Privacy Policy

Last updated: 2026-10-19

This Privacy Policy explains how Receipt Aid (“the app”, “we”) collects, uses and protects your personal data when you use the Receipt Aid mobile app and related services.

1. Who is responsible

The controller of your personal data is Serhii Holovatiuk, Ukraine. Contact: [email protected].

2. What data we collect

• Phone number — to create your account and sign you in with a one-time SMS code.
• Profile settings — name (optional), currency, language and time zone.
• Receipts — photos of receipts you upload and the data recognised from them: store, address, date, items, prices and totals.
• Location — only if you allow it: your location when you upload a receipt or open offers. We store it with the request to identify the store and show offers nearby. You can turn location off at any time in the app or in your phone settings.
• Device data — an installation identifier, device platform and, if notifications are enabled, a push notification token.
• Technical data — IP address, device and app information and request times, used for security and to prevent abuse.

We do not access your contacts, other photos in your gallery or payment card data.

3. How we use your data

• to provide the service: sign-in, receipt recognition, expense statistics, warranty and return reminders, price history;
• to show offers relevant to your location and purchase categories;
• to send notifications you have allowed;
• to protect the service from fraud and abuse, for example by limiting the number of SMS codes;
• to produce aggregated statistics that do not identify you.

We do not sell your personal data and do not use it for third-party advertising.

Businesses that use the Receipt Aid business cabinet (for example, stores that have confirmed they own a store) receive only aggregated, anonymised statistics, such as the number of receipts, the average receipt and busy hours for their store or the area around it. Figures based on fewer than 10 people are hidden. Businesses never receive your name, phone number, location, individual receipts or anything else that identifies you.

If you request access to the business cabinet on our website, we use the contact details you send (name, work email, phone, company) only to answer your request and set up your account.

4. Legal bases (EU/EEA and UK)

We process your data to perform our agreement with you (providing the app), on the basis of your consent (location and notifications; you can withdraw it at any time), and on our legitimate interests (security, preventing abuse and anonymous statistics).

5. Service providers

We share data only with providers that help us run the service, and only as much as they need:

• Twilio Inc. (USA) — sending SMS sign-in codes (your phone number);
• Google LLC (USA) — recognising receipt photos (Gemini API) and delivering push notifications (Firebase Cloud Messaging);
• Cloudflare, Inc. (USA) — network protection and secure delivery of traffic.

Receipts and account data are stored on servers operated by us. Where data is transferred outside the EU/EEA, we rely on the providers’ standard contractual clauses or equivalent safeguards. We may disclose data when required by law.

6. How long we keep data

We keep your data while your account exists. When you delete your account, you choose to delete everything, or to delete your profile and keep your receipts in anonymised form, no longer linked to you or your phone number. Security records, such as sign-in requests, are kept only as long as needed to protect the service.

7. Your rights

You can access, correct, export or delete your data, restrict or object to its processing, and withdraw your consent. Most of this is available in the app under Profile & Settings; for anything else, write to [email protected]. If you live in the EU/EEA or UK, you can also complain to your local data protection authority.

8. Deleting your account

In the app: Profile & Settings → Delete Account. Without the app: see https://receiptaid.com/delete-account.

9. Security

Data is transmitted over encrypted connections (HTTPS). The sign-in token is kept in your device’s secure storage, and access to our servers is restricted.

10. Children

Receipt Aid is not intended for children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. The current version is always published on this page; we will notify you in the app about significant changes.

12. Contact

Questions and requests: [email protected].