Cette page existe en français. Lire en français
Privacy — Spartito
Last updated 4 November 2026
The principle
Spartito keeps a group’s expenses — a trip, a shared flat, a couple, a dinner — and splits a bill item by item in Table mode. No ads, no account, no tracking, and it never moves money. Your groups live on your device and in iCloud. Friends without an iPhone can join a group in their browser, so unlike most Nidello apps, Spartito has a service of ours for the groups you open to guests by a link. It keeps what guests need to see, and erases it when you close the link, or after 90 days without use. It is listed in full below. It keeps no request log and knows no one’s email. A group you do not open to guests never reaches us.
What the app keeps
Spartito records what you put into it:
- your groups: name, kind, currency, colour and members, as the names you type
- expenses: title, amount, currency, the exchange rate and its date, who paid, how it is split, category, note and, if you add one, a photo of the receipt
- settlements, a kitty, recurring expenses, a budget, and the bills of Table mode
- the payment details a member chooses to give (an Interac email, a PayPal or Revolut name…) so others can pay them back
- your settings and your reminders
Where it lives
On your device and, if iCloud is on, in iCloud (CloudKit, run by Apple), in a container that belongs to Spartito alone; we cannot open it. Each group is its own space there: when you invite friends who have an iPhone, Apple shares that group, and only it, with them through iCloud sharing, receipt photos included. Nothing of that path goes through us. The keys that let you manage a group open to guests stay in your device’s keychain, never in iCloud.
What it asks permission for
Every one of these is optional. Refuse any of them and the rest of the app keeps working.
- Camera
- Only when you tap to photograph a receipt or a bill. The picture is read on the device: Apple’s text recognition (Vision) and, where the iPhone has it, Apple’s on-device model find the items, taxes, tip, currency and date, and translate a foreign receipt. Nothing is sent anywhere to read it. A bill photographed in Table mode is not kept; a receipt you attach to an expense is.
- Photos
- Apple’s photo picker gives Spartito only the picture you pick, without this permission.
- Notifications
- Polite reminders made on the device, when someone owes you or you owe someone: at most one a week per group. Nothing goes through a server.
- iCloud
- To keep your groups between your devices, and to share a group with friends who have an iPhone, through your iCloud account.
What leaves the device
The app has no analytics, no crash reporting, no advertising and no third-party kit of any kind. What it does send, it sends only to the services below, and only for what you asked it to do:
- Our guest service, spartito.nidello.ca
- A Cloudflare Worker and its database (D1), on Cloudflare’s free plan, with no request log and no telemetry. Cloudflare hosts it and processes the data on our behalf. It is used only for a group you open to guests by a link, and keeps only what follows.
- The group
- A copy of the group as the app publishes it: its name, the members’ names as typed, the expenses, settlements and balances, and the bills of Table mode. The payment details of a member appear only if that member chose to show them to guests. Never a receipt photo.
- Guests’ additions
- What a guest adds in the browser — their name, an expense, a settlement marked paid, the items they claim at the table — waits there until your app picks it up, and is then erased. No account, no email, no phone number, no location.
- Keys
- Only a fingerprint (SHA-256) of the key that lets your app manage the group and of the key in the guests’ link. The keys themselves stay in your keychain, and in the link.
- Erasure
- Closing the link erases everything at once; a new link makes the old one useless. A group with no publication from the app and no guest visit for 90 days is erased.
- Reports
- Anyone can report a group’s content from the guest page. The report is sent to us by email — the group’s identifier, its name, what guests see, the reason and the details typed — and nothing is kept by the service, not even who reported. We can remove a guest’s addition or close the group to guests; your app can refuse an addition.
- Abuse limits
- To slow down abuse, the service counts requests for a short moment under a fingerprint of the address and the day, computed in memory and never stored. No IP address is kept.
- Guests in a browser
- The guest page is a web app served by the same service: no cookies, no tracking, no external script or font. It keeps in the guest’s browser who they are in each group, additions not yet sent, the groups they opened and their language, and the last copy of a group to open it offline.
- Exchange rates
- The European Central Bank’s reference rates, downloaded from a public relay of ours (bivio.nidello.ca), which keeps no log. The request carries nothing about you or your groups; offline, the last table downloaded is used, or you type the rate.
- Settling up
- Spartito never moves money. To pay someone back it opens the payment app or site you choose (PayPal, Revolut, Wise, Venmo…) with their name and, where the service allows it, the amount, only when you tap, or copies their details for you to paste into your bank’s app. Those services’ own policies then apply.
Only what is listed above under our guest service reaches us. Our only processor is Cloudflare, which hosts it. Spartito Pro is bought through the App Store: Apple handles the payment, and we receive no payment details.
Other Nidello apps
Spartito puts a summary of each group — its name, kind, currency, number of members, total and your balance, never the expenses — in a folder the Nidello apps share on your device, so that Bivio, Ritrovo and Mescita can show it. It can start a group from a Cerchia circle or a Bivio trip you pick, and Mescita can hand it an expense to add. Nothing leaves your device for this.
Your data is yours
Export a group as CSV whenever you want; bring your groups from Splitwise, Tricount or Settle Up from their CSV export. Delete a group in the app and it is erased from your devices and your iCloud; if it was open to guests, close its link and it is erased from our service at once. If Pro ends, nothing is deleted: what Pro made stays readable.
Children
Spartito is not directed at children. Our service knows no one’s age or email; it keeps only the names people choose to type.
Changes to this page
If the app ever starts doing something this page does not describe, this page changes first. The date at the top says when it last did.
Your rights
Quebec’s Law 25, Canada’s PIPEDA and similar laws elsewhere give you the right to access, correct and delete the personal information a business holds about you. For Spartito, the group’s owner changes or removes anything in the app, closing the link erases the group from our service at once, and an unused group is erased after 90 days anyway. A guest who wants something removed can ask the group or write to us. Any question: [email protected].
Contact
Nidello — Canada — [email protected]