Privacy Policy
In short: we use your receipts only to run the app for you. We don't sell your data, show ads or use tracking tools. You can export or delete everything at any time.
Who we are
Simple Receipt Scanner (“the app”) is made by Simpaira Ltd, a company registered in England and Wales (“we”, “us”). We are the data controller for the personal data described here. Contact us at info.simpaira@gmail.com.
What we collect
| Data | Why |
|---|---|
| Account details: your email address, and if you use Google sign-in, your name and profile picture | To sign you in and keep your receipts in your own account |
| Receipts: photos, PDFs and the details read from them or typed in (shop, date, amounts, tax, items, category, currency) | The core of the app: reading, storing, summarising and exporting your expenses |
| Scan usage: how many AI scans you used this month, and your plan | To apply the monthly scan allowance of your plan |
| App integrity signals from Google Play Integrity (Android) or Apple App Attest/DeviceCheck (iPhone) | To check requests come from the genuine app and prevent abuse |
| Subscription status (when subscriptions are available): which plan you bought and whether it's active | To give you the features you paid for |
We do not collect your location, contacts, advertising ID or browsing activity, and the app contains no advertising or analytics trackers.
Some data stays only on your phone: your settings (such as your main currency) and receipts you haven't checked yet.
How receipts are read
When you scan or import a receipt, its image is sent securely to our server function, which asks Google's Gemini AI (via Google Cloud Vertex AI) to read it. Google processes the image only to return the result to us; under Google Cloud's terms, this data is not used to train Google's AI models. You always check and can correct what the AI read before it's saved.
Who processes your data
We use trusted providers who process data on our behalf, under contracts that require them to protect it:
- Google (Firebase and Google Cloud): sign-in, database, file storage, server functions and the Gemini AI. Data is stored in the United States (us-central1).
- Google Play / Apple App Store: payments and subscriptions, under their own privacy policies. We never see your card details.
- RevenueCat (when subscriptions are available): keeps track of which subscription is active, linked to an anonymous account ID.
- Frankfurter / European Central Bank rates: the app downloads public exchange rates; no personal data is sent.
Because our providers store data in the US, your data may be transferred outside the UK. These transfers are protected by the UK International Data Transfer Addendum / Standard Contractual Clauses included in our providers' terms.
Our legal basis (UK GDPR)
- Contract: to provide the app and the plan you chose.
- Legitimate interests: to keep the service secure and prevent abuse (for example, app integrity checks and scan limits).
- Legal obligation: to keep records we're required to keep.
How long we keep it
- Receipts and photos: until you delete them or your account.
- Deleted receipts are removed from our cloud storage shortly after you delete them in the app.
- When you delete your account, all receipts, photos, usage and plan records are deleted. Residual copies in our providers' backups expire within 30 days.
Security
Data is encrypted in transit (HTTPS) and at rest. Each account's data is locked so only that signed-in user can access it, and our receipt-reading service only accepts requests from the genuine app.
Your rights
You can ask to access, correct, export or delete your data, or object to how we use it. Many of these you can do yourself in the app:
- Export: Summary → Export report (PDF or spreadsheet).
- Correct: edit any receipt.
- Delete: delete receipts, or your whole account (see how to delete your account).
For anything else, email info.simpaira@gmail.com. We reply within one month. If you're unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
The app is not intended for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app.