ReceiptIQ Privacy Policy

Last updated: May 8, 2026 · Effective date: May 8, 2026

This Privacy Policy describes how the ReceiptIQ mobile application ("ReceiptIQ", "we", "us", or "our") collects, uses, stores, shares, and protects your information. ReceiptIQ is a receipt-scanning and tax-deduction tracking app built for self-employed freelancers. By installing or using the app, you agree to this policy.

If you do not agree with this policy, please do not install or use ReceiptIQ.

1. Information we collect

1.1 Information you provide

Account information. When you create an account, we collect your email address and a password (the password is hashed and stored by our authentication provider; we never see it in plain text).
Profile information. Your display name, if you choose to set one in Settings.
Receipt data. Vendor name, amount, currency, date, expense category, optional notes, and the receipt photo. You enter or capture this data; we do not generate it from external sources.
Mileage data. Trip start/end timestamps, GPS coordinates of the route, total miles, and an optional purpose label (e.g. "Client Meeting"). Recorded only while you actively use the in-app drive tracker.
Support communications. If you email us, we receive your email address and the contents of your message.

1.2 Information collected automatically

Usage limits and counters. A daily count of receipt scans and AI-deduction calls per user, used to enforce per-day caps. Stored locally on your device.
Device identifier (fallback only). When you are temporarily signed out (for example, during the brief window between sign-out and sign-in), we use your device's vendor identifier to keep the daily-cap counter consistent. We do not transmit this identifier to our servers.
Advertising identifiers. If you have not purchased the "Remove Ads" upgrade, the AdMob SDK may collect your device's advertising identifier and limited ad-interaction data, subject to your consent (see Advertising).
Crash and diagnostic information. If we add crash reporting in a future update, this section will describe what is collected.

1.3 Information we do not collect

We do not access your contacts, calendar, microphone, or SMS.
We do not access your bank account, credit card, or other financial accounts. ReceiptIQ does not connect to any financial institution.
We do not collect biometric data.
We do not track your location in the background. The GPS feature only runs while you are actively recording a drive in the foreground.

2. How we use information

We use the information we collect to:

Provide the core features of the app: storing receipts and mileage entries, generating reports, syncing your data across your devices.
Authenticate you when you sign in.
Provide AI-assisted features (receipt parsing and deduction analysis) — see AI processing.
Enforce daily usage limits on AI features so the app stays affordable for everyone.
Process your one-time "Remove Ads" purchase via Apple App Store or Google Play.
Show advertisements (if you have not purchased Remove Ads) — see Advertising.
Communicate with you about account issues, support requests, and material changes to the app.
Comply with legal obligations and prevent abuse, fraud, or security incidents.

3. AI processing

ReceiptIQ uses two AI components. They have very different privacy properties; this section explains both.

3.1 On-device OCR (no transmission)

When you scan a receipt, the app first uses Google ML Kit Text Recognition to convert the receipt photo into raw text. This step runs entirely on your device. The image and the recognized text are not transmitted to Google or to us during this step.

3.2 Cloud AI (Google Gemini)

The recognized text is then sent to Google Gemini Flash Lite, an AI service operated by Google, to extract structured fields (vendor, amount, date, category) from it. The same Gemini service is used by the optional AI Deduction Coach to analyze whether a receipt qualifies as a tax deduction.

What we send to Gemini:

The OCR text from your receipt photo (no image is uploaded).
For deduction analysis: the receipt's vendor, amount, currency, category, date, and any notes you entered.

What we do not send to Gemini:

Your name, email, account ID, or any other identifier that would link the request back to you.
Your photo of the receipt.
Your location, device ID, or any other device-level information.

Google's processing of data sent to the Gemini API is governed by the Gemini API Additional Terms. Google states that data sent to the paid Gemini API is not used to train Google's foundation models.

To minimize repeat calls, the AI's answer for each receipt is cached locally on your device (and synced to your account in our cloud database) keyed by a hash of the receipt's content. Editing the receipt invalidates the cache and triggers a fresh call.

4. Third-party services

ReceiptIQ uses the following third-party services. Each service has its own privacy policy, linked below. Where required, we have configured the service so that data flows are limited to what is necessary for the feature.

Service	Purpose	Data shared
Supabase	Authentication, cloud database, encrypted file storage for receipt photos.	Email, hashed password, your receipts and mileage entries, and your receipt photos.
Google Gemini API	AI processing of receipt OCR text and deduction analysis.	OCR text and receipt fields (vendor, amount, date, category, notes). No images, no account identifiers.
Google AdMob	Banner and interstitial advertisements for users who have not purchased Remove Ads.	Subject to your consent: advertising identifier, ad interaction data, IP address, approximate location, device information. None for users who have purchased Remove Ads.
Apple App Store / In-App Purchase	Processing the one-time Remove Ads purchase on iOS.	Apple receives the purchase transaction. We receive a transaction receipt that confirms the purchase but does not contain your payment details.
Google Play Billing	Processing the one-time Remove Ads purchase on Android.	Google receives the purchase transaction. We receive a transaction confirmation that does not contain your payment details.
OpenStreetMap	Map tiles displayed during active mileage tracking.	Approximate map viewport (used to fetch the visible tiles) and standard HTTP request information.

We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising as that term is defined under the California Consumer Privacy Act (CCPA), except as disclosed under Advertising.

We share information with third parties only:

To provide the core services described above (e.g. Supabase to store your receipts, Gemini to analyze them).
When you explicitly direct us to (e.g. you tap "Share" on a receipt to send it via your phone's share sheet).
To comply with legal process, a lawful subpoena, or a government request.
To protect our rights, prevent fraud or abuse, or investigate violations of our terms.
In connection with a merger, acquisition, or asset sale, in which case the acquiring entity will be bound by this policy or will provide notice of any changes.

6. Advertising

If you have not purchased the "Remove Ads" upgrade, the app displays banner and interstitial advertisements via Google AdMob.

Consent. On first launch, we present the Google User Messaging Platform (UMP) consent flow. In regions where consent is required (the European Economic Area, the United Kingdom, Switzerland, and CCPA-eligible US states), you can accept, reject, or customize the data uses Google AdMob applies. Your choice persists across launches; you can change it later in Settings.

What AdMob may collect. Subject to your consent: an advertising identifier, ad interaction data (which ad you saw, whether you tapped it), IP address, coarse location, and device characteristics. AdMob's collection is governed by Google's privacy policy and is independent of your ReceiptIQ account.

How to remove ads completely. Settings → Remove Ads → one-time purchase. Once purchased, no ad requests are made and no ad-related data is collected by ReceiptIQ on your device.

Tracking transparency on iOS. On iOS 14.5+, you may also be presented with the App Tracking Transparency prompt. Choosing "Ask App Not to Track" limits AdMob to non-personalized ads only.

7. Location data

ReceiptIQ accesses your location only while you are actively recording a drive using the in-app mileage tracker. The app does not access your location in the background, before you tap Start Drive, or after you tap End Drive.

Location data we record:

Start and end coordinates of the drive.
The polyline of GPS points captured during the drive (for the live route map and total-miles calculation).

This data is stored on your device and, if you are signed in, synced to your Supabase-hosted account. It is never transmitted to AdMob, Gemini, or any other third party. You can delete a drive at any time from the Mileage tab.

8. Device permissions

The app requests the following device permissions, each only when needed:

Permission	Why
Camera	To photograph a receipt for scanning. Asked only when you tap Scan.
Photo library	To select an existing receipt photo from your device. Asked only when you tap Choose from Library.
Location (foreground only)	To track the GPS route during an active mileage drive. Asked only when you tap Start Drive.
Network access	To sign you in, sync your data, request AI processing, and load advertisements (if applicable).

You can revoke any permission at any time in your device's system settings.

9. Data retention

Local data. Your receipts and mileage entries are stored on your device until you delete them, uninstall the app, or wipe the local database via Settings.
Cloud data. If you are signed in, the same data is synced to our Supabase-hosted database under your account. It is retained until you delete the data or your account.
Backups. Supabase performs operational backups of the database. Deleted records may persist in encrypted backups for up to 30 days before being permanently expunged.
AI request logs. Google retains Gemini API request logs per its own policies. We do not retain a separate log of AI requests on our side.
Account deletion. See Account & data deletion.

10. Security

We take reasonable measures to protect your information:

All network traffic between the app and our servers is encrypted in transit using HTTPS / TLS.
Receipt photos uploaded to cloud storage are accessible only via short-lived signed URLs scoped to your account.
Passwords are hashed by our authentication provider; we do not have access to your plain-text password.
Cloud storage and database access is restricted to authenticated requests, scoped per user via row-level security policies.
API keys for third-party services are never embedded in the app's source code in a recoverable form.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the app at your own risk.

11. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

Access. Request a copy of the personal information we hold about you.
Correction. Request that inaccurate information be corrected.
Deletion. Request that we delete your information (see below).
Portability. Request your information in a machine-readable format. The Reports feature lets you export your receipts and mileage as PDF or CSV at any time.
Restriction. Ask us to restrict processing of your information.
Objection. Object to certain processing of your information.
Withdraw consent. Where processing is based on consent, you can withdraw it at any time.
Non-discrimination (CCPA). We will not discriminate against you for exercising any of your rights.
Complain. Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at receiptiq.support@gmail.com. We will respond within 30 days (or sooner if required by your local law).

12. Account & data deletion

You can delete your account and all associated data at any time:

In-app: Settings → Account → Delete Account. (If self-service deletion has not yet been enabled in your version of the app, follow option 2.)
Email request: Email receiptiq.support@gmail.com with the subject "Account deletion request" from the email address associated with your account. We will permanently delete your account and all cloud data within seven (7) days. Local data on your device will be wiped on next launch (or when you uninstall the app).

Once deleted, your data cannot be recovered.

13. Children's privacy

ReceiptIQ is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected information from a child without verified parental consent, we will delete it as quickly as possible. If you believe a child has provided us with information, please contact us at receiptiq.support@gmail.com.

14. International data transfers

ReceiptIQ is operated globally. Your information may be processed in the United States, the European Union, or other regions where our service providers (Supabase, Google) operate. By using the app you consent to your information being transferred to and processed in these regions.

Where required by law (for example, transfers from the EEA to the US), our service providers rely on Standard Contractual Clauses or other approved transfer mechanisms.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will:

Update the "Last updated" date at the top of this page.
For material changes (e.g. new categories of data collection, new third parties), notify you in-app or by email before the change takes effect.

Continued use of the app after a change means you accept the updated policy.

16. Contact us

If you have any questions, concerns, or requests about this Privacy Policy or your data, contact us at:

Email: receiptiq.support@gmail.com

For the fastest response, include the email address associated with your ReceiptIQ account and a clear description of your request.