Data Privacy Policy

1. Information We Collect

• Account information: name, email address, authentication identifiers.
• Content you provide: receipt images and details, trip records, businesses, vehicles, notes, and settings.
• Location data: with your permission, precise location (GPS) is collected — including in the background when automatic trip tracking is enabled — to detect, record, and map your drives. Motion and fitness data is used to detect when you are driving. You can disable this at any time in your device settings or by turning off automatic tracking, which stops background collection.
• Camera and photos: with your permission, used to capture and store receipt images.
• Automatically collected: device identifiers, app version, and diagnostic and usage information needed to operate and secure the Service.

2. How We Use Your Data

• To provide the Service: record trips, store receipts, compute summaries and reports.
• To read your receipts with artificial intelligence when you use scanning. The image you scan is sent to Google's Gemini AI models, which return the merchant, date, amounts, and category they read from it. This is automated: no person at DeductSnap reviews your receipts as part of scanning. Scanning is optional — you can enter any transaction by hand, with or without an image.
• Your receipt images are not used to train AI. We use the paid tier of Google's Gemini API, where Google's terms state that it does not use the content sent to it, including images, or the responses it returns, to improve or develop its products, and processes them as a data processor on our behalf. Google does keep that content for a limited period, solely to detect and prevent abuse of its own service and to keep it secure.
• To process subscription payments and apply credits.
• To send service communications you enable (summaries, notifications).
• To send product news, new features, and promotional offers by email, but only if you turn on "Product Updates & Promotions" in Settings. That setting is off unless you switch it on. Every such email includes an unsubscribe link, and unsubscribing or turning the setting off stops them without affecting your account or the service communications above.
• To secure, debug, and improve the Service.

We do not sell your personal data, and we do not use your data for third-party advertising.

3. Service Providers

We share data only with processors necessary to operate the Service, under their own contractual and security obligations: Supabase (database, storage, authentication), Stripe (payments made directly to us; we never store full card numbers), Apple and Google (subscription purchases made through their app stores, under their own privacy policies), Google (Gemini AI, which reads the receipt images you choose to scan), and Expo together with Apple Push Notification service and Google Firebase Cloud Messaging (delivery of the notifications you enable). Trip GPS processing for detection runs on your device. We use no advertising, analytics, attribution, or tracking services, and we collect no data for those purposes. Google's billing and push-notification components bundle libraries of their own into the app; we do not call them and we receive no data from them.

4. Data Storage and Security

Data is encrypted in transit and at rest. Receipt images and trip routes are also cached on your device so the app works offline. No security measure is perfect; we cannot guarantee absolute security, and you use the Service at your own risk to that extent.

5. Retention

Your data is retained while your account is active. You can delete your account at any time from Settings. Deleting it removes your trips, receipts, vehicles, businesses, and profile immediately, both from your device and from our production systems, and the receipt images stored for you are deleted with them. Deleting a single receipt works the same way: the receipt and the image stored for it are both removed, and a deleted receipt cannot be recovered. Backups are overwritten on their own schedule and any residual copies are purged within 30 days. Three exceptions survive deletion.

The first is data we are required by law to keep, such as payment records. The second is a limited record of your acceptance of these legal documents. We keep that record on the basis of our legitimate interest in establishing, exercising, and defending legal claims, because it is the proof of which version of the Terms you agreed to and when, and it is needed precisely in the situation where the account no longer exists. It contains only your email address, the document version you accepted, the date and time, and the app version, platform, and language at that moment. It contains none of your receipts, trips, reports, or other content. We keep it no longer than the limitations period applicable to claims relating to the Service.

The third is your appearance in another person’s records. If you were a member of someone’s team, or someone earned a referral credit through you, their record is theirs and is not deleted with your account; we remove the link to you so it no longer identifies you, and what remains belongs to them. Payment and invoice records held by our payment processor, Stripe, are likewise kept under their own retention rules and applicable tax law.

When you delete your account the app tells you, at that moment, exactly which of these apply to you.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, export, correct, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights in the app (export/report features, account deletion) or by contacting support@deductsnap.com. We will respond within the time required by applicable law.

One limit applies to erasure: the acceptance record described in section 5 is retained on the legal-claims basis set out there and is not deleted with the rest of your data. You may still ask us what that record contains.

7. Children

The Service requires users to be at least 18 years old. It is not directed to minors, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

8. Cookies

The mobile app does not use cookies. Web checkout and billing pages operated by Stripe may use essential cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where practicable, by notice in the app.

10. Contact

Privacy questions or requests: support@deductsnap.com

Data controller: Volabiz Tech LLC, Pennsylvania, United States.