Privacy Policy

Last updated: July 11, 2026

ReceiptOptic (accessible from https://receiptoptic.com) is a product operated by Thomas Martin, a sole proprietor ("we," "us," or "our"). One of our main priorities is the privacy of our users. This Privacy Policy document outlines how we collect, process, and protect your information.

1. Information We Collect

ReceiptOptic collects receipt images, line item descriptions, and transaction values solely for the purpose of financial tracking, expense reporting, and analytics. How your data is stored depends on your usage:

Local Storage: Your receipt databases, scanned images, and budget configurations are stored locally on your device (PC/Mobile). Local databases are fully encrypted and protected using SQLCipher, secured by your user password.
Optional Cloud Sync: If you choose to enable cloud synchronization, your database is securely synced between your devices via a private Supabase instance using industry-standard SSL/TLS encryption.

2. Bank & Investment Account Linking (Plaid)

ReceiptOptic offers optional bank and investment account linking, powered by Plaid Inc. ("Plaid"), a third-party financial data service. This feature is entirely optional — you can use ReceiptOptic's receipt scanning, budgeting, and tax-tracking features without ever linking a financial account.

Your credentials never reach us. When you choose to link an account, your bank or brokerage login is entered directly into Plaid's own secure interface. ReceiptOptic's app and servers never see or store your bank username or password.
What we actually receive. After you complete linking, Plaid provides ReceiptOptic with a secure access token — not your credentials — which is used to retrieve your account balances and transaction history on your behalf.
How that data is stored. Balances and transactions retrieved through Plaid are stored the same way as your other financial data described in Section 1: locally on your device, and — only if you've enabled cloud sync — in your private, encrypted Supabase instance.
Disconnecting an account. You can unlink a connected bank or investment account at any time from the Bank Link screen inside the app.
Plaid's own role. Once your data is retrieved through Plaid, Plaid's handling of it is governed by Plaid's own privacy policy, available at plaid.com/legal. ReceiptOptic does not sell, rent, or share the bank or investment account data obtained through Plaid with any other third party for marketing or advertising purposes.

3. Third-Party AI Processing

To automate receipt data extraction, ReceiptOptic sends your scanned receipt images directly from your device to Google's Gemini API over an encrypted (HTTPS) connection, to extract vendor names, transaction dates, tax amounts, and line items. This is a direct connection between your device and Google — it does not pass through any ReceiptOptic-operated server.

Paid/billed Gemini API access: under a paid Gemini API tier, Google's terms state that submitted content and responses are not used to improve Google's products, and are not used for model training.
Free-tier Gemini API access: under Google's free API tier (Google AI Studio, no billing account), Google's terms allow submitted content — including images — to be used to provide, improve, and develop Google's products, and human reviewers may see it. This free-tier data-use policy does not apply to users located in the EEA, UK, or Switzerland, where paid-tier data protections apply regardless of billing status.
Which of these applies depends on which Gemini API access the operator has configured; it is not something ReceiptOptic's own app can change on your behalf.

4. Data Retention and Deletion

You retain complete ownership and control over your financial data:

All local data resides on your device and is deleted if you uninstall the application.
Instant Account & Cloud Deletion: Users can delete their entire account and all associated cloud data instantly via the "Delete Account" feature inside the Settings screen of the app. Once deleted, this action is irreversible.

5. Cookies and Site Analytics

Our website utilizes minor cookies to preserve user preferences. We do not resell user financial records to any data brokers.

Our website displays advertisements served through Google AdSense. Google AdSense uses cookies and similar tracking technologies to serve ads, including ads personalized based on your interests and browsing activity across websites. These third-party cookies are subject to Google's own privacy and data-use policies.

You can control ad personalization in several ways:

Our Consent Message: Visitors in the EEA, UK, and Switzerland are shown a consent message (via Google's certified consent management platform) where you can consent, decline, or manage your preferences for advertising and analytics cookies. Declining keeps ads on our site limited to non-personalized advertising only.
Google Ads Settings: You can review and adjust how Google personalizes ads for you at adssettings.google.com.
Industry Opt-Out: You can also opt out of personalized advertising from participating companies via the Digital Advertising Alliance's tool at aboutads.info/choices.

6. Consent

By using our website or mobile/desktop applications, you hereby consent to our Privacy Policy and agree to its Terms and Conditions.