ReceiptPilot holds financial and purchase information, so we've tried to write this in plain terms rather than dense legal language.

• Overview
• What we collect
• AI scanning
• Photos
• Recall & deadline alerts
• Storage & security
• Sharing
• Retention & deletion
• Children
• Changes & contact

1.Overview

2.What we collect

You give us this information directly by using the app:

Category	Examples
Account	Email address and password (hashed by our authentication provider — we never see or store it in plain text).
Receipts	Merchant, amount, category, date, notes, savings, return-by and warranty-end dates.
Gift cards	Store name, balance, card number, PIN, expiration date.
Photos	Receipt photos, gift card front/back photos, if you choose to attach them.
Device & push token	A push-notification token, so we can deliver recall and deadline alerts.
Scan usage	Monthly scan count and any bonus scans earned from watching a rewarded ad. We never collect payment or billing information — ReceiptPilot is free, with no purchases.
Advertising	Our ad provider, Google AdMob, may collect device/advertising identifiers and app usage data to show ads. On iOS, this only happens with your permission via the App Tracking Transparency prompt; declining still shows ads, just less targeted ones.

We do not collect your location, contacts, browsing history, or any data unrelated to the purchases you choose to log.

3.AI-powered scanning

When you scan a receipt or gift card photo (or paste in a forwarded receipt email), we first try to read it using Google Cloud Vision's text-recognition (OCR) and our own server-side pattern matching — no AI model sees your receipt at this stage, and most scans never need one. Only when that isn't enough to confidently read the details do we forward the text (or, as a last resort, the photo itself) to Anthropic's Claude API to fill in the rest. AI-powered scanning is limited to 30 scans per account per month, with the option to earn bonus scans by watching a short rewarded ad — see the Compliance page for details.

• Our Google Cloud Vision and Anthropic API keys live only on our server; neither is ever included in the app itself.
• When a scan does reach Anthropic, it's processed only to return the extracted data. Under Anthropic's commercial API terms, this content is not used to train their models, and is automatically deleted from their systems within 30 days (with limited exceptions for abuse investigation or legal requirements). Google Cloud Vision processes the image only to extract text and does not retain it after the request completes.
• The extracted data (text fields) is saved to your account. The photo or email text you scan is used only to read that data — see the next section for where the photo itself is stored.
• If you paste in a forwarded receipt email instead of a photo, that's a manual action you take — ReceiptPilot doesn't create a unique forwarding address or automatically receive your email. Once the details are extracted, the raw pasted text itself isn't kept; only the extracted fields (merchant, amount, date, etc.) are saved to your account.

4.Photos

5.Recall & deadline alerts

ReceiptPilot checks public product recall data from the U.S. Consumer Product Safety Commission (CPSC) and the FDA once a day, and compares it against the store names and notes on your receipts to see if something you bought was recalled. This matching happens entirely on our server — your receipt data is never sent to CPSC, the FDA, or any other external recall database. We only pull their public recall lists into our own system to compare locally. We also send you a notification a few days before a return deadline, warranty expiration, or gift card expiration you've set.

These are essential service notifications, not marketing — ReceiptPilot doesn't currently send promotional emails, newsletters, or marketing push notifications. Account emails (like verification and password reset, sent via our authentication provider) and recall/deadline alerts are part of the Service itself and can't be separately opted out of while your account is active. You can disable push notifications entirely in your device's notification settings, though this also means you'll miss recall alerts.

6.Storage & security

Your account data is stored with Supabase, a hosted database and authentication provider. All data is encrypted in transit (HTTPS/TLS). Database access is enforced with row-level security rules, meaning the database itself rejects any request for your data that isn't authenticated as you — this is enforced at the database layer, not just in the app, so other users can never access your data.

A small number of automated, backend-only processes are a necessary exception: the daily recall check and deadline-reminder jobs described above need to scan across all accounts to find matches, and our Supabase infrastructure provider processes data as needed to operate the service. These are automated systems, not manual access, and none of them use your data for any purpose beyond running ReceiptPilot.

Gift card numbers and PINs are stored as regular encrypted-at-rest database fields, protected by the same account-level access rules as the rest of your data. Treat ReceiptPilot like any other place you'd store a PIN: don't share your account credentials with anyone.

We don't access the content of your account (your receipts, gift card details, or photos) except when necessary to investigate suspected abuse or a security incident, respond to a support request you've sent us, fix a technical problem affecting your account, or comply with the law. Routine support (like a general how-to question) doesn't require looking at your saved content.

If you're a security researcher and find a vulnerability, please report it to elhamf582@gmail.com rather than accessing or altering other users' data or disclosing it publicly first — we'll work with you to address it. In the unlikely event of a data breach affecting your account, we'll investigate and notify affected users as required by applicable law; we can't promise a breach will never happen, only that we'll respond to one responsibly.

7.Sharing

We do not sell your personal information. We share data only with the service providers that make the app work:

• Supabase — hosts our database, authentication, storage, and server functions.
• Google Cloud Vision — reads text from receipt/gift-card photos as the first, no-AI step of scanning, as described above.
• Anthropic — processes photos/text you submit for AI scanning when Google Cloud Vision and our own pattern matching aren't enough, as described above.
• Expo — delivers push notifications to your device using your push token.
• Google AdMob — serves the ads that keep the app free, and grants bonus scans when you choose to watch a rewarded ad.

None of these providers are permitted to use your data for their own purposes beyond providing the service to us.

We may also disclose information if we reasonably believe it's necessary to comply with valid legal process, investigate fraud, protect the safety of our users, or enforce our rights — we'll push back on requests we believe are overbroad and notify you where we're legally permitted to. If ReceiptPilot is ever involved in a merger, acquisition, or sale of assets, your data may transfer as part of that deal, subject to the same commitments in this policy, and we'll notify you of any material change.

We may change which providers we use to run ReceiptPilot over time (for example, switching hosting or AI providers). If a change materially affects how your data is handled, we'll update this policy and note it in the "last updated" date above.

8.Retention & deletion

We keep your data for as long as your account is active. You can delete your account at any time from Settings → Delete Account. This immediately deletes your account and every receipt, gift card, photo, alert, and push token associated with it from our live database — this cannot be undone. Routine infrastructure backups (kept for disaster recovery, not general access) are cycled out and overwritten on their own schedule afterward.

9.Children's privacy

ReceiptPilot is not directed to children under 13, and we do not knowingly collect information from children under 13.

10.Changes & contact

If this policy changes in a material way, we'll update the "last updated" date above. If you have questions about this policy or your data, reach out at elhamf582@gmail.com — also reachable from Settings → Contact Support in the app.