Data Privacy Policy

1. Information We Collect

• Account information: name, email address, authentication identifiers.
• Content you provide: receipt images and details, trip records, businesses, vehicles, notes, and settings.
• Location data: with your permission, precise location (GPS) is collected — including in the background when automatic trip tracking is enabled — to detect, record, and map your drives. Motion and fitness data is used to detect when you are driving. You can disable this at any time in your device settings or by turning off automatic tracking, which stops background collection.
• Camera and photos: with your permission, used to capture and store receipt images.
• Automatically collected: device identifiers, app version, and diagnostic and usage information needed to operate and secure the Service.

2. How We Use Your Data

• To provide the Service: record trips, store receipts, compute summaries and reports.
• To process receipt images with automated text-recognition/extraction services when you use scanning.
• To process subscription payments and apply credits.
• To send service communications you enable (summaries, notifications).
• To secure, debug, and improve the Service.

We do not sell your personal data, and we do not use your data for third-party advertising.

3. Service Providers

We share data only with processors necessary to operate the Service, under their own contractual and security obligations: Supabase (database, storage, authentication), Stripe (payments made directly to us; we never store full card numbers), Apple and Google (subscription purchases made through their app stores, under their own privacy policies), Google (automated receipt text recognition when you scan a photo), and Expo (push-notification delivery). Trip GPS processing for detection runs on your device.

4. Data Storage and Security

Data is encrypted in transit and at rest. Receipt images and trip routes are also cached on your device so the app works offline. No security measure is perfect; we cannot guarantee absolute security, and you use the Service at your own risk to that extent.

5. Retention

Your data is retained while your account is active. Upon account deletion, personal data is purged from production systems within 30 days, with two exceptions.

The first is data we are required by law to keep, such as payment records. The second is a limited record of your acceptance of these legal documents. We keep that record on the basis of our legitimate interest in establishing, exercising, and defending legal claims, because it is the proof of which version of the Terms you agreed to and when, and it is needed precisely in the situation where the account no longer exists. It contains only your email address, the document version you accepted, the date and time, and the app version, platform, and language at that moment. It contains none of your receipts, trips, reports, or other content. We keep it no longer than the limitations period applicable to claims relating to the Service.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, export, correct, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights in the app (export/report features, account deletion) or by contacting support@deductsnap.com. We will respond within the time required by applicable law.

One limit applies to erasure: the acceptance record described in section 5 is retained on the legal-claims basis set out there and is not deleted with the rest of your data. You may still ask us what that record contains.

7. Children

The Service requires users to be at least 18 years old. It is not directed to minors, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

8. Cookies

The mobile app does not use cookies. Web checkout and billing pages operated by Stripe may use essential cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where practicable, by notice in the app.

10. Contact

Privacy questions or requests: support@deductsnap.com

Data controller: Volabiz Tech LLC, Pennsylvania, United States.