Last updated: August 2026
This notice explains what Makan Split and Rumah Split collect about you, why, who sees it, and what you can ask us to do with it. It is issued under the Personal Data Protection Act 2010.
Makan Split splits a restaurant bill among the people at the table. Rumah Split settles rent and utilities among the people in a house. They share one account and one set of practices, and where something applies to only one of them, this notice says so.
Only what the product needs to work.
In Rumah Split, whoever runs a house adds housemates by typing their mobile number, so we may hold your number before you have heard of us. Three things follow, and they are commitments rather than descriptions.
This is enforced by the database, not by the screens. A request for something you are not allowed to see returns nothing at all.
We do not sell your personal data, and we do not share it so anyone else can advertise to you. We use these providers to run the service, and they process your data on our instructions:
We also disclose data where the law requires it, or to investigate fraud or abuse of the service.
Our servers are in Singapore and some of our providers operate elsewhere, so your data leaves Malaysia. We use providers who are contractually bound to protect it to the standard this notice describes.
Receipt photographs go as soon as the items have been read. A house group chat you send is never stored at all; what the reader found from it, which includes the housemates it saw and when each bill was mentioned, is deleted within 24 hours. Everything else stays while your account exists, and afterwards for as long as we need it to settle money that was still owed or to meet a legal obligation. When you delete your account we remove your personal data; a record of what a house owed can remain in that house without your name on it, because it is the other housemates’ record too.
Under the PDPA you may ask us to:
Write to the address below and we will answer. We may ask you to prove the number is yours before we act, because that is the only way we can tell it is you.
Data is encrypted in transit and at rest. Who may read which row is decided in the database itself rather than by the app, so a mistake in a screen cannot expose somebody else’s amounts. Staff access is limited to the people who need it. No system is perfect, and if a breach happens that puts you at risk we will tell you.
This service is not for people under 18. If you believe a child has given us personal data, tell us and we will remove it.
If we change this notice in a way that matters, we will say so in the app before it takes effect. For anything here, including a request about your data, write to makan-split@shardlab.com.