Privacy Policy

Receipt Tracker is made and run by Yehuda Gelb, an independent developer in Israel (“we”, “us”). For any privacy question or request, contact the support email on our Google Play page.

Only what the app needs to work:

• Account: your email address, and your password in hashed form only — the password itself is never stored.
• Receipts: the photos and PDFs you scan, and what is read from them — stores, branch city, dates, items, prices, discounts and totals.
• What you add yourself: your product dictionary (names, categories, brands, barcodes, product photos), shopping lists, meals and recipes with their photos, meal plans, budgets, store discounts, and the names you give the people in your household.
• Family: if you create or join a family — who is in it, their email addresses, and invitations.
• Notifications: if you turn them on — the push address your phone or browser gives us for that device, and your language.
• Questions to the assistant: we don’t save them. If you report an answer, we keep the question, the answer, the reason you chose and any note you added, so we can review how the AI is doing.
• Plan and usage: your plan, and how many scans and questions your account (or family) has used this month.
• Subscriptions: from Google Play — the product, purchase token, order number, status, and renewal and expiry dates. We never see your card or other payment details.
• Technical data: our hosting provider records basic request information (such as IP address, device type and time), and our error logs may include your account ID. These are kept for a short time, to keep the service secure and working.

We don’t use analytics or advertising trackers. The only cookies are the ones the app needs: your sign-in session and your display preferences (language, colour scheme, accent colour).

On your device, the app keeps copies of screens you’ve opened and any receipts waiting to upload, so it works without a connection. Signing out clears the saved screens.

• To run the app: read your receipts, build your price history and statistics, keep your lists and plans, and sync them between your devices and your family.
• To answer your questions in Ask your receipts, and to send the notifications you turned on.
• To provide your plan: check your subscription with Google Play and count usage against your plan’s monthly limits.
• To keep the service safe: prevent abuse, fix errors, and look into answers you report.
• To reply when you contact us.

We don’t show ads, we don’t sell or rent your data, and we don’t use it to profile you for marketing.

These companies process data for us, only to provide their service to us:

• Supabase — our database, sign-in and file storage. Your account, your data and your receipt photos are stored there.
• Vercel — hosts the app and runs its server.
• Anthropic — the receipt photos and PDFs you scan, and your questions in Ask your receipts together with the figures from your data needed to answer them, are sent to Anthropic’s Claude AI to read the receipt or write the answer. Under Anthropic’s commercial terms, this data isn’t used to train its models.
• Google Play — handles subscription payments; we receive the purchase records listed above.
• Push services — notifications reach your device through your phone’s or browser’s push service (Google, Apple, Mozilla or Microsoft) and carry only the notification’s text.
• OpenAI — if smarter product matching is turned on, product names (never photos) may be sent to OpenAI to compare them.
• Email — an email delivery service sends account emails, such as address confirmation and password reset. If sign-up protection is on, Cloudflare Turnstile checks that a person, not a bot, is signing up.
• Live market prices — if you use them, our server downloads the public price files that Israeli supermarket chains publish. Nothing about you is sent to the chains.

These providers may process data outside Israel, for example in the European Union or the United States.

A family shares one household’s data. Everyone in it can see and change the family’s receipts and photos, lists, meals, plans and settings, and can see the other members’ email addresses. Only the person who pays sees the subscription’s billing details.

When you join a family, your own data is set aside — kept, not shared — and comes back if you leave. What you add while you’re in the family belongs to the family and stays with it when you leave.

If the family’s owner deletes their account, the family’s data is deleted with it, and the members go back to their own data.

We keep your data for as long as you have an account, until you delete it. Deleted data can remain in our providers’ backups for a limited time before it is overwritten. Google Play keeps its own records of your purchases, and we keep Google’s sales reports for as long as tax law requires.

• See and correct: everything you’ve added is shown in the app, and you can edit it there.
• Export: download your receipts and items as a CSV file from the menu (Export CSV).
• Notifications: turn them off at any time in the menu.
• Delete: delete your account in the app (Menu → Account → Delete account), or by email as the Delete account page explains. This removes your account, your receipt photos and all your data. When you delete your account in the app, we also ask Google Play to stop your subscription from renewing. A deletion requested by email doesn’t, so cancel in Google Play first. Uninstalling the app doesn’t cancel a subscription. If you’re in someone else’s family, what you added while in it stays with the family — also after you leave or delete your account — so delete those items in the app first if you want them gone.
• Anything else — a copy of your data, a correction you can’t make in the app, or a question — contact the support email on our Google Play page. You can also complain to Israel’s Privacy Protection Authority.

Data travels encrypted (HTTPS). Each account’s data is kept apart by access rules in the database, and receipt photos are in private storage that only your account (or your family) can open. No system is perfectly secure, so please use a strong password that you don’t use anywhere else.

Receipt Tracker isn’t directed at children under 13, and we don’t knowingly collect their information. If you believe a child has created an account, contact us and we’ll delete it.

If we change this policy, we’ll update the date at the top. For significant changes we’ll also tell you in the app before they take effect.

Questions and requests: the support email on our Google Play page.