Version: 3 October 2026 ยท first-version testing
Account information, purchase details and original receipt files are stored separately with encryption. Protected server processing reads receipts; this is managed encryption, not end-to-end encryption. Email recovery restores access to your stored history.
Personal records may include purchase time, merchant address, items, tax and payment method. Public catalog output contains eligible product, branch, price, quantity, currency, conditions and observation date. It excludes your name, email, card digits, loyalty identifiers and original images.
Protected pseudonymous account, household and receipt fingerprints help assess duplicate or conflicting evidence. These records are not anonymous to the platform, even though they are not published.
You can export records, delete purchases and delete your account in Settings. Original receipts remain in your private archive until deletion. A receipt captured offline remains on its device. Cloud OCR preserves originals while processing copies are temporary.
External vision and classification services must have appropriate processing and retention arrangements before public distribution. No consent to unrelated advertising profiling is implied by receipt collection. Contact the invitation channel for privacy requests during this initial testing release.