SPLYFF

Privacy Policy for the app SPLYFF

Controller

Rainer Borgelt, Taubenstraße 22, 40479 Düsseldorf, Germany
Email: apps@borgelt.de

In short

SPLYFF does not collect any data. Everything you enter stays on your iPhone. If you share a card with friends, it is also stored encrypted with Apple (iCloud). Only you and the people on the card have the key. I cannot read your entries.

What is stored on your iPhone

This data does not leave your iPhone unless you share a card. Deleting the app deletes it; only the dates in the keychain remain so the trial does not restart.

Sharing cards with friends (iCloud)

When you invite friends to a card, SPLYFF uses Apple’s iCloud (CloudKit). The card with all entries, the names of the people, the phone numbers you entered for them and the profile photos is encrypted on your iPhone and stored in the public area of the SPLYFF database at Apple. The key is only in the invite link and on the devices of the people on the card. Without it nobody can read the card, including me and Apple. Anyone with the invite link can join the card, so only share it with the people who belong to it. Everyone on the card sees all information in it, including names and phone numbers.

To let you invite people you have shared with before without a new link, SPLYFF creates a random identifier on your iPhone. It contains no personal information and is stored only encrypted in your shared cards. Invites without a link are sealed so that only the invited person can open them.

The identifier and the keys of your shared cards are stored in your iPhone’s keychain; with iCloud Keychain turned on they also reach your new iPhone. Cards shared with an older version stay in the iCloud of the person who created them until they move.

If you delete a shared card, it only disappears for you. If the person who created it deletes it permanently, it is deleted at Apple. Apple’s privacy policy applies to this storage.

Invite page and this website

Invite links lead to splyff.de. If SPLYFF is installed, the app opens directly. The page contains no data from your cards. The key is after the “#” in the link and is never sent to the server by the browser. As with any website visit, the server sees your IP address; the provider hosting splyff.de processes the technically necessary access data only to operate the site securely (Art. 6(1)(f) GDPR). splyff.de sets no cookies and uses no analytics or tracking services.

Exchange rates

When you enter an amount in another currency, SPLYFF downloads the official reference rates of the European Central Bank (www.ecb.europa.eu). Only this public file is requested, without any information about you or your cards. As with any request on the internet, the server sees your IP address.

Contacts and photos

If you pick people from your contacts, SPLYFF only receives the name and phone number of the selected people. The phone number is used to open the right WhatsApp chat when you request money; on shared cards, the others see it too. For photos, SPLYFF only receives the image you choose.

Card payments (Shortcuts)

If you set up the shortcut automation, your iPhone sends the amount, merchant and card name of a Wallet payment to SPLYFF. These are stored only on your iPhone as a suggestion. SPLYFF never receives card numbers or bank details.

Purchase

The one-time purchase “SPLYFF Unlimited” is handled by Apple through the App Store. I receive no payment data.

No ads, no tracking

SPLYFF shows no ads, uses no analytics or tracking services and shares no data with third parties. If you allowed sharing crash data with app developers in your iPhone settings, Apple provides me with anonymous technical crash reports.

Other apps

When requesting money, SPLYFF can open WhatsApp, Messages or a PayPal link. What you send there is subject to those providers’ privacy policies.

Contact by email

If you write to me about the app, I process your information to answer your request (Art. 6(1)(b) GDPR, otherwise (f)). The email is deleted once the request is done and no legal retention obligations apply.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) and the right to lodge a complaint with a data protection authority (Art. 77 GDPR). As I do not store any of your data, you can exercise most of these directly in the app or in your iCloud settings.

Changes

If anything changes about how SPLYFF handles data, I will update this page.

Last updated: October 2026