Privacy Policy

Information you provide

We collect the information you give us directly when you create an account and use the App, including:

• Account details: your email address and authentication credentials.
• Receipts and expenses: receipt images you capture or upload, and the data extracted from them (merchant name, address, date, totals, taxes, line items, and the last four digits of a payment card if visible on the receipt).
• Mileage and trips: start and end locations, distances, trip purpose, vehicle details, and an optional home address you save on your profile.
• Business and tax information: business names, entity type, EIN, and tax categories you assign to expenses.
• Forwarded receipts: the email addresses you authorize to forward receipts into your account, and the contents of those forwarded emails.
• Support communications: messages you send us and the information they contain.

Information collected automatically

• Device and app information: device type, operating system version, app version, and similar technical details.
• Push notification token: a device identifier used to deliver notifications, stored only to send you notifications you have enabled.
• Diagnostic and usage data: limited information about crashes, errors, and feature usage to keep the App reliable.

Camera, photos, and location

Some features require device permissions, which you control and can change at any time in your device settings:

• Camera and photo library: used to capture or select receipt images. We access photos only when you choose to add one.
• Location: when you start GPS trip recording, spentr collects precise location to record your route, distance, and start and end points. With background location permission, recording continues while the app is closed or not in use, including while your phone is locked. If you enable automatic drive detection, spentr also uses background location to detect drives and place them in your Drive inbox for review. Filed trip records sync to your account; unfiled drives stay on your device unless you enable Drive inbox cloud backup. An optional saved home address is used to hide nearby business suggestions for drives that start near home. Location is not used for advertising. You can turn off automatic drive detection, revoke location permission in device settings, or enter trips manually without GPS tracking.

Drive inbox cloud backup

Drive inbox backup is optional and off by default. If enabled, the App uploads snapshots of your unfiled drives, including recorded routes, locations, dates, times, distances, nearby place names, and the device name, to your account in Supabase. You can view them on other signed-in devices and the web, and restore them to a phone or tablet using your normal account sign-in.

Cloud data is encrypted in transit and at rest and restricted by account access controls. This is not end-to-end encryption. Authorized Spentr systems and service providers can access it to operate the service. No separate recovery key is required. Map previews use the existing map providers.

Backups update while the App is open and connected. Turning backup off pauses new uploads across your account. You can separately delete cloud inbox backups without deleting local inboxes or filed mileage records. Account deletion removes active cloud backups; copies in provider disaster-recovery backups may remain under their retention policies.

Biometric login

If you enable Face ID or Touch ID, authentication is handled entirely by your device’s operating system. Your biometric data never leaves your device and is never accessible to us. We only store a secure login token in your device’s encrypted keychain so you can sign back in.

How we use your information

• To provide the App: store and sync your receipts, expenses, trips, and reports across your devices.
• To read your receipts: process receipt images with automated AI vision to extract expense details (see “Receipt processing and AI” below).
• To manage subscriptions: operate Spentr Pro purchases, restores, and entitlements.
• To communicate with you: send notifications you enable and respond to support requests.
• To keep the App secure: detect, prevent, and address fraud, abuse, and technical issues.
• To comply with law: meet legal obligations and enforce our Terms of Service.

spentr is a record-keeping tool. It is not a tax-preparation service and does not provide tax, legal, or accounting advice.

Receipt processing and AI

To turn a receipt image into structured expense data, the image is sent securely to a third-party AI provider (Anthropic) that performs automated text and image recognition. This processing is transient and used only to return the extracted details to your account.

Your receipt images and data are not used by us or our AI provider to train AI models. We retain your receipt images only as part of your account records so you can view them later, and we delete them when you delete the associated expense or your account.

Third-party service providers

We rely on a small number of trusted providers to operate the App. They process your information only on our behalf and under their own security and privacy commitments:

• Supabase: secure cloud database, authentication, and storage for your account data and receipt images.
• Anthropic: AI-powered extraction of details from receipt images.
• RevenueCat and the Apple App Store: subscription purchases, billing, and entitlement management.
• Expo / Apple Push Notification service: delivery of push notifications.
• Amazon Web Services: processing of receipts you forward by email.

How we share information

We do not sell your personal information. We share it only:

• With the service providers listed above, to operate the App.
• When required by law, such as to comply with a valid legal request.
• To protect rights and safety: to enforce our terms or protect the rights, property, or safety of our users or others.
• In a business transfer: if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

Data retention

We keep your information for as long as your account is active or as needed to provide the App. When you delete a record, it is removed from your active account data. When you delete your account, we permanently delete your account and associated data, including your receipts, expenses, trips, and stored images, except where we are required to retain certain information by law.

Your rights and choices

• Access and edit: view and update your data directly in the App at any time.
• Export: generate CSV and PDF exports of your expenses and trips.
• Delete your account: permanently delete your account and all associated data from Settings → Account → Delete account.
• Permissions: control camera, photo, location, and notification access in your device settings.

Depending on where you live, you may have additional rights over your personal information. To make a request, contact us using the details below.

Security

We use industry-standard safeguards to protect your information, including encryption in transit, encrypted storage of authentication tokens on your device, and access controls that limit your data to your own account. No method of transmission or storage is completely secure, but we work continuously to protect your information.

Children’s privacy

spentr is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

International users

We operate in the United States, and your information may be processed and stored there or in other countries where our service providers operate. By using the App, you understand your information may be transferred to locations that may have different data-protection rules than your own.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the App. Your continued use of the App after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or your information, contact us at privacy@spentr.app.