Privacy Policy

ReceiptWise ("we", "our", "us") is a receipt and household expense service run by Shaun O'Neill in Ireland, who is the controller of the personal data described in this policy. For anything about your data, contact support@receiptwise.io, or Shaun directly at shaun@shaunoneill.com.

Account information:

• Your email address, name and profile picture, from the Google account you sign in with
• Your sign-in sessions: when each started and the browser it is in (not your IP address), kept for up to 30 days
• Settings you choose, such as your currency and default household

Receipt data:

• Receipt images you upload, from the website or the Chrome extension, or forward to your forwarding address
• What is read off them: merchant, items, prices, dates, payment method, and any loyalty or VAT numbers printed on the receipt
• Categories, business-expense flags and notes you add
• Recurring subscriptions you choose to track

Bills and your monthly plan:

• The income, bills, one-off amounts and savings goals you add, and whether each has been paid
• Bank balances, but only ones you type in yourself. ReceiptWise does not connect to your bank
• Bills and statements you upload or forward to your forwarding address, and what is read off them: who they are from, amounts, dates, billing periods, and the last four characters of an account or card number
• For forwarded email: the sender, the subject and the attachments. The rest of the message is read only when it has no attachment, to find the bill in it

The ReceiptWise Clipper extension for Chrome:

• It sees a page only when you start a clip on it, by clicking its icon or pressing its shortcut, and it sends us only the area you select, as an image
• It does not read or send your browsing history, the addresses of pages you visit, or anything else on the page
• It keeps its key, and the email address of the account it is connected to, in Chrome's storage for extensions. Chrome copies the key to your other browsers if you use Chrome sync. You can revoke it in Settings → Integrations

Usage information (only if you accept analytics):

• Pages visited and features used, browser and device type
• Session recordings of how you move through the app, with everything you type and every amount masked before it leaves your browser

Payment information:

• Card details are collected and stored by Stripe; we never see or store your full card number
• We store your Stripe customer ID and whether your subscription is active

• Running the service you signed up for — storing and reading your receipts, sharing them with your household, producing insights, and billing your subscription. Basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Keeping it working and secure — application logs used to find and fix faults, and to detect abuse. Basis: our legitimate interest in running a reliable, secure service (Art. 6(1)(f)).
• Product analytics and session recordings — understanding where the app gets in people's way. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time from "Cookie settings" at the bottom of any page.
• Legal obligations — for example keeping invoices for tax purposes. Basis: legal obligation (Art. 6(1)(c)).
• Answering you when you contact support. Basis: legitimate interests, or our contract with you.

We do not sell your data, and we do not send marketing email.

Receipts and bills are read by AI models, reached through Vercel's AI Gateway. Receipt images, and bills and statements you upload or forward (PDFs, photos, or an email's text when it has no attachment), are sent to Google's Gemini models to extract the merchant, items and totals, or the provider, the amount due and the due date. Summarised spending figures (totals by category and shop, never the receipts themselves) are sent the same way to write your spending summaries. If Google's models are unavailable, the same request goes to OpenAI instead.

• Requests only go to providers that have agreed with Vercel to keep nothing (zero data retention) and that do not train models on what they are sent
• We store what comes back in our own database

We use these service providers to run ReceiptWise. They process data on our behalf and only for these purposes:

• Google — you sign in with your Google account; Google tells us your name, email address and profile picture, and knows that you signed in to ReceiptWise
• Stripe — subscriptions and payments
• Google (Gemini) — reading receipts and bills, and writing spending summaries (see section 4)
• OpenAI — the same, only when Google's models are unavailable
• Vercel — hosting, storage of receipt images and of bills (Vercel Blob; bills in a private store), the AI Gateway that passes requests to the two providers above, and cookieless page-view statistics (Vercel Analytics)
• Migadu — the support@receiptwise.io mailbox
• Cloudflare — receives email sent to your forwarding address and passes it to us
• Neon — our Postgres database, hosted in the London (eu-west-2) region
• PostHog (EU cloud) — product analytics and session recordings, only if you accept analytics; your email address is attached to your analytics profile so we can answer support questions about it
• Rapid7 InsightOps (EU region) — application logs. Logs identify you by an internal account ID (email addresses are removed before logs are sent) and can include the contents of receipts being processed. The contents of bills, balances and income are not logged. Logs are used only to diagnose faults and abuse

Some of these providers are based in the United States or process data there (for example Google, Stripe, OpenAI and Vercel). Where personal data leaves the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified under it, or by the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguard used for a particular provider. Our database is in the United Kingdom, which the European Commission recognises as providing adequate protection.

• Data is encrypted in transit (TLS) and at rest by our hosting and database providers
• Receipt images are stored at long, unguessable addresses; anyone holding an image's address can open it, so treat shared links with care
• Bills are stored privately: they can only be opened through the app, by you and anyone you share them with
• Your forwarding address is the only thing that identifies you on forwarded email; you can replace it in Settings at any time, and mail to the old one is then refused
• You sign in with Google, so ReceiptWise holds no password for you; payments are handled by Stripe, which is PCI DSS certified
• Access to production data is restricted to the operator of the service

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

When you create or join a household:

• Receipts assigned to the household are visible to every member, including images and extracted details
• Bills, income, savings goals and balances you share with the household are visible to every member, who can also mark them paid; only you can change or delete what you added
• The household owner can remove members
• You can leave a household, or move your receipts out of it, at any time

• Receipts you delete disappear from the app immediately, and are purged — image included — within 30 days
• Bills you delete are purged, file included, within 30 days. A forwarded email itself is deleted 7 days after it has been read, and our record of it (sender, subject, what happened) after 90 days
• Deleting your account takes effect 24 hours after you ask (so an accidental request can be undone). We then cancel your subscription and delete your account and everything in it: receipts and their images, bills and their files, your plan, and forwarded emails. A household you own passes to its longest-standing other member, or is deleted if you were its only member
• Invoices are kept by Stripe for as long as tax law requires
• Application logs, analytics and session recordings are deleted automatically on our providers' retention schedules, and are not used to rebuild anything you have deleted

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased
• Receive your data in a portable format — Settings → Data lets you export everything at any time
• Object to processing based on legitimate interests, or restrict it
• Withdraw consent to analytics at any time, from "Cookie settings"

To exercise any of these, use Settings in the app or email support@receiptwise.io. If you are unhappy with how we handle your data, you can complain to Ireland's Data Protection Commission (dataprotection.ie) or to the supervisory authority where you live.

ReceiptWise is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

We may update this policy. When we do, the date at the top of this page changes, and the previous version is available on request.

Questions about this policy or your data: support@receiptwise.io.