Privacy Policy
What we collect, why we collect it, and how it is protected.
Last updated November 2026
Data we collect
Account details (email, name, avatar) provided at sign-up or by your chosen sign-in provider; trip, budget, comparison and expense records you create; receipts and travel documents you upload; and technical logs needed to operate and secure the service.
How your data is stored
Your records live in an access-controlled Postgres database with row-level security, so each row is readable only by the account that owns it. Receipts and vault documents are stored in private buckets scoped to your own user folder and are never publicly addressable.
Receipt scanning
When you scan a receipt, the image is sent to our AI provider solely to extract merchant, amount, currency, tax and fee fields. Extracted values are stored against your expense record. We do not use your receipts to train models.
Exchange rate and card data
Rates come from third-party mid-market providers and are cached in our database with the provider name and fetch timestamp. Card fee data is maintained in our own catalogue.
Affiliate links
Some card application links are affiliate links. When you click one, we record the click (card, placement, timestamp and, if signed in, your account id) so partners can attribute it. We never share your uploaded documents or expense data with partners.
Retention and deletion
You can delete individual records at any time. Ask us to remove your account and we will delete your profile, uploads and derived records.
Contact
Privacy questions: use the contact link in the footer.