Round & Split only processes user input on the device. No user input is retained once the app quits. No data is sent over the network. User preferences (such as the current tip rate) are persisted on the local device. This app uses the built-in email mechanism and does not know the actual email content once the user enters the email view.