Data Privacy Policy

1. Information We Collect

• Account information: name, email address, authentication identifiers.
• Content you provide: receipt images and details, trip records, businesses, vehicles, notes, and settings.
• Location data: with your permission, precise location (GPS) is collected — including in the background when automatic trip tracking is enabled — to detect, record, and map your drives (maps are displayed using Apple Maps or Google Maps; see section 3). Motion and fitness data (called physical activity on Android) is used to detect when you are driving. You can disable this at any time in your device settings or by turning off automatic tracking, which stops background collection.
• Camera and photos: with your permission, used to capture and store receipt images. When you allow photo access, each receipt photo you save is also saved to a "DeductSnap" album in your device's photo library.
• Automatically collected: device identifiers, app version, and diagnostic and usage information needed to operate and secure the Service.

2. How We Use Your Data

• To provide the Service: record trips, store receipts, compute summaries and reports.
• To read your receipts with artificial intelligence when you use scanning. The image you scan is sent to Google's Gemini AI models, which return the merchant, date, amounts, and category they read from it. This is automated: no person at DeductSnap reviews your receipts as part of scanning. Scanning is optional — you can enter any transaction by hand, with or without an image. If you choose on-device scanning in Settings, or AI scanning cannot be reached, the receipt is read on your device with Google's ML Kit instead, and the image is not sent anywhere for that.
• Your receipt images are not used to train AI. We use the paid tier of Google's Gemini API, where Google's terms state that it does not use the content sent to it, including images, or the responses it returns, to improve or develop its products, and processes them as a data processor on our behalf. Google does keep that content for a limited period, solely to detect and prevent abuse of its own service and to keep it secure.
• To process subscription payments and apply referral rewards.
• To send service communications you enable (summaries, notifications).
• To send product news, new features, and promotional offers by email, but only if you turn on "Product Updates & Promotions" in Settings. That setting is off unless you switch it on. Every such email includes an unsubscribe link, and unsubscribing or turning the setting off stops them without affecting your account or the service communications above.
• To secure, debug, and improve the Service.

We do not sell your personal data, and we do not use your data for third-party advertising.

3. Service Providers

We share data with the processors necessary to operate the Service, under their own contractual and security obligations: Supabase (database, storage, authentication), Apple and Google (subscription purchases made through their app stores, under their own privacy policies), Google (Gemini AI, which reads the receipt images you choose to scan), Expo together with Apple Push Notification service and Google Firebase Cloud Messaging (delivery of the notifications you enable), and Resend (delivery of the emails we send you, so it receives your email address and the content of each email). Trip maps are displayed by Apple Maps on iPhone and Google Maps on Android: to show a map, your device requests it from that provider, which receives the information needed to provide it, such as the map area being shown and your device's IP address, under its own privacy policy. Trip GPS processing for detection runs on your device. To show where a trip started and ended, your device sends those coordinates to its built-in address lookup service, which is Apple on iPhone and usually Google on Android, under that provider's privacy policy. We use no advertising, analytics, attribution, or tracking services ourselves, and we collect no data for those purposes. On Android, the Google Maps component also shares usage and crash information (such as your device type, IP address, and a pseudonymous identifier) with Google, which uses it for its own purposes, to operate and improve Google's services, under Google's privacy policy; we receive none of it. When the app reads a receipt on your device with Google's ML Kit, the image stays on your device, but ML Kit sends Google diagnostic and usage information, such as your device model, operating system version, app version, a per-installation identifier, and performance and error data, under Google's privacy policy; we receive none of it. Google's billing and push-notification components bundle libraries of their own into the app; we do not call them and we receive no data from them.

If you join a team and approve the team owner's request for report access, the owner can see your name and the trips and receipts you record under the team's business until you withdraw that approval in the app.

4. Data Storage and Security

Data is encrypted in transit and at rest. Receipt images and trip routes are also cached on your device so the app works offline. Receipt photos in your photo library follow that library's own settings, including any cloud photo backup you have turned on. No security measure is perfect; we cannot guarantee absolute security, and you use the Service at your own risk to that extent.

5. Retention

Your data is retained while your account is active, except in two cases. Once a year, on May 31, trips and receipts dated more than about two and a half years earlier are moved out of the app into a private archive that only we can access. If you have notifications on, we remind you beforehand so you can export them. Contact us if you need archived records. The archive is deleted when you delete your account. If your paid plan ends, the copies of your receipt images stored in our cloud are deleted 15 days later, unless you subscribe again first. Copies on your device are not affected.

You can delete your account at any time from Settings. Deleting it removes your trips, receipts, vehicles, businesses, and profile immediately, both from your device and from our production systems, and the receipt images stored for you are deleted with them. Deleting a single receipt works the same way: the receipt and the image stored for it are both removed, and a deleted receipt cannot be recovered. Receipt photos saved to your device's photo library are not removed when you delete a receipt or your account; you can delete them there yourself. Backups are overwritten on their own schedule and any residual copies are purged within 30 days. Three exceptions survive deletion.

The first is data we are required by law to keep, such as payment records. The second is a limited record of your acceptance of these legal documents. We keep that record on the basis of our legitimate interest in establishing, exercising, and defending legal claims, because it is the proof of which version of the Terms you agreed to and when, and it is needed precisely in the situation where the account no longer exists. It contains only your email address, the document version you accepted, the date and time, and the app version, platform, and language at that moment. It contains none of your receipts, trips, reports, or other content. We keep it no longer than the limitations period applicable to claims relating to the Service.

The third is your appearance in another person’s records. If you were a member of someone’s team, or someone earned a referral reward through you, their record is theirs and is not deleted with your account; we remove the link to you so it no longer identifies you, and what remains belongs to them.

When you delete your account the app tells you, at that moment, exactly which of these apply to you.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, export, correct, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights in the app (export/report features, account deletion) or by contacting support@deductsnap.com. We will respond within the time required by applicable law.

One limit applies to erasure: the acceptance record described in section 5 is retained on the legal-claims basis set out there and is not deleted with the rest of your data. You may still ask us what that record contains.

7. Children

The Service requires users to be at least 18 years old. It is not directed to minors, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

8. Cookies

The mobile app does not use cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where practicable, by notice in the app.

10. Contact

Privacy questions or requests: support@deductsnap.com

Data controller: Volabiz Tech LLC, Pennsylvania, United States.