Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Receipt Zen ("we," "us," or "our"), a sole proprietorship based in Calgary, Alberta, collects, uses, and discloses your personal information.

We are committed to protecting your privacy in accordance with the Personal Information Protection Act (Alberta) ("PIPA"), the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"), and applicable privacy laws in other jurisdictions, including Quebec's Act Respecting the Protection of Personal Information in the Private Sector.

By using our mobile application (the "App"), you consent to the data practices described in this Policy.

2. Information We Collect

We collect information primarily to provide you with expense tracking and receipt scanning services.

2.1. Information You Provide Directly

• Account Information: When you register using "Sign in with Apple," we receive your Apple ID and, if you choose to share it, your name and email address. If you use Apple's "Hide My Email" feature, we receive a private relay email address.
• Receipt Data: When you scan or upload a receipt, we collect the image of the receipt and the data extracted from it. This includes merchant name, date, total amount, tax information, and item descriptions.
• Customer Support: If you contact us at [email protected], we collect the content of your message and your contact details.

2.2. Information Collected Automatically

• Usage Data: We use analytics tools (e.g., Google Firebase Analytics) to collect usage information about how you interact with the App (such as screens viewed, buttons tapped, and session duration) and certain technical identifiers needed to measure performance and reliability. We use this information in aggregate to understand feature usage and improve the App. We do not use this information for targeted advertising or to "track" you across other companies' apps and websites.
• Device Information: We collect technical details such as your device model, OS version, and general location (city/country level via IP) to ensure compatibility and security.
• Crash Logs: We collect crash reports and diagnostics to help us fix bugs and improve stability. Crash reports may include device and app state information (such as device model, OS version, and app version) and may include identifiers (such as a device or installation identifier). Crash reports are not intended to include the content of your receipts.

2.3. No Payment Card Data

We do not collect or store full credit card numbers. While receipt images may contain the last 4 digits of a payment card, we do not process this data for payment purposes. Any collection of payment card information from receipt images is incidental. We encourage you to redact sensitive financial information before scanning.

3. How We Use Your Information

We use your information for the following purposes:

• To Provide the Service: Processing receipt images via Cloud OCR (Optical Character Recognition) to extract text and categorize expenses.
• To Improve the Service: We analyze aggregated and de-identified usage and technical patterns to improve the accuracy, reliability, and functionality of our OCR and expense categorization features. We may also use de-identified receipt images and extracted receipt data for internal testing, quality assurance, and to improve our OCR and categorization models (including machine-learning training and evaluation). We do not use receipt content to identify or profile individual users, and we do not use it for targeted advertising.
• To Maintain Security: Detecting and preventing fraud, abuse of the App, or security breaches.
• To Communicate: Sending administrative updates (e.g., changes to this Policy). We do not send marketing communications unless you explicitly opt-in.

4. How We Process and Store Data (Cloud OCR)

Important Notice on Cloud Processing:

To provide high-quality text recognition, receipt images captured in the App are transmitted to a secure cloud server for processing. They are not processed locally on your device.

• Service Providers: We use vetted third-party cloud providers (e.g., Google Cloud Vision, AWS, or similar) to perform OCR processing on our behalf. These providers act as service providers/processors and are permitted to process receipt images only to deliver the OCR service to us, subject to contractual confidentiality and security obligations.
• International Transfers: Your personal information and receipt images may be transferred to and processed in countries outside of Canada, including the United States. When processed outside of Canada, your information may be subject to the laws of those jurisdictions.
• Security Safeguards: We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These safeguards may include encryption in transit and at rest (where supported), access controls and least-privilege permissions, logging and monitoring, and secure backup and recovery practices. No method of transmission or storage is 100% secure; however, we take reasonable steps to protect your information.

5. Data Retention and Deletion

Retention: We retain personal information only as long as reasonably necessary to provide the Service, improve and secure the Service, resolve disputes, and comply with legal obligations. As a general rule: (a) receipt images and extracted receipt data are retained while your account remains active, (b) support communications are retained as needed to address your request and for audit/quality purposes, and (c) certain technical logs may be retained for security and reliability for a limited period. We periodically review and delete or de-identify information that is no longer needed.

Deletion: You have the right to request the deletion of your account and data. You can delete your account directly within the App settings or by contacting us at [email protected]. Please note that while active data is removed immediately upon your request, some data may remain in our encrypted backup systems for a short period (up to 90 days) solely for disaster recovery purposes, after which it will be permanently deleted or overwritten.

6. Your Rights

Depending on your location (Alberta, Quebec, or elsewhere), you have specific rights regarding your personal information:

• Access & Correction: You have the right to access the personal information we hold about you and request corrections to inaccurate data.
• Withdraw Consent: You may withdraw your consent for the collection or use of your information at any time (this may mean you can no longer use the App).
• Quebec Residents: You have the right to request your data in a structured, commonly used technological format (Data Portability).

To exercise these rights, please contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or (for Quebec residents) the Commission d'accès à l'information (CAI), as applicable.

7. Children's Privacy

The App is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18.

8. Changes to this Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the App or via email. Your continued use of the App after such changes constitutes your acceptance of the new Policy.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at Contact form

Receipt Zen

Email: [email protected]