Privacy Policy – Receep

1. Data Controller

Topdigital is the data controller for the processing of your personal data in connection with your use of Receep.

2. Data We Collect

When you use Receep, we may collect and process the following:

Account information

• Email address
• First and last name (your display name)
• A profile picture, if you choose to upload one
• Preferred currency and selected country
• Login credentials: either email and password, or sign-in with Google or Apple. When you sign in with Google or Apple, we receive your email address and your name from that provider. If you use Apple's "Hide My Email" feature, we only receive a relay address.

Technical data

• IP address
• Device information such as device type, operating system and app version
• Server and error logs, which may contain your user ID and the time of an action

Content you upload

• Receipt images, both the original scan and a smaller preview
• The full text the AI processing can read on the receipt (OCR text). Note that beyond purchase details, a receipt may contain things like your name, an address, the last digits of your payment card, or a membership number. All readable content is stored as text alongside the image so that you can search your receipts.
• Extracted metadata: merchant, purchase date, total amount, VAT amount and currency
• Information you add yourself: notes, warranty period and warranty expiry date, and the names of the folders you create
• The technical response from the AI provider, which we store alongside the receipt for troubleshooting and quality control

Payment and subscription data

• Subscription type and status
• Information received via RevenueCat and the Apple App Store or Google Play
• Your user ID is shared with RevenueCat so your purchase can be linked to your account

We do not have access to your full payment card details.

Permissions on your device

The app asks for the following permissions. You can always decline or revoke them in your device settings — the app still works, but the related features are turned off.

• Camera – to scan receipts
• Photos – to pick an existing receipt or a profile picture, and to save a receipt to your photo library if you ask for it
• Notifications – for warranty reminders and to tell you a scan has finished

Data stored locally on your device

So the app works offline and loads quickly, we keep a copy of your most recent receipts, their previews and your profile picture on the device, along with your settings (language, theme, country, currency and notification choices). Receipts you scan without an internet connection are queued on the device until they can be uploaded. This data only leaves the device when it syncs with your account, and it is removed when you sign out or uninstall the app.

3. Purpose of Processing

We process your personal data in order to:

• Provide and operate the app's features
• Store, organise, search and display your receipts
• Extract metadata from receipts using AI
• Send you warranty reminders and notify you when a scan is finished, if you have enabled it
• Let you share a receipt via a link and share folders with other users
• Let you export your receipts as a CSV or ZIP file
• Manage subscriptions and payments
• Ensure operation, security, support and troubleshooting
• Carry out general analysis of app usage based on data in our own systems

We do not currently use separate third-party analytics in the app, but this may change in the future. If it does, we will update this policy before it is put into use.

4. Legal Basis

We process your personal data on the following bases:

• Contract under GDPR Article 6(1)(b) – to deliver the app's functionality and administer your account. This covers storing your receipts, the AI processing, sharing, notifications and export.
• Legitimate interest under GDPR Article 6(1)(f) – to ensure operation, security, troubleshooting, abuse prevention and ongoing improvement of the service. We have carried out a balancing test and concluded that this processing does not override your rights. You can request a copy of that assessment by contacting us, and you may object under GDPR Article 21.
• Legal obligation under GDPR Article 6(1)(c) – to the extent we are required to do so by applicable law

By creating an account, you accept both our Terms of Use and this Privacy Policy. When purchasing a Pro subscription, you additionally accept the relevant subscription terms of the applicable app store.

We do not make automated decisions producing legal effects or similarly significant effects concerning you, within the meaning of GDPR Article 22. The AI processing only extracts information from your image — it makes no decisions about you.

5. AI Processing (Google Gemini)

When you upload a receipt, the image is sent to Google Gemini in order to extract relevant information and metadata.

We do not send your name, your email address or your user ID. Google receives only the image itself and our instruction about which fields to read, and therefore receives no information about your user profile.

We use Google's paid service. This means that Google does not use your images or the extracted information to train or improve Google's models or products. Google acts as our data processor and handles the information under Google's data processing addendum. Google may retain the material for a limited period for the purpose of detecting and preventing abuse and for legal compliance.

Google delivers this service from a global infrastructure, so processing may take place outside the EU/EEA. See section 9 for the transfer safeguards.

6. Data Processors

We use external suppliers that process personal data on our behalf:

• Supabase – hosting, database, file storage and user authentication. Our instance is located in the EU.
• Google (Gemini API) – AI processing of receipt images
• Vercel – hosting and rendering of the web page that a shared receipt link opens. Vercel processes the shared receipt's information at the moment the page is displayed to the recipient.
• RevenueCat – management of subscriptions and purchases

These suppliers process information only on our instructions and under relevant data processing agreements or equivalent legal mechanisms.

In addition, the following act as independent controllers for their own processing, and their own privacy policies apply:

• Google and Apple, when you choose to sign in with your Google or Apple account
• Apple App Store and Google Play, when you purchase a subscription. The purchase is made with the app store, not with us.

7. Data Retention

We retain your personal data and your content for as long as you have an active account.

Your data is retained until:

• You delete your account in the app, or
• You ask us to delete it

When you delete your account, we remove your account, your receipts, images, folders, notes, warranty reminders and share links from our active systems.

Please note the following:

• Our databases are backed up on an ongoing basis. Deleted information may therefore remain in backups for up to 30 days, after which it is overwritten.
• In rare cases individual technical files may require manual cleanup. Write to us at david@topdigital.dk if you would like confirmation that everything has been removed, and we will carry out and confirm the cleanup.
• If another user has saved a copy of a receipt you shared with them, that copy belongs to their account. We cannot delete it as part of deleting your account. See section 8.
• Deleting your account does not cancel your subscription. Subscriptions must be cancelled in the App Store or Google Play.
• Server and error logs are retained for up to 90 days for operational and security purposes.

8. Data Sharing

Sharing a single receipt via a link

You can share a receipt via a link. The link opens a web page showing the receipt's merchant, date, amount, VAT and the image itself. The link works for 7 days by default and 30 days at most, after which it expires. You can stop sharing at any time from within the app.

The link requires neither a login nor the app. Anyone who has the link can view the receipt until it expires or you stop sharing. You are responsible for who you share the link with. The page is marked so that search engines do not index it.

Shared folders

You can invite other users into a folder you own. All members of the folder can see the receipts in it — including images, amounts, dates, merchant and notes.

• As the owner of a folder, you can see the email address of each member so that you can manage access.
• When you accept an invitation to someone else's folder, your email address likewise becomes visible to that folder's owner.
• The owner can remove a member at any time, and you can leave a shared folder at any time.

An invitation expires after 7 days by default.

General

We do not sell your personal data and we do not disclose it to third parties for marketing purposes.

9. Transfers Outside the EU

Your account, your receipts and our backups are stored with Supabase within the EU.

The following suppliers may process personal data outside the EU/EEA:

• Google (Gemini API) – AI processing of receipt images is delivered from a global infrastructure, and processing may take place outside the EU/EEA.
• RevenueCat – a US-based supplier of subscription management.
• Vercel – a US-based supplier that renders the web page behind a shared link.

Where a transfer to a third country takes place, it is made on a valid transfer basis, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework, together with any supplementary measures required under Chapter V of the GDPR.

10. Security

We protect your information with appropriate technical and organisational security measures, including:

• Encryption of stored data (AES-256) at our hosting provider
• Encryption in transit (TLS)
• Access controls, so that you can only access your own receipts
• Receipt images are held in private storage and can only be retrieved through temporary, time-limited links
• Hosting and backup of your receipts in the EU
• Regular backups

Note that the AI processing and certain other suppliers operate outside this EU hosting, as described in sections 6 and 9.

Although we work actively on security, we cannot guarantee absolute security.

11. Your Rights

Under data protection law you generally have the right to:

• Access the information we process about you
• Have inaccurate information corrected
• Have information erased
• Restrict processing
• Data portability
• Object to certain types of processing, including processing based on legitimate interest (GDPR Article 21)

You can exercise the right to data portability directly in the app: under export you can download all your receipts as a CSV file, or as a ZIP file containing both the CSV and all original scans.

You can contact us at david@topdigital.dk to exercise your rights. We normally respond within one month. If the request is complex, that period may be extended by up to two further months, in which case we will tell you within the first month.

You also have the right to lodge a complaint with the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk), or with the supervisory authority in your country of residence, if you believe our processing of your personal data breaches applicable rules.

12. Children

Receep is not intended for people under 16 years of age.

We do not knowingly collect personal data about children under 16. If we become aware that an account has been created for someone under 16, we will delete the account and the associated data.

13. Changes

We may update this Privacy Policy from time to time.

In the event of material changes we will inform you in the app or by other appropriate means before the change takes effect. The date at the top of this page shows when the policy was last updated.

14. Contact

If you have questions about this Privacy Policy or our processing of personal data, you can contact us here: