Privacy Policy

1. Who operates Receiptly

Receiptly is operated by Shaofei Liu in New Zealand. For privacy questions or requests, contact isshaofeiliu@gmail.com.

2. Information we collect

Account and contact information

We collect your email address, display name if supplied, encrypted authentication records, and information needed to maintain your login sessions. Passwords are not stored in plain text; Receiptly stores a one-way password hash.

Receipt and household expense information

We collect receipt details that you scan, review, or confirm, including merchant name, purchase date, receipt number, currency, totals, product names, quantities, prices, and adjustments. Confirmed records are associated with your household so authorised household members can view the shared household ledger.

Receipt images

When you choose or capture a receipt image, Receiptly sends the image to its server and to its artificial-intelligence processing provider, OpenRouter, to extract receipt data. The current Receiptly service processes the image in memory and does not save the original image to the Receiptly database or permanent Receiptly storage. You should review extracted data before confirming it.

Household and invitation information

We collect household names, membership roles, member email addresses, and invitation status so users can create a household and invite or manage household members.

Device, security, and usage information

We process an app installation identifier, device name, platform, session timestamps, security events, IP address, and basic request diagnostics to authenticate users, prevent abuse, diagnose failures, and protect the service. The website hosting Receiptly services may also collect aggregated usage and performance information.

3. How we use information

• Register accounts, verify email addresses, and authenticate users.
• Scan receipts and return structured candidates for your review.
• Store confirmed expense records and make them available to authorised household members.
• Send login codes, security messages, and household invitations.
• Prevent duplicate submissions, fraud, abuse, and unauthorised access.
• Operate, troubleshoot, secure, and improve Receiptly.
• Comply with applicable legal obligations and enforce our rights.

Receiptly does not sell personal information and does not use it for third-party advertising.

4. Service providers and disclosure

Receiptly uses service providers that process information only to provide their services:

• Neon: hosted database services for accounts, households, and receipt records.
• Vercel: application hosting, delivery, operational logs, and performance services.
• OpenRouter: artificial-intelligence processing of receipt images and text.
• Resend: delivery of verification codes and household invitation emails.

These providers may process information in countries outside New Zealand, including the United States. We may also disclose information when required by law, to protect users or the service, or as part of a business reorganisation subject to appropriate safeguards.

5. Household sharing

Receiptly is a household product. Confirmed receipts and expense records can be viewed by active members of the same household. A household owner can invite and remove members. Removed members immediately lose access, but expense records previously contributed to the shared household ledger may remain available to the household.

6. Retention and deletion

We retain account and confirmed expense information while your account or household remains active, and for only as long as reasonably necessary to provide and secure Receiptly or meet legal obligations.

You can initiate deletion from the Receiptly app under My Account → Delete Account. Deletion revokes active sessions, removes authentication identities, and anonymises the account. If you are the only member of a household you own, that household and its receipt data are deleted. If other members remain, Receiptly will require the household ownership issue to be resolved before account deletion. Shared records contributed as a non-owner may remain in the household ledger, but your account identifiers are removed.

Some minimal security or legal records may be retained where required by law or necessary to establish, exercise, or defend legal claims.

7. Security

Receiptly uses access controls, short-lived access tokens, revocable sessions, password hashing, encrypted transport, and household membership checks. No system is completely secure, so please protect your device and login credentials and contact us if you suspect unauthorised access.

8. Your choices and rights

Depending on applicable law, you may request access to or correction or deletion of your personal information. You can delete your account in the app or contact isshaofeiliu@gmail.com. We may need to verify your identity before fulfilling a request.

9. Children

Receiptly is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

10. Changes to this policy

We may update this policy as Receiptly changes. We will publish the revised policy on this page and update the effective date. Material changes may also be communicated in the app.