Privacy Policy

Receipto is an offline-first app. Everything you scan and organize stays local to your phone unless you choose to sync it for backup or cross-device access.

We now support three usage modes:

1. Offline mode – All data remains on your device only.
2. Anonymous sync – Data is stored in encrypted form and linked to a temporary anonymous account.
   • If the app is uninstalled or inactive for 90 days, the anonymous account and its data are permanently destroyed.
3. Full account – Create an account to back up your receipts, restore data after reinstall, sync across devices, and (later) access from desktop.

• Offline mode: We collect nothing. Data stays 100% on your device.
• Anonymous sync: We generate a random anonymous ID. No personal details are required. Encrypted data is stored on our servers until it expires or is deleted by you.
• Full account: We collect the information you choose to provide (e.g., email). This is used only for account management and syncing receipts.

We do not sell or share any data with third parties.

• To allow you to store, organize, and access your receipts.
• To provide optional cloud sync (anonymous or with an account).
• To allow you to restore data when you reinstall the app or switch devices.

We never use your receipts for marketing, profiling, or advertising.

• Receipt data is always encrypted.
• In offline mode, data never leaves your device.
• In anonymous sync or account mode, data is encrypted and stored securely on our servers.
• Anonymous accounts are automatically deleted if inactive for 90 days.
• If you uninstall the app, offline data is removed from your device, and anonymous accounts linked to your session are destroyed after the retention period.

• You can delete your receipts at any time within the app.
• If you have an account, you can request full deletion of your data.
• Anonymous accounts are automatically purged after inactivity.

• Offline data: deleted immediately when you uninstall the app.
• Anonymous sync: deleted automatically after 90 days of inactivity.
• Full account data: retained until you request deletion.