Privacy policy
Spolu is a free web app for splitting shared costs between families. We only process the data we need to do that. We don’t use analytics, ads or tracking tools, and we don’t sell data.
Controller
The app is operated by Milan Martiniak, Žilina, Slovak Republic, who is also the controller responsible for processing personal data. If you have questions about your data, write to us at kontakt@spolu.top.
What data we process
| Data | Where it comes from and why |
|---|---|
| Name, email, profile photo address and technical account identifier | From your Google account when you sign in. Used to sign you in and to let the other family members see who is in the family and who added an expense. Your email is not shown to other users. |
| Family: name, number of adults and children, colour, list of members, optionally an IBAN | Entered by you. Expenses are split by headcount; the IBAN is only used to create a payment link or QR code for those who need to send you money. |
| Events, expenses and recorded payments: name, place, dates, currency, description and amount of the expense, who paid, who it is split between, who added it | Entered by you and the other families in the event. We need them to work out who owes whom how much. |
| Invites: name of the event or family, name of the person inviting and family names | Created when you create an invite link. Shown to anyone who opens the link, even without signing in, so they know what you are inviting them to. A new link invalidates the old one. |
| App language (sk/cs/pl/en) | To show the app in your language. |
Who can see your data
- Event data is visible only to the families in that event. Family data is visible to its members and to the families you share an event with.
- The public settle-up link (an address starting with
app.spolu.top/s/) leads to a summary of the event stored in the database under a random code that cannot be guessed: family names, expenses, amounts, payments and the IBANs of families who entered one, so that others can send them money. Anyone with the link can read the summary, but it cannot be found or listed without it. It contains no account identifiers or email addresses. The summary is updated when a family opens the settle-up screen and deleted when you delete the event. Older links starting withapp.spolu.top/s#carry the summary in the address itself and are not sent to the server. - A PayMe payment link or QR code contains the IBAN, the amount and the recipient’s name. It opens your banking app; Spolu processes no payments and has no access to your bank account.
Processors and where data is stored
The app runs on the Google Firebase platform (Google Ireland Limited, Ireland, and Google LLC, USA): sign-in (Firebase Authentication), database (Cloud Firestore in the eur3 - European Union region) and web hosting (Firebase Hosting). Google acts as a processor under its data processing terms. For transfers to the USA, Google relies on the EU-US Data Privacy Framework and standard contractual clauses.
We host the fonts on our own server, so visiting the website does not contact Google Fonts.
Cookies and browser storage
Spolu uses no advertising or analytics cookies. It only stores in your browser what it needs to work: your sign-in (so you don’t have to sign in every time), a copy of the data so it works without a signal, and the app files (service worker) so that it loads quickly. Strictly necessary storage like this does not require consent. You can clear it by signing out or by deleting the site data in your browser.
Legal basis and retention
We process data so that we can provide the service you have chosen (Art. 6(1)(b) GDPR). We keep it for as long as you use the app. Expenses you delete are deleted straight away. Closing your account and deleting all your data is not yet available in the app itself - write to us at kontakt@spolu.top and we will delete it within 30 days. Expenses in shared events also belong to the other families, so when deleting we may anonymise them instead of removing them.
Your rights
You have the right to access your data and to have it corrected or erased, the right to restrict processing, the right to data portability and the right to object. You can correct most data directly in the app; we will help with the rest at kontakt@spolu.top. If you think we are handling your data incorrectly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
Children
Accounts are created by adults. For children we only record how many there are in the family, not their names or any other details.
Changes
If we change this policy, we will publish the new version on this page with a new effective date.