Privacy Policy

Your data is stored in Oracle Cloud Infrastructure (OCI) data centers, located in the European Union. We use a MySQL database to store your account and financial data, and an object storage service for images (such as scanned receipts).

We use industry-standard security measures to protect your data, including AES-256 encryption for sensitive personal data at rest and TLS 1.3 for data in transit. All key personal data is encrypted.

Your data is stored on secure servers with regular backups. We implement access controls to ensure only authorized personnel can access your information.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

To provide receipt scanning functionality, we use third-party optical character recognition (OCR) services:

• Oracle Document Understanding: To extract information from receipts and tickets.
• Google Cloud Vision OCR: As a complementary service for ticket image processing.

When you scan a receipt, the image is temporarily sent to these services for processing. These providers process images according to their own privacy policies and do not retain your data beyond the time necessary to complete processing.

To run the Service we also rely on these providers:

• Oracle Cloud Infrastructure: Servers, database and storage of the receipt images you upload.
• Google Firebase: Hosting of the website and the web app.
• Zoho Mail: Sending of service emails, such as account confirmation and recovery links.
• Acumbamail: Sending of product and newsletter emails.

We also run two tools ourselves, on our own servers: GlitchTip, which records crash and error reports so we can fix problems (reports are kept for 90 days), and Umami, described in the section on cookies and tracking.

We use essential cookies to enable core functionality of the Service, such as maintaining your session and remembering your preferences.

We use our own analytics tools to understand how users interact with our application and website: our own event tracking in the Service, and Umami, a privacy-focused analytics tool that we host ourselves on our own servers in the European Union. Umami does not use cookies and does not store your IP address. These tools help us improve user experience and Service performance. We do not share this analytics data with third parties and do not use external analytics services like Google Analytics.

You can control cookie preferences through your browser settings.

We retain your information for as long as your account is active or as needed to provide you the Service.

When you delete your account, it is deactivated immediately and you can recover it for 30 days. After that period, your personal data is permanently erased: your email address, name and password, your personal expenses, income, budgets and other content that only you used, and your support tickets. Expenses, payments and debts you shared with other people remain in their records because their balances depend on them; they no longer carry your name or email, and the notes you wrote on them are removed.

Where the law requires us to keep specific records (for example accounting records), we keep only those, for the period the law requires.

Messages you send to our support address are kept only as long as needed to handle your request.

Backup copies are used only to recover from a system failure and are overwritten on a fixed schedule: database backups within 14 days and full-system backups within 31 days of the erasure. Our email delivery provider (Acumbamail) can keep an address in its temporary delivery lists for up to 30 days after our last email to you.