we must keep.

Some records are kept for a set time after you delete your account:

• payment and booking records, without your name or contact details, for as long as tax and legal rules require;
• a record that you confirmed you were 18 or older, without your date of birth, for three years;
• if you ran paid boat days as an operator, your licence, insurance and boat documents, for three years;
• if you were a promoter, your code's commission history, for seven years;
• if you contacted us about a payment, that conversation until it's resolved, and for 120 days after.

Rate-limiting logs from AI assistants are deleted after about two hours. Text sent to the split assistant is deleted after 90 days.

We use encryption in transit (TLS) and at rest, keep identity documents and introduction videos in private storage that isn't publicly reachable, and never handle full card numbers. No system is completely secure; if a breach affects your data, we'll tell you as the law requires.

SplitClub is for adults 18 and over. Nightlife events are 21+, and you'll show ID at the door. We don't knowingly collect information from anyone under 18; an account with a date of birth under 18 can't use channels or post. You can't change your date of birth in the app; if it's wrong, email privacy@s7vc.com and we'll correct it.

Depending on where you live (for example California, other US states, the UK or the EU), you may have the right to know what we hold about you, get a copy, correct it, delete it, object to or restrict some uses, and not be treated differently for asking. You can withdraw consent for location, contacts, notifications and “Suggest me for open seats” at any time in the app or your device settings.

To make a request, email privacy@s7vc.com from the email on your account. We'll verify it's you and answer within the time the law requires. You can use an authorized agent where the law allows.

We may update this policy. If a change materially affects how we handle your information, we'll tell you in the app or by email before it takes effect, and update the date at the top.

SplitClub is operated by S7 Managed Reserves Fund, doing business as SplitClub. Privacy questions or requests: privacy@s7vc.com. Anything else: business@splitclubapp.com.