Privacy Policy

Last updated: October 11, 2025

This Privacy Policy describes how Receipt Bank (“we,” “us,” or “the app”) handles information when you use the Receipt Bank mobile application and related online services. If you have questions, contact us at receiptbank0@gmail.com.

1. Information we collect

Account information

When you create a Receipt Bank account, we collect information needed to authenticate you, such as your email address and password (for email sign-up), or account identifiers from Sign in with Google or Sign in with Apple through our authentication provider. You may optionally provide your first and last name during registration.

Receipt and app data

Receipt Bank stores receipt-related information you create or import, such as retailer names, purchase dates, amounts, line items, barcodes, payment details (for example, card last four digits when present), scanned or entered text, and receipt images. Much of this data is stored locally on your device by default.

Gmail connection (optional)

If you choose to connect Gmail, we receive and store your connected Gmail address and OAuth credentials so our servers can access Gmail on your behalf. We request read-only Gmail access (https://www.googleapis.com/auth/gmail.readonly). We do not use Gmail access to send, delete, or modify your email.

Device permissions

With your permission, the app may use the camera to scan receipts, Face ID or Touch ID to lock the app, and local notifications for return reminders you configure.

2. How we use information

3. Gmail and email processing

Connecting Gmail is optional and separate from creating a Receipt Bank account. When you connect Gmail, our backend uses the Gmail API to discover and retrieve messages that appear relevant to purchases. We do not permanently archive your full mailbox on our servers.

For messages selected for import or analysis, email content is converted to text and may be sent to OpenAI (or similar processing services we use) to classify the message and extract structured receipt fields. Only content needed for that processing is transmitted—not your entire inbox on each request.

You may view sanitized original email content in the app when that feature is available; content is fetched from Gmail when needed rather than stored as a long-term email archive on our servers.

4. Where data is stored

On your device

Receipts, images, deals, and most app data are stored in local app storage on your iPhone unless you use optional cloud features described below.

Receipt Bank API servers

When Gmail is connected, OAuth access and refresh tokens are stored on Receipt Bank backend infrastructure (for example, our API hosted on cloud providers such as Render), encrypted at rest using application-level encryption. We also store Gmail account metadata (such as connected email address and sync timestamps) needed to provide import and sync.

Supabase (authentication and optional cloud backup)

We use Supabase for user authentication. If you use optional cloud backup, receipt metadata (not receipt images) may be stored in Supabase databases tied to your user ID. Images remain on your device unless you separately save or share them outside the app.

5. Service providers

We use third-party services to operate Receipt Bank. These providers process data on our behalf only as needed to deliver the service, including:

We do not sell your personal information. We do not use third-party advertising analytics in the app based on our current implementation.

6. Google API Services User Data Policy

Receipt Bank’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide user-facing features you request (such as receipt import), not for advertising, and not transferred to others except as necessary to provide or improve those features with service providers listed above.

7. Your choices

Disconnect Gmail

You can disconnect a connected Gmail account at any time in the app under Settings → Email accounts. Disconnection attempts to revoke Google OAuth access and removes stored Gmail credentials from our servers. Receipts already imported into Receipt Bank on your device remain unless you delete them separately.

Delete local receipt data

You can delete saved receipts on your device from Settings in the app. Deleting local data does not automatically delete optional cloud backup copies.

Account and data deletion

To request deletion of your Receipt Bank account and associated data we control (including authentication records, optional cloud backup, and server-stored Gmail connection data), email receiptbank0@gmail.com from the address tied to your account. We will verify your request and describe what will be deleted. Some data may remain on your device until you remove the app or delete local data in Settings.

8. Security

We use industry-standard practices appropriate to the service, including HTTPS for network communication and encryption for stored Gmail OAuth tokens on our servers. No method of transmission or storage is completely secure.

9. Children

Receipt Bank is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date.

11. Contact

Email: receiptbank0@gmail.com