Privacy Policy - Receipto

1. Introduction

Welcome to Receipto, a service provided by AppWrapp, LLC ("we," "our," "us," or "Company"). We operate the website at receipto.app and our mobile applications (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our AI-powered receipt scanning, expense tracking, and tax preparation tools.

AppWrapp, LLC is the controller of account information and our own analytics and advertising activities. For business receipt content processed on a customer's instructions, our Data Processing Addendum describes our processor role. This policy is a notice, not consent to optional tracking.

2. Information We Collect

2.1 Personal Data

Name: For account identification.
Email Address: For account creation, authentication, and communications.

2.2 Financial Data

Receipt Images: Uploaded photos or camera scans.
Email Content: From the "Magic Mail-In" feature - only emails forwarded to your unique Receipto address.
Transaction Details: Extracted from receipts (merchant name, amount, date, category, line items).
Exported Data: CSV/PDF reports generated by the user.

2.3 Usage Data

Device Information: OS version, device model.
Usage Analytics: Screens visited, features used, buttons tapped, session duration.
Session Recordings: Screen interactions with all input fields masked - see Section 5.
In-App Purchase Status: Subscription status and type.

2.4 Device Identifiers

With advertising permission, we process Meta SDK anonymous identifiers and, where permitted, device advertising IDs (IDFA on iOS or Google advertising ID on Android), device and app version information, and tracking-permission status. On the public website, optional Meta measurement uses browser and ad-click identifiers, IP address and browser information. See Section 11 for events, recipients and controls.

2.5 Crash and Diagnostic Data

Crash reports and error logs, including stack traces and basic user context (user ID, subscription tier), to help us identify and fix bugs.

3. How We Use Your Information

We use your data to:

Provide Core Services: Process receipts, extract transaction data, generate reports.
Authenticate Users: Manage your account and subscription status.
Process Payments: Handle billing for Pro subscriptions via Stripe (web) or Apple In-App Purchase (iOS).
Improve the Service: Analyze usage patterns to enhance features and performance.
Communicate: Send service updates, security alerts, and subscription notifications.
Advertising Measurement: With your separate advertising consent, we measure which campaigns bring users to Receipto, optimize our advertising and create advertising audiences with Meta. iOS tracking also requires Apple's App Tracking Transparency permission. Receipt content and expense amounts are not used for this purpose.

Legal bases

Where GDPR applies, we process account, receipt and billing information to perform our contract with you; keep necessary financial records to comply with legal obligations; and use proportionate security and diagnostic information for our legitimate interests in protecting and maintaining the Service. Optional website analytics, session replay and Meta advertising measurement rely on consent. You may withdraw consent without affecting processing that was lawful before withdrawal.

4. Service Providers and Advertising Partners

We use the providers below to operate our Service. Their legal roles depend on the processing involved. Meta advertising processing is described separately in Section 11 and is not receipt processing on a business customer's instructions.

Provider	Purpose	Data Shared	Privacy / Location
Supabase, Inc.	Database & Authentication	Email, account data, receipt data	USA / EU - privacy policy
Cloudflare R2	Secure File Storage	Receipt images	Global - privacy policy
OpenAI, LLC	AI Receipt Processing	Receipt images and text (opt-out of training)	USA - privacy policy
Amplitude, Inc.	Product Analytics and Website Session Replay	Events, user properties (email, subscription tier, onboarding answers)	EU data center - privacy policy
UXCam, Inc.	Session Replay	Screen recordings, account identifier and subscription properties. Sensitive inputs and selected screens are masked.	EU - privacy policy
RevenueCat, Inc.	Subscription Management & Ad Attribution	User ID, account email, subscription transactions and permitted attribution identifiers, including Meta identifiers	USA - privacy policy
Apple, Inc.	In-App Purchases (iOS)	Purchase transactions processed natively on device	Global - privacy policy
Stripe, Inc.	Payment Processing (Web)	Name, email, billing information	Global (PCI-DSS) - privacy policy
Google Firebase	Push Notifications	FCM token (device push notification identifier)	USA - privacy policy
Sentry, Inc.	Crash Reporting	Crash logs, error traces, user ID, subscription tier	USA - privacy policy

Note on payments: Mobile (iOS) subscriptions are processed entirely through Apple In-App Purchase. Stripe is used for web-based subscriptions only. Neither processor stores full credit card numbers.

4.1 AI Processing Disclosure (IMPORTANT)

Receipt images and text are sent to OpenAI's API for automated data extraction (merchant name, amount, date, category). We use OpenAI's enterprise API with data training disabled - your receipt data is never used to train AI models and is not retained by OpenAI beyond the processing request.

Receipt images are stored in your account on Cloudflare R2 and are only accessible to you and users you explicitly share them with.

If you have concerns about AI processing, please contact us before using the Service.

5. Session Replay & Analytics

5.1 Event Analytics (Amplitude)

We use Amplitude to track product events (e.g., screens viewed, features used, onboarding steps completed). This helps us understand how users navigate the app and which features are most valuable. Data is stored in Amplitude's EU data center. Events may be linked to account or device identifiers and subscription properties; they are not necessarily anonymous. Website analytics and Amplitude session replay require the analytics choice in Cookie settings.

5.2 Session Replay (UXCam)

We use UXCam to record screen sessions for usability research. Recordings help us identify confusing flows and fix UX problems.

Privacy protections:

All text input fields are automatically masked - we never see what you type
Financial values on receipts are masked
Sessions are linked to your subscription tier (paying vs. free) but not to personally identifiable information visible on screen
Data is stored in EU data centers
Retention period: 90 days

To opt out: Contact support@receipto.app and we will disable session recording for your account.

6. App Tracking Transparency (iOS)

On iOS 14.5 and later, Receipto requests your permission to use a device identifier to measure advertising effectiveness through Apple's App Tracking Transparency (ATT) framework.

What we use it for: With your separate advertising choice and ATT authorization, Meta and RevenueCat can use permitted identifiers to measure campaigns, attribute app activity and subscriptions, optimize ad delivery and create audiences. ATT permission is not consent to every analytics purpose. See the Meta advertising section below for data and recipient details.

What happens if you decline: Receipto works fully without tracking permission. You will not see any difference in functionality. We will not ask again after you make your choice.

How to change your choice: iOS Settings → Privacy & Security → Tracking → Receipto

7. Magic Mail-In Feature: Consent to Parse Emails

When you use the "Magic Mail-In" feature (forwarding receipts to your unique Receipto email address), you explicitly grant us permission to:

Read and parse the subject line, body text, and attachments of forwarded emails.
Extract expense-related information (receipts, invoices, transaction data).
Store extracted data in your Receipto account.

We only process emails sent to your unique Receipto inbox. We do not access your personal email account.

8. Data Retention

Active Accounts: We retain your data for as long as your account is active.
Deleted Data: When you delete receipts or your account, data is permanently removed from our active systems within 30 days.
Backups: Deleted data may persist in encrypted backups for up to 90 days for disaster recovery purposes, after which it is purged.
Advertising storage: Website Meta browser and click cookies last up to 90 days. The website consent choice lasts 180 days, after which we ask again. Mobile advertising choices remain on the device until changed or app data is cleared. We do not keep a separate database of website Meta page-view payloads. Meta and RevenueCat apply their own retention policies to data already received; withdrawal stops future eligible collection and does not itself erase historical data. Contact us for deletion requests.

9. Your Privacy Rights

9.1 GDPR (European Users)

If you are in the EU/EEA, you have the right to:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate data.
Erasure: Delete your account and all associated data.
Portability: Export your data in CSV/JSON format.
Restriction: Limit how we process your data.
Objection: Opt out of certain processing activities.
Withdrawal and complaint: Withdraw optional consent at any time. You may complain to your local supervisory authority, including the Spanish Data Protection Agency (AEPD).

9.2 CCPA (California Users)

Where California privacy law applies, residents may:

Know: What personal data we collect and how it's used.
Delete: Request deletion of your data.
Opt-Out: Decline sale or sharing for cross-context behavioral advertising. Sharing identifiers and events with Meta may qualify as "sharing" even though we do not receive money for your data.
Correct and appeal: Request correction or ask us to review a decision on your request. We do not discriminate against you for exercising privacy rights. An authorized agent may contact us; we may need to verify authority and identity.

9.3 How to Exercise Your Rights

Self-Service: Delete receipts or export data directly in the Receipto app.
Account Deletion: Go to Settings → Delete Account.
Email Us: For data access requests, contact support@receipto.app.

We normally respond within one month, or the period required by applicable law. We will explain any lawful extension and request only information needed to verify the request.

10. Data Security

We implement industry-standard security measures:

Encryption in Transit: All data is transmitted over HTTPS.
Encryption at Rest: Receipt images and sensitive data are encrypted in our databases.
Access Controls: Only authorized personnel can access production systems.
Regular Audits: We conduct security reviews and monitor for vulnerabilities.

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Data Sharing and Selling

We do not sell receipt content or send receipts, invoice text, merchants, line items, expense categories, expense amounts, uploaded files or private account-page URLs to Meta.

Optional Meta measurement: After website advertising consent, we send PageView events only for selected public pages using a server-to-server Conversions API connection. Events contain a clean public URL without query parameters, time, event ID, _fbp browser ID, _fbc ad-click ID when present, IP address and browser user agent. We do not load a Meta pixel on private receipt, account or workspace pages.

Mobile apps: On versions with Meta measurement, after advertising consent and, on iOS, ATT authorization, the Meta SDK records app activation. RevenueCat can send verified trial starts, subscriptions, renewals and one-time Receipto purchases. Matching data may include the Meta anonymous ID, permitted advertising and vendor IDs, hashed account identifiers and email already held by RevenueCat, IP address, app/device details and consent status. Purchase value and currency refer to your Receipto subscription, never the purchases on your receipts.

Meta uses these events to match activity to its accounts, measure campaigns, optimize ad delivery and create audiences. The relevant recipient is Meta Platforms Ireland Limited for applicable European services or Meta Platforms, Inc. elsewhere. Meta may process data as a separate controller and, for some collection and transmission, as a joint controller under its Business Tools Terms. See Meta's Privacy Policy and Controller Addendum for its responsibilities, retention and your rights.

Your choices: Optional website advertising is off by default and separate from analytics. . We honor Global Privacy Control on the website by keeping Meta measurement off. Choices are browser-specific; repeat them in other browsers. In supported mobile versions, use Settings, Advertising privacy to withdraw permission. On iOS you can also disable Receipto in Settings, Privacy & Security, Tracking. Advertising consent is not required to scan receipts or use your subscription. We stop further collection and synchronize withdrawal with RevenueCat when the device can connect.

12. Children's Privacy

Receipto is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has created an account, we will delete their information promptly. If you believe a child under 13 has provided us with personal information, please contact support@receipto.app.

13. International Data Transfers

Our providers, including Meta and RevenueCat, may process data outside your country, including in the United States and Europe. For restricted international transfers, applicable safeguards may include:

Standard Contractual Clauses (SCCs) and supplementary safeguards where required, or an applicable adequacy decision for a covered recipient.
Contractual protections appropriate to the provider's role. Contact us for information about the safeguards relevant to your data.

For business customers: If you require a formal Data Processing Addendum for GDPR/CCPA compliance, please review our Data Processing Addendum (DPA).

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you by:

Posting the updated policy on our website.
Sending an email notification for material changes.

A policy update does not grant new advertising consent. We request a fresh choice where a change requires it.

15. Contact Us

For privacy questions, data requests, or concerns:

Support Email: support@receipto.app

Company Email: appwrappllc@gmail.com

Website: receipto.app/privacy

Mailing Address:

AppWrapp, LLC

651 N Broad St, Suite 201

Middletown, DE 19707

United States

End of Privacy Policy