Service providers

• Supabase: our database, sign-in, file storage and server functions. Receives: everything in your account. Based in: United States (data stored in Northern Virginia).
• Vercel: hosting for splitclubapp.com. Receives: your network address, browser details and the pages you visit, in its request logs. Based in: United States.
• Amazon Web Services: hosting for SplitClub's own usage analytics, for the apps and the website. Receives: usage events (screens, searches, bookings) with hashed device and account ids, the city being browsed, and your network address for rate limiting. Based in: United States.

• Stripe: card payments, payouts to businesses and wallet withdrawals (Stripe Connect), fraud checks, and ID checks for businesses (Stripe Identity). Receives: your name, email, card and billing details (entered directly with Stripe), payment history and, for payouts, identity and bank details. Based in: United States.

• Apple: Sign in with Apple, push notifications, Apple Pay and Apple Wallet passes. Receives: an Apple user identifier (and your name and email only if you choose), device push tokens and the contents of passes you add. Based in: United States.
• Google Firebase: sending phone verification codes, push notifications, app analytics, crash reports (Crashlytics) and checking that requests come from the real app (App Check). Receives: your phone number when you verify it, device push tokens, your SplitClub account id, screens and features used, and device and app details. Based in: United States.
• Google Analytics: visit analytics for splitclubapp.com, with Google signals and ad personalization off. Receives: pages visited, the referring site, approximate location, browser details and its own cookie. Based in: United States.
• Meta (Facebook SDK): measuring SplitClub's app ads on Meta. Receives: app installs and opens, sign-ups and payments (with the amount), and device details. Not your name, email or phone number. Based in: United States.
• Sentry: crash and error reports. Receives: your SplitClub account id, device and app details, the last few screens you opened, and error messages with emails, phone numbers and keys removed. Based in: United States.

• Duffel: flight bookings, with the airline you choose. Receives: each traveller's name, date of birth, gender, email and phone, as the airline requires. Based in: United Kingdom.
• LiteAPI (Nuitée): hotel bookings, with the hotel you choose. Receives: the names and emails of the person booking and the guests. Based in: Ireland (data processed in the United States).

The airline or hotel then receives your booking details under its own privacy policy.

• OpenRouter: routing what you type to SplitClub's assistant (and what businesses send to our AI tools) to an AI model, which returns a suggestion. Receives: the text you type, and files you attach to a question. Not your contact details. Based in: United States. The models it routes to are run by their providers, such as Google and OpenAI.
• OpenAI: translating the app's text, and drafting events from popular searches. Receives: the app's own text, and search words without who searched. Based in: United States.

• Resend: sending our emails: sign-in links, receipts, booking updates and our newsletter. Receives: your email address, first name and the email's contents. Based in: United States.

• IPinfo: looking up the approximate location of a network address that calls our partner API or MCP server, to detect abuse. Receives: the network (IP) address only. Based in: United States.
• RapidAPI: looking up the public Instagram profile behind a handle you give us, through an Instagram data service on its marketplace. Receives: the Instagram handle. Based in: United States.

These aren't our service providers, but they receive what's needed when you use SplitClub: the people in your splits and nights, the business providing what you book (and its booking system, if it uses one), and any AI assistant you connect to your account, within the permissions you approve. Our Privacy Policy explains what each can see.

Your data is stored in the United States. How we protect it is on our Security page, and how we handle transfers from the EU and UK is on Compliance. We update this page when we add or change a provider. Questions: privacy@s7vc.com.