Split it v2.2.0: Safe to host, and easier to live with

Safe to host, and easier to live with. The server now checks the money on every save, every change leaves a trail, nothing you do offline is lost without a word, sign-in gets a second step, and backups leave the laptop locked.

Highlights

• History on every expense. Open an expense or payment to see who added it, who changed it and when, with the old and new values. The laptop writes it, so no phone can skip it. Each group also gets an Activity list.
• Deletes always go to the bin, and people are told. Removing an expense or payment sends it to Recently deleted, says who removed it, and notifies everyone in it. Anyone in it can put it back.
• Offline changes are never lost silently. If the laptop refuses something you did offline, the app tells you which change and why, and keeps it in a Not saved list with a Redo button.
• No more shared lockout behind a proxy. Behind Docker, Traefik, Coolify or Cloudflare, one person's wrong passwords no longer lock out the whole house.
• Locked backups that survive the laptop. Point Split it at a USB drive or a synced folder and the records go there every 6 hours. Set a passphrase and only it can open them.
• The server checks the numbers. Shares have to add up to the total, and only the person who was paid can say a payment arrived. Until now the page checked this and the server trusted it.
• Sign-in code. Add a 6-digit code from an authenticator app as a second step after your password, with backup codes for a lost phone.

New

• New home screen icons: a split house on yellow, with no characters.
• Split it can be listed in the official MCP registry (server.json), so assistants and directories can find it.
• History on every expense and payment: the last 20 changes, with who, when, and the old and new amount, title, date, shares and who paid.
• Activity for each group: a new Activity button on the group page lists recent adds, changes, removals and payments. Tap one to open it.
• Two people editing at once: if someone else saves an expense while you have it open, your save is stopped instead of overwriting theirs. The app says "Someone else changed this while you had it open. Have a look and try again." and shows you the new version.
• Hand a group over: the person who runs a group can pass it to someone else in it, from Group settings.
• Download my data and Delete my data, in your profile under Your data and privacy. Deleting needs your password. Expenses you share with others stay, shown as "Former member", so nobody's balance changes, and groups you made pass to someone still in them.
• Not saved list: changes the laptop couldn't save stay on Home and in the pill at the top until you tap Redo (the form opens again with what you typed) or dismiss them. The pill also says "Waiting to sync (N)" and when the phone last caught up.
• Bring old expenses along: invite someone you've been tracking by name (a private contact, or a name-only member of a group) and their invite link carries that history. After they join they see what's waiting, with every entry and their share, and tap "Yes, that's me" or "Not me". Someone already on Split it gets the same choice as a request. The server moves everything in one step and checks that every balance comes out the same; either of you can undo it for 7 days. Anyone in a group can hand over its name-only member, and the group gets a notification. Private expenses that also include other people not on the app stay with you, and the new person gets one "Carried over from before you joined" line for their part.
• @tags: everyone gets a unique tag (changeable in your profile). Add friend finds people by exact tag or checked email and sends a request they accept. No list of everyone once a Split it has more than 15 people.
• Friend link with a QR code in your profile: anyone on Split it who opens it becomes your friend. Make a new link any time and the old one stops working.
• "Is Mohit your Mohit?": when someone on the app shares a first name with a person you track by name, Home suggests sending them that history (never on its own).
• Add friend shows your open invite links, friend requests and hand-overs, with Cancel and Undo. The join page fills in the invited person's name and says how much is waiting for them, without showing amounts.
• Sign-in code (profile, Signing in). Works with any authenticator app. Eight backup codes, each good once. The owner can turn it off for someone who lost their phone, from the owner's page or with node server.js code-off NAME.
• A second place for backups: set BACKUP_COPY_DIR in split-it.env. The records go there every 6 hours (one file a day, 14 kept), and each receipt photo is copied there once. The owner's page has a "Copy off the laptop now" button.
• Locked backups: set BACKUP_PASSPHRASE and the copies off the laptop become .locked files that only the passphrase opens. The owner can also download a locked backup ("Download everything (locked)", or "Download locked…" to pick a passphrase for one download).
• Restore from the laptop: node server.js restore FILE puts back a .zip, a .locked file or a daily db-….json, even while the app is running. Use it for backups over 100 MB.
• Time zone: set TZ so reminders, bill dates and "today" follow the house's clock. The owner's page shows the server's zone and warns when it's UTC or differs from the owner's phone.
• Home currency: set HOME_CURRENCY (for example USD or EUR) and amounts, notifications, the calendar and the AI assistant all use it. It stays CAD unless you change it.
• Trip currency: in group settings, pick the currency you mostly pay in. New expenses there start in it and are turned into your home currency at the day's rate, plus a card fee (2.5% unless you change it, 0 for cash). The expense says "includes 2.5% card fee", and you can change the fee on any single expense.
• Who takes over a bill: if someone leaves a group while they're still in a bill, the bill pauses instead of charging them. The group page asks who takes over, with a button for each person or "Split it between the rest". Anything that came due while it was paused is added once someone picks.
• Make a new calendar link: shared it by mistake? Make a new one and the old one stops working.
• Two people paid: on a new expense, tap "Two people paid" and enter what the second person paid. It's saved as two entries, so the balances come out exactly right.
• Record a payment between two other people in the group. The settle-up list shows "Record it" on their transfer, and "waiting for … to confirm" once it's recorded.
• On a person's page in a group: the transfers that clear their balance, and "Who pays these bills now?" when they pay a bill.
• "Yes, got them all" when three or more payments are waiting for you to confirm.
• Swap a chore: open a chore and tap "Swap with …". They take this turn, you take theirs, and they get a notification.
• Share into Split it: with the app on your home screen (Android), share text from another app and it lands in quick add.
• Quick add understands money coming in: "refund 20 from costco" or "sold the couch 90" opens with Money coming in turned on.
• Connect your own AI assistant from the app: your profile has a new AI assistants section with your connector link, steps for Claude, a list of the assistants and keys that act as you (with when each was last used), and a Disconnect button for each. Anyone can make their own key for an assistant that asks for one, without the laptop command line.
• Your AI assistant can do more: split by shares or exact amounts, tell you who should pay whom, list the bills coming up, and sum up a month. After adding an expense it says what your own share is, which Budget it uses to count only your share in your budget.
• The owner's page says when a newer Split it is out, with a link to what changed. UPDATE_CHECK=off turns that off.
• A "What's new" card on Home after an update, shown once.

Improved

• When someone removes an expense or payment you're in, you get a notification ("Ana removed Hydro") and a message in the app, with a link to it in Recently deleted.
• When the server refuses a change, the app gives the server's own reason in plain words, for example "Only Ana, who runs this group, can rename it", instead of a general "You don't have permission". Group messages name whoever runs the group now, so they stay right after a hand-over.
• Your profile says plainly who can see what: groups are private from housemates who aren't in them, but not from whoever runs the laptop.
• You stay signed in while you use Split it: each day you open it, your sign-in runs another 90 days.
• Too many wrong passwords for one account now slow its sign-in down for a short while instead of locking that person out. Five misses from one visitor still mean a 15 minute wait for that visitor.
• Connecting an assistant: if you're already signed in to Split it in that browser, one tap on Allow is enough. People who sign in only with Google can connect one too. The connect page shows, in large type, the address your key goes to, so a look-alike app is easy to spot.
• Moving someone out, handing over their bills, "Yes, got them all", linking a guest, making or editing a group, "Two people paid", pasting a list, removing a friend, adding a comment and the Splitwise import now save all at once: everything goes in or nothing does, so balances are never left half-updated.
• A change that keeps failing no longer holds up everything behind it: after a few tries it's set aside and you're told. Sending gives up after 20 seconds instead of hanging, and the phone retries with growing waits.
• Backups are taken every 6 hours and each time the app starts, so every update begins with a fresh copy. The last 12 are kept, plus 30 daily copies and the Sunday copies for a year.
• Backups are written to disk as they're made, one photo at a time, instead of built whole in memory. Restoring ...