Get the app · Free

Privacy Policy

Effective date: 8 October 2026

ReceiptKit ("the app", "we", "us") helps you scan, save and find your receipts. Your receipts are private, so this policy explains in plain language exactly what happens to your data.

The short version

  • Your receipts, items, photos, mileage trips and invoices are stored only on your phone. There is no account to create and no cloud copy.
  • When you scan, the receipt text (or, in AI mode, the photo) is sent to our server and our AI provider only to read it. It is not stored on our server and is never used for advertising or to train AI models.
  • Anonymous usage statistics and crash reports help us improve the app. In the EU, EEA, UK and Switzerland we only collect them if you say yes. Everywhere else you can turn them off at any time.
  • The support chat and the Pro subscription are optional and are explained in sections 3.6 and 3.7.
  • We don't sell your data, and there are no ads.

1. Who is responsible

The data controller is the developer of ReceiptKit as shown on its App Store and Google Play page (India).

Contact for any privacy question or request: smainpcy@gmail.com

In the app: Profile → About and legal → Contact support (your Support ID is added automatically so we can help you).

2. Data that stays on your phone

These are stored only on your device. We cannot see them:

  • Receipts you save (store, date, amounts, taxes, items, notes, business or personal) and their photos
  • Imported PDF receipts and invoices
  • Mileage trips you type in (date, distance, rate, notes). The app does not use GPS or your location.
  • Unpaid invoices and their due dates
  • Tax reports and insights, which are calculated on your phone from your own receipts
  • Your settings and the count of free scans used this month

Backups and exports (PDF, Excel, CSV, backup file) are files made on your phone and saved or shared where you choose (for example Google Drive, iCloud, Files or e-mail). We cannot open them.

Deleting a receipt removes it and its photos from your phone. Uninstalling the app removes everything stored on the phone.

3. Data that leaves your phone

3.1 Reading a receipt (the scanning feature)

  • Auto mode: your phone reads the text of the receipt on the device. That text is sent to our server, which asks our AI provider to turn it into store, date, amounts and items.
  • AI mode: a reduced copy of the photo is sent the same way, so the AI can read it directly.
  • Sent together with it: a random device ID created by the app (not linked to your name, phone number or advertising ID), a short-lived sign-in token from an invisible anonymous Google Firebase account (no name, e-mail or password; used only to protect the service from abuse), your phone's language, and technical request data.
  • Our server (hosted by Railway Corp., cloud servers) processes the request in memory and does not store the receipt text or photo. It keeps short technical logs (time, request ID, device ID, number of items, error codes) for up to 30 days to keep the service working and to find errors. Your IP address is used only briefly, in memory, to block abuse (too many requests) and is not written to logs.
  • Our AI provider is OpenAI, L.L.C. (USA), used through its business API. Under OpenAI's API terms, this data is not used to train its models. OpenAI may keep it for up to 30 days to detect abuse, then deletes it.
  • Your permission: on iPhone and iPad the app asks you before your first scan ("Allow" / "Not now"); nothing is sent until you allow it. On Android, by scanning a receipt or importing a PDF you agree. In both cases this means its text (or photo) is sent to our server and to OpenAI to read it, as described in this section.
  • Your choice: you can turn AI reading off at any time in Profile → Settings → Privacy → "AI receipt reading". Then nothing is sent. You can always type a receipt in by hand instead.
  • Why (legal basis): your consent and the feature you asked for (GDPR Art. 6(1)(a) and 6(1)(b)).

3.2 PDF receipts and invoices

When you import a PDF (with "Import PDF" or by sharing it to the app from Files, Mail and similar apps), the app reads the text inside the PDF on your phone and sends that text for reading exactly as in 3.1. If the PDF has no text (a scanned page), the app makes temporary pictures of up to 4 pages on your phone and reads them like photos. The PDF file itself stays on your phone. It is not uploaded.

3.3 Anonymous usage statistics (Firebase Analytics)

If allowed (see section 5), the app sends usage events without receipt content, such as "a receipt was scanned", "a receipt was saved", "a search returned results", which screens are opened, the app version, phone model, operating system, language and approximate country.

It also sends a few general settings: the kind of work you picked in the welcome screens (for example driver or freelancer), the reading mode, whether the mileage log or invoices are turned on, and a rough range of how many receipts are saved (never the receipts themselves).

Each phone has a random app-instance ID. We also attach the app's Support ID (a short form of the random device ID) so support can find technical problems you report.

Never sent: receipt text, store or item names, amounts, search words, photos, mileage trips, your name, e-mail or phone number.

  • Provider: Google Ireland Ltd. / Google LLC (Firebase). Kept for up to 14 months, then deleted.
  • Why: to learn which features help people and where the app fails. EU/EEA/UK/Switzerland: your consent (GDPR Art. 6(1)(a)). Elsewhere: our legitimate interest in improving the app, and you can switch it off.

3.4 Crash reports (Firebase Crashlytics)

If allowed (see section 5), when the app crashes or a scan fails, a technical report is sent: the error, the app's state (for example the screen and step), app version, phone model, operating system and the Support ID. No receipt content.

  • Provider: Google (Firebase). Kept for 90 days.
  • Legal basis: same as 3.3.

3.5 App settings (Firebase Remote Config)

The app downloads a few settings from Google Firebase (for example how many free scans a month are included). This uses a random Firebase installation ID and sends no personal or receipt data.

  • Legal basis: needed to run the app (GDPR Art. 6(1)(b)).

3.6 Support chat (optional)

If you open "Chat with us", the app uses the same invisible anonymous Google Firebase account as for scanning (no name, e-mail or password; see 3.1) so that only your phone and we can read your chat.

We store in Google Firebase (Firestore): the nickname you choose, your messages, their times and read status, and technical context that helps us answer: Support ID, app version, phone model, operating system, language, country and time zone, whether you have Pro, how many free scans you used, how many receipts are saved, whether the app has asked you for a rating, and recent error codes. Never receipt contents or photos, unless you type them yourself.

If you turn on reply notifications, we also store your phone's push token (Firebase Cloud Messaging) so our server can tell you when we reply. The notification shows the start of our reply and is delivered through Apple / Google push services.

We may use AI tools to help us draft replies to your messages. A person reads and sends every reply.

  • Kept until you delete the chat (in the chat, or with "Delete all my data"), or we delete it after your question is answered and the chat has been inactive for 12 months.
  • Why: to answer you (GDPR Art. 6(1)(b)). The chat is optional.

3.7 Pro subscription (optional purchases)

Payments are handled by Apple (App Store) or Google (Google Play). We never see your card or bank details.

Our provider RevenueCat, Inc. (USA) checks and stores the subscription status for the app's random device ID: which plan, purchase and renewal dates, price, currency and store country, and whether a free trial was used. This is how the app knows you have Pro, also after "Restore purchases".

  • Kept while you have or had a subscription, and as long as tax and accounting laws require.
  • Why: to provide what you bought (GDPR Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).

3.8 Reminders

Reminders (monthly export, tax period, invoice due date, receipt dates) are planned on your phone only, as local notifications. No data is sent for them.

3.9 Exchange rates (receipts in another currency)

When a receipt is in another currency than your own, the app asks a public exchange-rate service for today's rate. Only the two currency codes are sent (for example "USD" and "INR"): never an amount, a store, or anything else from the receipt. Like any internet request, the service sees your IP address.

  • Services: ExchangeRate-API (open.er-api.com) and Frankfurter (api.frankfurter.dev, European Central Bank rates).
  • The rate is saved with the receipt on your phone. You can type your own rate instead, and nothing is asked when you are offline.
  • Why: to show the total in your own currency, a feature you use (GDPR Art. 6(1)(b)).

3.10 E-mails you send us

"Contact support" opens your own e-mail app. What you send us by e-mail is used only to answer you and is kept until your request is resolved, at most 12 months.

4. What we don't do

  • No selling or renting of personal data. No "sharing" for cross-context behavioral advertising.
  • No ads and no advertising IDs. No tracking across other apps or websites.
  • No location tracking and no GPS.
  • No automated decisions with legal or similarly significant effects on you.
  • No account you create, no login, no cloud storage of your receipts. (Scanning and the support chat use an invisible anonymous sign-in, with no name, e-mail or password; see 3.1 and 3.6.)

5. Your choices

AI receipt reading: on iPhone and iPad it is off until you allow it before your first scan; on Android it is on when you scan. Turn it off at any time in Profile → Settings → Privacy → "AI receipt reading".

Statistics and crash reports:

  • EU, EEA, UK and Switzerland (based on your phone's region settings, and when the region is unknown): the app asks you once, with "Allow" and "Don't allow". Nothing is sent before you answer, and nothing is sent if you choose "Don't allow".
  • Other countries: on by default.
  • Everyone can change it at any time: Profile → Settings → Privacy → "Anonymous statistics". Turning it off stops collection immediately and deletes the analytics ID stored on your phone.

6. Deleting your data

  • In the app: Profile → Settings → "Delete all my data" removes every receipt and photo on your phone and your support chat. This cannot be undone.
  • One receipt: delete it in the app. Its photos are removed too.
  • Uninstalling the app removes everything stored on the phone.
  • Data held by our providers (statistics, crash reports, server logs, subscription status): write to smainpcy@gmail.com with your Support ID (Profile → About and legal → Support ID) and we will delete it, unless the law requires us to keep it.

7. Permissions the app asks for

  • Camera: asked the first time you scan. Used only to scan receipts. Photos are saved in the app on your phone; in AI mode a reduced copy is sent to be read (section 3.1).
  • Photos / Gallery: used only when you choose to add a receipt from your photos. The app receives only the photos you pick.
  • Files: no permission is needed. The app only receives a PDF you pick or share to it, and only saves files where you choose.
  • Notifications: asked only when you turn on a feature that needs them: reply notifications in the support chat, or a reminder. You can turn them off in the app or in your phone's settings.

The app works without the camera if you type receipts in by hand.

8. International transfers

Our providers (OpenAI, Google, Railway, RevenueCat, and the exchange-rate services) may process data in the United States and other countries. For transfers from the EU/EEA, UK and Switzerland they rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

9. How long we keep data

  • Receipts, photos, PDFs, mileage trips, invoices, settings (your phone): until you delete them or uninstall the app
  • Receipt text / photo sent for reading (our server): not stored, processed in memory only
  • The same, at OpenAI: up to 30 days for abuse checks, not used for training
  • Technical server logs (Railway): up to 30 days
  • Usage statistics (Google Firebase): up to 14 months
  • Crash reports (Google Firebase): 90 days
  • Support e-mails (our mailbox): until resolved, at most 12 months
  • Support chat: nickname, messages, context, push token (Google Firebase): until you delete it, or 12 months after the chat goes quiet
  • Subscription status and purchase history (RevenueCat, Apple / Google): while you have or had Pro, and as tax law requires

10. Your rights (everyone)

Wherever you live, you can ask us to: access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (this doesn't affect earlier processing). You can also complain to your data protection authority.

  • Receipts on your phone are fully under your control (export, delete, uninstall).
  • For statistics, crash reports or server logs: write to smainpcy@gmail.com with your Support ID (Profile → About and legal → Support ID). Because we don't know your name, the Support ID is how we find your data.
  • We answer within 30 days (or sooner where your local law requires). We may need to confirm the request comes from the phone concerned (for example by asking for the Support ID shown in the app). We will never treat you differently for using your rights. You can also let an authorised agent ask for you.

11. Extra information for your region

European Union, EEA, United Kingdom, Switzerland (GDPR, UK GDPR, Swiss FADP)

  • Legal bases are given in section 3. Statistics and crash reports are only collected with your consent.
  • Transfers outside your region: Standard Contractual Clauses / EU–U.S. Data Privacy Framework (section 8).
  • You can complain to the data protection authority where you live or work.

United States (California CCPA/CPRA, and the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states)

  • Categories collected in the last 12 months: identifiers (random device ID / Support ID, app-instance ID), internet or device activity (app usage events, crash data), customer content you choose to scan (receipt text or photo, processed only to read it), commercial information (Pro purchase history, via RevenueCat) and messages you send in the support chat. No sensitive personal information is used to infer anything about you.
  • Sources: the app on your phone. Purposes: providing the scanning feature, security, fixing errors, improving the app (section 3).
  • We do not sell or "share" personal information (for cross-context behavioral advertising), and we don't use it for targeted advertising or profiling. So there is nothing to opt out of. You can still turn statistics off in the app.
  • Your rights: know/access, delete, correct, and not to be discriminated against. Contact us as in section 10.

Brazil (LGPD)

Contact person (encarregado): smainpcy@gmail.com. You may also contact the ANPD.

India (Digital Personal Data Protection Act)

Grievance contact: smainpcy@gmail.com. We process your data for the purposes in section 3, based on your consent or legitimate use. You may also approach the Data Protection Board of India.

Canada (PIPEDA), Australia (Privacy Act), New Zealand, Singapore (PDPA), Japan (APPI), South Korea (PIPA), Mexico (LFPDPPP), Chile, UAE, Saudi Arabia (PDPL), Kuwait and other countries

  • The data, purposes, recipients (OpenAI — USA; Google — USA/EU; Railway — cloud servers; RevenueCat — USA), the countries they are in, what is sent and how long it is kept are listed in sections 3, 8 and 9. Receipt content is sent to them only when you scan, over an encrypted connection.
  • You have the rights in section 10 (in Mexico: access, rectification, cancellation and opposition — "ARCO"). For a complaint, contact us first, then your local data protection authority.

12. Security

Data sent from the app travels encrypted (HTTPS/TLS). Our server does not keep receipt contents. Access to our systems is limited to the people who run the app. No system is 100% secure, but we collect as little as possible so there is little to protect. If a breach affects your data, we will inform you and the authorities as the law requires.

13. Children

The app is not directed at children under 16 (under 13 in the USA), and we don't knowingly collect data from them. If you believe a child has sent us data, contact us and we will delete it.

14. Future features (accounts, cloud backup)

The app has no account today. We may add optional sign-in and cloud backup later (so receipts can move to a new phone). They will always be optional, and before they are available we will update this policy — what is collected, who processes it, where and for how long — and tell you in the app. Nothing changes for you until then.

15. Changes to this policy

If we change this policy, we update the date at the top and, for important changes, tell you in the app before they apply.

16. Contact

The developer shown on the App Store / Google Play page (India)

E-mail: smainpcy@gmail.com