Effective Date: 2 Oct 2026
This Privacy Policy explains what information Smart Receipts (“the App”) collects, why, where it is kept, who helps us process it, and the choices you have. Smart Receipts is made by Reku (“we”, “us”).
In short: we collect what the App needs to keep your receipts and expenses, sync them between your devices and read receipts for you. We do not sell your data, we do not use it for advertising, and you can delete your account and everything in it from inside the App at any time.
If you join the web access waitlist, we store your email address and the date you joined in our Supabase database. We use it to contact you about web availability. Our internal Discord alerts contain signup counts, without email addresses. Joining does not create an app account or start a subscription. You can ask us to remove your email at any time through our contact form. We do not publish the waitlist or use its emails for unrelated advertising.
You can use Smart Receipts without signing in. Your expenses and receipt files then stay on your device, and we do not receive them. A few features still reach our servers or partners, as described below: reading a receipt with AI (section 4), app analytics and crash reports (section 8), and subscriptions (section 7).
You can create an account with Sign in with Apple or Sign in with Google. We receive and keep:
Your email address is used to sign you in, to send the messages described in section 6, and to decide which emails may file receipts to your account (section 5).
When you are signed in, the App keeps your data in your account so it is backed up and available on all your devices. This includes:
Exporting a PDF or CSV report is done on our server and the file is sent straight back to you; we do not keep a copy of the report.
When you scan, import or email a receipt, the image or PDF is sent to our server and then to OpenAI, which reads it and returns details such as the merchant, date, amount and taxes. OpenAI processes this for us as a service provider under its API terms: it does not use this data to train its models, and it may keep it for up to 30 days to detect abuse before deleting it.
For each reading we keep a short technical record for 90 days (time, result, processing time, the AI model used, and an identifier for your device) so we can find faults and prevent misuse. This record does not contain the receipt or its contents.
To protect this service from abuse, the App uses Apple’s App Attest to prove to our server that requests come from a genuine copy of Smart Receipts on a real device.
AI can make mistakes. Always check the details it fills in before relying on them.
Your account has a private receipts address. When you forward a receipt email, or send a photo or PDF, to that address:
Incoming mail is received by our email provider, Resend.
Emails are sent through Resend. We record whether an email was delivered, bounced or marked as spam, so we stop sending to addresses that do not work.
Subscriptions are bought through Apple’s App Store; we never see your card or payment details. We use RevenueCat to manage subscriptions. RevenueCat receives your purchase history from Apple, an identifier for your account, and a few details we attach: which screen in the App led to the purchase and the kind of use you chose during setup (for example personal or business). This lets Pro follow your account to every device you sign in on. RevenueCat may also receive attribution information from Apple Search Ads showing which campaign, if any, led to the download.
We use Google Firebase Analytics to understand how the App is used (for example which screens are opened and which features are used), and Firebase Crashlytics to receive crash reports with technical details about your device and the App. We use this only to fix problems and improve the App. We do not track you across other companies’ apps or websites, and we do not use advertising identifiers.
If you connect Dropbox or OneDrive, the App copies your receipts and expense data into your own Dropbox or OneDrive account, encrypted with a key kept in your device’s keychain. That copy is governed by your agreement with Dropbox or Microsoft; we do not have access to it. Signing out of Smart Receipts disconnects them on that device.
The App asks for the camera (to scan receipts), your photo library and files (to import receipts), notifications, and Face ID or Touch ID (for the optional app lock and to confirm account deletion). Each is used only for that purpose, and you can change it in iOS Settings at any time.
We do not sell or rent your personal information, and we do not share it for advertising. We use these service providers to run the App, each only for the purpose described:
Your data may be processed outside your country, including in the United States. We may also disclose information if required by law or to protect the rights and safety of our users or others.
You can delete your account at any time in the App: Settings → Account → Delete Account. If you no longer have the App, you can request deletion on the web. This permanently deletes your account, your expenses, your receipt files and your settings from our servers, and clears them from that device. If you signed in with Apple, we also ask Apple to revoke Smart Receipts’ access to your Apple ID. Deletion cannot be undone. Deleting your account does not cancel an App Store subscription; cancel it in your Apple ID settings.
Signing out also clears your data from that device; it stays in your account for the next time you sign in.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. You can edit and delete your data in the App, export it as PDF or CSV, and delete your account yourself. For anything else, contact us at the address below and we will respond within 30 days.
Data is encrypted in transit, access to each account’s data is restricted to that account, and receipt files are only reachable through short-lived links issued after checking that you own them. No system is perfectly secure, so please also protect your device with a passcode, and consider the App’s optional Face ID lock.
Smart Receipts is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
smart-receipts.com uses Google Analytics to count visits and see which pages are read.
We may update this Privacy Policy as the App changes. We will post the new version here with a new effective date, and tell you in the App or by email if the changes are significant.
For questions or requests about your privacy, contact us through the contact form: