Privacy Policy

Effective Date: April 12, 2026 · Last Updated: May 22, 2026

1. Introduction

Welcome to ReceiptRoo. ReceiptRoo is a mobile application designed to help individuals and businesses capture, store, and manage receipts and invoices.

Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have when using the app.

By using ReceiptRoo, you agree to the practices described in this policy.

This policy is governed by the laws of Australia.

2. Information We Collect

We collect only the information necessary to provide and improve our services.

Information You Provide

Account Information

Email address and any profile details provided during registration

Receipt and Invoice Data (User Content)

Images, PDFs, and documents uploaded by users
These documents may contain personal and financial information such as:
- Names
- Billing or shipping addresses
- Merchant details
- Transaction details (items, amounts, taxes, totals)
This information is collected solely as part of the app's core functionality

Extracted Metadata

Information derived from receipts such as merchant name, date, amount, and category

Information Collected Automatically

Usage Data

Non-identifiable information about app interactions (e.g., features used, screens viewed)

Biometric Authentication (optional)

If you enable Face ID or Touch ID, your biometric data is processed entirely by your device's secure hardware and is never transmitted to or stored by ReceiptRoo
The app stores a secure authentication token in your device's encrypted storage (iOS Secure Enclave) to enable quick sign-in
You can disable biometric login at any time in Settings

Device Information

Device type, operating system, and app version for diagnostics

Crash Reports

Diagnostic data that may be associated with your account or device to help identify and fix issues

We do not collect precise location data, contacts, browsing history, or unrelated personal data.

3. How We Use Your Information

We use your information to:

Provide and operate the app's core functionality
Authenticate and manage user accounts
Process, store, and display receipts and invoices
Extract structured data from uploaded documents
Manage your subscription, free trial, and access to app features
Improve performance, reliability, and user experience
Communicate essential service-related updates
Comply with legal obligations

We do not:

Sell your data
Use your data for advertising
Build marketing profiles

ReceiptRoo does not track you across third-party apps or websites.

4. Third-Party Services

We use trusted third-party providers:

Amazon Web Services (AWS)

Amazon Cognito (authentication)
Amazon S3 (secure storage)
Amazon DynamoDB (database)
Amazon Textract (receipt and invoice data extraction)
AWS Lambda & API Gateway (backend services)
Amazon SES (email delivery)

Apple Services

Sign in with Apple
App Store payments and subscriptions

Google

RevenueCat

Subscription management and entitlement tracking
RevenueCat receives subscription event data (purchases, renewals, cancellations) and user identifiers to manage access to app features
RevenueCat's privacy policy is available at revenuecat.com/privacy

These providers process data only to deliver the service and are contractually obligated to protect it.

5. Payments and Subscriptions

Payments are processed by Apple via the App Store
We do not collect or store payment card details
Billing is managed via your Apple ID
Subscription status, free trial period, and entitlement state are stored securely to manage your access to app features
Subscription lifecycle events (purchases, renewals, cancellations) are received via RevenueCat and used solely to update your access level

6. Advertising

ReceiptRoo does not display advertisements or use advertising networks.

7. Data Storage and Security

We implement:

Encryption in transit (HTTPS/TLS)
Encryption at rest
Secure authentication
Access controls

While we take reasonable precautions, no system is completely secure. In the event of a data breach that is likely to result in serious harm, we will notify affected users as required by applicable law.

8. Sharing of Information

We do not sell your data.

We may share information only:

With service providers (as listed above)
If required by law
During business transfers (with notice)

9. Data Retention

Account data is retained until account deletion is requested. Once deletion is requested, the account is scheduled for deletion immediately and permanently removed from active systems and backup systems within 90 days.

Receipt and invoice data is retained until deleted by the user.

Usage, analytics, and diagnostic data may be retained for up to 12 months for security, fraud prevention, troubleshooting, and service improvement purposes.

10. Your Rights

You may:

Access your data
Correct your information
Delete your account
Request data export

Account Deletion

Settings → Delete Account

Data is permanently removed from active systems and backup systems within 90 days.

Contact: receiptroo@gmail.com

11. International Data Transfers

ReceiptRoo may process and store personal information in countries where our service providers and infrastructure providers operate, including Australia, the United States, and other jurisdictions.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards and security measures are implemented to protect personal information in accordance with applicable privacy and data protection laws.

12. Children's Privacy

Not intended for users under 13. Any such data will be deleted.

13. Changes to This Policy

We may update this policy. Changes will be communicated via app or email.

14. Limitation of Liability

To the maximum extent permitted by applicable Australian law:

No warranty on extracted data: ReceiptRoo uses automated OCR technology to extract data from receipts and invoices. Extracted information (including amounts, dates, merchant names, and GST figures) may be inaccurate or incomplete. You are solely responsible for verifying all extracted data before using it for any purpose, including tax reporting or financial records.
Not tax or financial advice: ReceiptRoo is a data capture and organisation tool. Nothing in the app constitutes tax, financial, or legal advice. ReceiptRoo is not liable for any tax assessments, penalties, or financial outcomes arising from the use of data generated by the app.
Third-party service availability: ReceiptRoo relies on third-party services (including AWS, RevenueCat, and Apple). We are not liable for any loss or damage resulting from the unavailability, failure, or actions of these third-party providers.
Data loss: While we implement industry-standard security practices, ReceiptRoo is not liable for any loss, corruption, or unauthorised access to your data beyond what is required by applicable law.
No consequential damages: ReceiptRoo shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the app.

Nothing in this section limits any rights you may have under the Australian Consumer Law or other non-excludable statutory protections.

15. Contact

ReceiptRoo Support
Email: receiptroo@gmail.com