Updated October 25, 2026
Shared records,
considered carefully.
This notice describes Split Harbor’s web service and iOS beta. Keep only the personal information needed for your shared accounting in the service.
Who develops the app
Kotur Studio is the independent developer brand of Deepak Kotur. Contact privacy@koturstudio.com about privacy and data requests.
Accounts and shared records
Split Harbor uses an email address and account identifier for sign-in, plus group membership, expense allocations and repayment records for shared accounting. Supabase provides authentication and shared-record storage. Other members can see records authorized by their membership.
Bill imports and device storage
PDF parsing happens on your device or in your browser; the original PDF is not uploaded by the importer. Reviewed amounts, carrier, bill month, line names and last-four identifiers are stored when you save a bill and shared with authorized members. iOS drafts use local device storage. Web drafts you explicitly save are encrypted on the server so you can resume them. Use aliases and avoid unnecessary personal details about non-users.
Protection and optional notifications
On iOS, Face ID can protect the saved login on your device. Optional authenticator verification protects sign-in. Recovery codes are stored as hashes on the backend. Optional push notifications require an iOS device token or browser push subscription and use a generic update message without bill amounts or descriptions. Web login uses secure session cookies; browser notifications can be turned off in Settings or browser permissions.
Export and deletion
You can export records you are authorized to access from Settings. A deletion request blocks access immediately and removes login/profile identifiers during processing. Shared accounting retains an anonymous member so other people’s balances remain correct. It does not automatically find every mention of a person in shared free text. The requesting device removes known local drafts; other offline devices cannot be remotely wiped.
Service providers and security
Cloudflare hosts the website and web application, stores web session and encrypted draft data, and provides Turnstile abuse protection. Supabase stores account and shared accounting data. Resend delivers account and invitation emails; Zoho handles support email. Apple and browser push providers deliver optional notifications. These providers may process data in countries other than yours.
Retention and requests
Shared records remain available to authorized participants as described above. Expired web sessions, drafts and temporary email-processing records are cleaned up automatically. Encrypted operational backups are held separately in private GitHub storage; deleting an account does not immediately remove historical backup copies. Contact privacy@koturstudio.com to ask about access, correction, deletion or retention for your data. Avoid sending passwords or original bills.
Split Harbor has no advertising or behavioral analytics. See the website privacy notice for website and support information, and our Terms & conditions.