Privacy Notice

This Privacy Notice for ScanExpense ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our Services, including when you download and use our mobile application ScanExpense.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. For questions, contact us at eugene.garichev@gmail.com.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services or otherwise when you contact us. The personal information we collect includes:

• Email address — only if you choose to sign in with Google or Apple.

Sensitive Information. We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as device characteristics — is collected automatically when you use our Services.

We automatically collect certain information when you use the Services. This information does not reveal your specific identity but may include:

• Log and usage data — events and actions within the App (e.g., scans performed, exports created), collected via Firebase Analytics.
• Device data — device model, operating system version, app version, and crash reports, collected via Firebase Crashlytics.
• Anonymous user identifier — a randomly generated ID assigned automatically when you first open the App, without requiring registration.

This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Information related to receipt processing

When you use the scanning feature, you upload receipt images. These images are processed to extract structured data (date, amount, vendor). The images are stored in Firebase Storage and the extracted data is stored in Firestore, both associated with your account only.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services and to communicate with you.

We process your personal information for the following reasons:

• To deliver and facilitate the delivery of services to you (OCR scanning, receipt storage, export).
• To maintain and improve the performance and stability of the App (analytics, crash reporting).
• To respond to your support inquiries.
• To send important administrative information (e.g., changes to this policy or your subscription).
• To fulfill and manage your subscription (in-app purchases via RevenueCat).

3. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations with the following third parties.

We disclose information to the following third-party service providers solely to operate the App. We do not sell your personal information.

We may also share your information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.

4. Artificial Intelligence Processing

When you scan a receipt, the image is sent to Google Cloud Vision API for text extraction, and the extracted text is processed by Anthropic's Claude AI to identify the date, amount, and vendor. By using the scanning feature, you consent to this AI processing. If you do not wish your receipt images to be processed by AI, you may use the manual entry feature instead.

5. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your Google or Apple account. Where you choose to do this, we will receive certain profile information from your social media provider, which will typically include your email address. We will use the information we receive only for the purposes described in this Privacy Notice. We are not responsible for other uses of your personal information by your third-party social media provider.

6. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers and those of our service providers (including Google and Anthropic) are located in the United States. If you are located in the EU, UK, or elsewhere, please be aware that your information may be transferred to, stored by, and processed in the United States and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we transfer data under the European Commission's Standard Contractual Clauses, which our service providers (including Google) have agreed to as part of their data processing agreements.

7. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as your account is active. When we have no ongoing legitimate business need to process your personal information, we will delete it. You may request deletion at any time using the "Delete Account" option in the App's Settings screen, which permanently deletes all your receipts, images, and account data.

8. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to such minor's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at eugene.garichev@gmail.com.

9. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details in Section 12.

Account Information

You may terminate your account at any time using the "Delete Account" option in the App's Settings screen. Upon your request, we will delete your account and information from our active databases. We may retain some information in our files to prevent fraud, troubleshoot problems, or comply with applicable legal requirements.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

11. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes, we may notify you by posting a notice or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us at:

ScanExpense
Email: eugene.garichev@gmail.com

13. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To exercise these rights, you can:

• Use the "Delete Account" option in the App's Settings screen to delete all your data immediately.
• Contact us at eugene.garichev@gmail.com for any other data requests.

We will consider and act upon any request in accordance with applicable data protection laws.