Privacy

Hanley Creative Ltd (company number 14528991, registered office Pennyroyal, Station Road, Tring, England, HP23 5QY) is the data controller for Splits. Write to hello@hanleycreative.co.uk with any question about your data.

• The browser log. At app.getsplits.co.uk your workouts, routines, body weights, favourites, and settings are kept in your browser's local storage. They are not sent to us unless you sign in on the phone app, which syncs the journal.
• People you know. Names you pick from your contacts or type in stay on the device. They are never uploaded, and we do not read your Google account or your address book on a server.
• Screenshot import. A screenshot you choose is read in the browser to suggest distance and time. The image is not uploaded. We only count how many imports you have used this month.
• Apple Health. Splits describes Apple Health but reads nothing from it.
• Share cards. The card is drawn on your device and saved as an image. Where it goes after that is up to you.

You can log without an account. If you create one, we store:

• your email address and a hashed password, or the ID Google gives us if you sign in with Google
• a display name and username
• your phone number, only if you choose to verify one, plus the short-lived code used to check it
• your journal: sessions, routines, exercises, and body weights that the phone app syncs
• preferences such as units, rest timer, and theme
• whether you have Pro, how you got it, and a Stripe customer reference
• the number of screenshot imports used this month

We use this to run your log, sync it between devices, and apply the free and Pro limits. The legal basis is the contract we have with you when you use Splits, and our legitimate interest in keeping the service working and secure.

• Supabase hosts the account database in London (AWS eu-west-2). Row level security means one person cannot read another's journal.
• Vercel serves getsplits.co.uk and app.getsplits.co.uk and keeps short-lived request logs.
• Google handles sign-in if you choose Google. We receive your email address and a Google ID, nothing more.
• Stripe takes payment for Pro in the browser. Card details go to Stripe and never touch our servers. Stripe tells us whether a payment or subscription is active.
• Apple and Google handle purchases made inside the iPhone and Android app under their own privacy terms.
• SendGrid sends the welcome email. Twilio sends the phone verification code.

We do not sell your data and we do not run ads. Some of these providers process data outside the UK. Where they do, transfers are covered by UK adequacy decisions or standard contractual clauses.

Splits keeps your sign-in session in local storage in the browser. There are no advertising cookies and no third-party analytics. Vercel keeps request logs for a short time to keep the service running and to spot abuse.

Account data stays while your account exists. Phone verification codes expire within minutes and are removed. Stripe keeps payment records for as long as tax law requires. If you delete your account, we remove your journal and profile from the database; backups roll off within 30 days.

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@hanleycreative.co.uk and we will answer within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

To delete a browser-only log, clear the site data for app.getsplits.co.uk in your browser, or use Reset in Profile.

Splits is not for anyone under 16. If you think a child has created an account, tell us and we will remove it.

When this page changes, the date at the top moves. If a change affects what we collect or why, we will tell you in the app or by email first.