Privacy Policy for NeXsplit

Last updated: 9 October 2026

NeXsplit is published by Next eXtraordinary Intelligence Company ("we", "us"). This policy explains, in plain terms, what the app holds, what leaves your device, where it goes, and how to have it removed.

What we collect

NeXsplit has no account, no password, no sign-up. It does not ask for your name of record, your phone number, your email address or your postal address. It never asks for any government identifier.

What it holds is what you type in and what your group does:

• A display name you choose. When you first open the app you pick a name for yourself. We ask you to use a nickname rather than your real full name, and the app says so every time a name is entered, for yourself, for someone you add to a group, and when you rename yourself. We do not check what you type and we do not change it. If you enter your real name, your real name is what we hold. That is your choice, and this is us telling you plainly that the app will not stop you.
• Group names and expense labels. Free text too: "Friday Football", "Court", "Tea". The same applies: whatever you type is what we hold, so please do not put anything in them you would not want the other members of that group to see.
• Amounts, currencies, dates and who owes what. Split totals, per-person shares, due dates, whether a payment has been marked or confirmed, who checked in to a session, who voted in or out, and notes added to a shared kitty.
• An identifier for you. When you first open the app it generates a random identifier, a string of characters with no meaning, derived from nothing about you. It is how the app knows which entries are yours. It is not derived from your device, your phone number, or anything else about you.
• Your region and time zone, in coarse form. The app reads your device's region once, on your device, to suggest a currency, and a group records a time-zone name so that "today" means the same day for everyone in it. Neither is more precise than a country or a time-zone name.
• Your language and currency preference.

What we do not collect

• No phone number, email address, postal address, date of birth, passport, national ID, iqama or other government identifier. There is no field for any of these anywhere in the app.
• No photos. The app has no photo picker. A group's picture is one of a fixed set of built-in icons; member pictures are coloured initials drawn from the display name. The app never asks for photo-library access and cannot read your photos.
• No contacts. The app cannot read your address book. Members are added by typing a name.
• No location. The app does not request or use device location.
• No analytics, no advertising, no third-party trackers, no crash-reporting service. There is no advertising or analytics software inside NeXsplit. We do not build a profile of you, and we do not sell or share what you enter with advertisers or data brokers.
• No bank or card details. NeXsplit never connects to a bank and never processes a payment. If you buy additional group capacity, the purchase is handled entirely by Apple's or Google's in-app purchase system: your card and billing details go to them, not to us, and we never see them.

Where it is stored, and for how long

On your device. Everything you enter is stored in the app's own local storage on your phone. That copy is not encrypted by the app itself; it is protected by your device's own security: your screen lock and, on modern phones, device-level encryption. Anyone who can unlock your phone can read it. We are telling you this rather than letting you assume otherwise.

Where it is stored: on your device. NeXsplit records your groups and expenses in the app's local storage, on the phone or tablet that created them. We do not operate a server that receives your ledger, and we keep no copy of it.

Who can see it

• The other members of your group. That is the point of the app: your display name, the splits you are part of and whether you have settled are visible to the people in that group. Treat anything you type into a group as visible to that group.
• Us. Our operators can read the server's database in the course of running and repairing it.
• Our hosting and archive providers, as listed above.
• Nobody else. We do not sell it, rent it, or share it with advertisers or data brokers. If a court or a competent authority compels disclosure, we will comply with the law that applies to us.

Backups

Backups are how a lost group ledger comes back. They copy the whole log and cannot single out one person.

• The server backup copies three things: the event log, the outstanding invite codes, and the list of identifiers. Nothing else exists on the server to copy.
• You can also export your own data from inside the app, as a file you choose where to save. That file is yours; once it leaves the app we have no control over it, so keep it somewhere you trust: it contains your ledger in readable form.

Your choices, and how to exercise them

Write to privacy@nei.sa and tell us what you want. Because we hold no name, no email and no phone number, we cannot identify you from your message alone: we will ask you for your identifier. That is a direct consequence of holding so little about you. You can find your identifier in the app under Backup & restore, and tap Copy to copy it.

You can ask us to:

• Show you what we hold about your identifier.
• Correct a display name or entry.
• Remove your record from the member registry, so your identifier is no longer held as an active member.
• Complain, if you think we have handled something badly. We will answer, and you may also raise it with the data-protection authority where you live.

We will respond within 30 days.

Two limits we would rather state than bury:

1. A shared group's ledger is not yours alone, and we do not rewrite it. The log of what happened in a group is append-only by design: entries are never edited or removed, and corrections are added as new entries. If you were in a split with four other people, deleting your side of it would change what they owe. So we will not rewrite that log: for you, or for anyone asking about you.
2. The text you typed stays, for now. A display name, a group name, an expense label or a note you wrote remains in the group's log and in our archive copies. We are building the ability to remove that text from both the database and the archive, and when it is in place we will say so here and widen what you can ask for. Today we would rather tell you plainly that we cannot do it yet than imply that we can.

This is why the app asks you to use a nickname rather than your real name. We would rather you never put something there you might later want removed.

On your device: uninstalling NeXsplit removes the local copy. Deleting a group inside the app removes it from your device and records a deletion that removes it from other members' devices too.

Children

NeXsplit is a general-audience app and is not directed at children. We do not ask anyone's age and have no way to know it. We do not knowingly hold information about a child. If you believe a child has entered information into a group you administer, you can remove that member from the group; if you want the server copy dealt with, contact us at privacy@nei.sa.

Changes to this policy

We will update this policy whenever the app's handling of data changes, and we will change the "Last updated" date above. Where a change is significant, we will say so in the app.

Contact

privacy@nei.sa, Next eXtraordinary Intelligence Company.