Privacy Policy for Receipta

1. Who We Are

Receipta is developed and operated by a sole proprietor based in Ontario, Canada. If you have any privacy questions or requests, please contact:

2. What Data We Collect

We collect the following types of information:

• Account information: email address, full name (optional), and login credentials (passwords encrypted at rest)
• Receipt data: images of receipts, extracted text, merchant and category details
• Device information: IP address, device model, operating system
• Usage data: actions within the app (e.g. number of scans), crash logs, in-app events
• Subscription data: status, expiration dates, and transaction identifiers (via RevenueCat)

3. How We Use Your Data

We use your data to:

• Provide core app functionality (e.g. receipt scanning, data categorization)
• Authenticate users and manage subscriptions
• Maintain your history and preferences
• Improve the accuracy of OCR and data models
• Communicate with you about updates and support
• Analyze trends and app performance

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent (e.g. for analytics, marketing emails, and when creating an account)
• Contractual necessity (to provide the Receipta service)
• Legal obligations (e.g. fraud prevention)
• Legitimate interest (e.g. product improvement, crash analysis)

5. Data Sharing and Third Parties

We do not sell your personal data. We only share your data with trusted third-party providers to:

• Process images via OCR (e.g. Google Cloud Vision)
• Manage subscriptions (e.g. RevenueCat)
• Store data securely in the cloud (e.g. DigitalOcean, Supabase)
• Analyze app performance (e.g. analytics tools, crash reporting)

All third parties must comply with applicable data protection laws and may only use your data to deliver agreed services.

6. SDKs and Tracking Technologies

Receipta uses third-party SDKs (e.g. RevenueCat, analytics) to manage subscriptions, analyze performance, and detect crashes. These may collect technical identifiers such as device IDs or anonymized usage data. Where required by law, we request your consent before enabling analytics or marketing SDKs.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide services. You may request deletion of your account and all data at any time by contacting info@receipta.app.

8. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your data
• Correct inaccurate or outdated information
• Request deletion of your data
• Object to or restrict certain processing activities
• Withdraw previously given consent (where applicable)

To exercise your rights, contact info@receipta.app. We’ll respond within a reasonable timeframe, in line with GDPR and PIPEDA.

9. International Data Transfers

Your data may be processed and stored on servers outside your country, including Canada and the U.S. We ensure all cross-border transfers comply with privacy laws like GDPR and PIPEDA, using adequate safeguards such as contractual clauses.

10. Children’s Privacy

Receipta is not intended for users under 16. We do not knowingly collect data from minors. If we discover a child has provided data, it will be deleted immediately.

11. Security

We implement technical and administrative safeguards to protect your data. However, no method of storage or transmission is 100% secure. We regularly review our security practices to mitigate risks.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material updates will be announced through the app or website. Continued use of Receipta after changes indicates your acceptance.

13. Contact Us

14. Push Notifications

With your permission, Receipta may send push notifications including scan confirmations, spending summaries, and product updates. You may disable these at any time in your device settings. Promotional notifications are only sent with prior consent.

15. Email Communications and Marketing

If you opt in, we may send occasional emails such as feature announcements, budgeting tips, or offers related to Receipta. You may unsubscribe at any time via email link or by contacting us. Transactional emails (e.g. login alerts, billing) may still be sent.

16. Use of Anonymized and Aggregated Data

Receipta may use anonymized, aggregated receipt data to generate insights — such as average product prices, spending trends, or category statistics. This data contains no personally identifiable information.

You may opt out of this anonymized aggregation anytime via app settings or by contacting info@receipta.app.