Privacy Policy — receipt.garden

This Privacy Policy explains what personal data receipt.garden (the "Service") processes, why, and what choices you have. It follows the EU General Data Protection Regulation (GDPR) and applies to everyone who uses the Service.

1. Who is responsible for your data

The Service is run by Vasyl Ryzhkov, a self-employed individual based in Portugal ("we", "us"), who is the data controller. For anything about your data, write to support@receipt.garden.

2. What we process

Account: your email address, your password (stored only as a hash), your language and settings, and the date you signed up.
Receipts: the photos you upload and the data read from them or typed in by you: merchant, date, country, currency, line items with quantities and prices, categories and the total.
Groups: the groups you create or belong to. Members of a group see each other's email addresses.
Technical data: IP address, time of the request, the page requested and browser type, recorded in server logs.

A receipt photo can show more than we read from it, for example a tax number, the last digits of a card or a cashier's name. We do not extract these details; they exist only inside the photo, for as long as the photo is kept (Section 4).

We do not use analytics, advertising or tracking tools, and we do not obtain data about you from anyone else.

3. Why we process it and on what legal basis

Running your account, reading your receipts, showing your records and statistics, and sending service emails (address confirmation, password links): performance of our contract with you (GDPR Article 6(1)(b)).
Keeping the original photo, if you turn this on: the same contract, at your choice (Section 4).
Keeping the Service secure and fixing faults (server logs, limiting repeated failed log-ins): our legitimate interest in a safe and reliable Service (Article 6(1)(f)).
Answering lawful requests from authorities: compliance with a legal obligation (Article 6(1)(c)).
Sensitive details a receipt may reveal: your explicit consent (Article 9(2)(a)), see Section 5.

We do not sell your data, do not use it for advertising, and do not use it to train or improve any AI model.

4. Receipt photos

By default we delete the photo as soon as it has been read, whether or not the reading succeeded. Only the extracted data stays.

If you would rather keep the photos, you can turn this on when you sign up or later in your profile. It is off by default. Kept photos are stored encrypted, only you can open them, and you can delete any of them at any time; the receipt itself stays. Turning the setting off applies to new uploads: photos already kept remain until you delete them.

5. Sensitive information in receipts

Some receipts reveal sensitive information: a pharmacy receipt can say something about your health, a donation receipt about your beliefs. GDPR calls this "special category data". We do not look for such information and treat it like any other line of a receipt, but storing it still requires your explicit consent.

You give this consent with a separate checkbox when you create your account. You can withdraw it at any time by writing to us. Because we cannot tell which receipts contain such information, the Service cannot work without this consent, so withdrawing it means your account and its data are deleted. You can also simply not upload such receipts, or delete them.

6. Who receives your data

Hosting: the website and database run on a server rented from Contabo GmbH (Germany), in a data centre in the European Union. Contabo acts as our processor under a data processing agreement.
Receipt recognition: photos are sent over an encrypted connection to a recognition server that we own and operate ourselves in Portugal. It receives only the photo and the names of your categories, not your email address. The photo is deleted from that server as soon as the result has been delivered. Photos are never sent to a third-party AI service.
Members of your groups: if you add a receipt to a group, its members see the receipt's data (not the photo).
Authorities, where the law requires it.

All processing takes place in the European Union. We do not transfer your data outside it.

7. How long we keep it

Account and receipt data: for as long as your account exists. You can delete any receipt at any time; it is removed immediately together with its lines and its photo.
Receipt photos: deleted once read, unless you chose to keep them (Section 4).
Server logs: up to 90 days.

To delete your account, write to us from the email address of the account. We delete the account, its receipts and its photos within 30 days.

8. Your rights

You have the right to access your data, to have it corrected or deleted, to receive a copy in a portable format, to restrict or object to processing, and to withdraw a consent you have given, without affecting the lawfulness of what was done before.

You can correct or delete receipts and photos yourself in the Service. For everything else, including a copy of your data or deleting your account, write to support@receipt.garden. We reply within one month.

You also have the right to complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt); you may also contact the authority of the country where you live.

9. Security

Connections to the Service are encrypted (HTTPS).
Receipt photos are encrypted on disk.
Passwords are stored only as hashes.
Access to the servers is restricted to us.

No system is perfectly secure. If a breach is likely to put your rights at high risk, we will tell you without undue delay.

10. Cookies

We use only cookies the Service needs to work. None of them is used for advertising or tracking, and none comes from a third party.

PHPSESSID: keeps you signed in until you close the browser.
REMEMBERME: keeps you signed in for 30 days, only if you tick "Keep me signed in".
locale: your language, 1 year.
theme: light or dark theme, 1 year, only if you choose one.
cookie_notice: remembers that you have seen the cookie notice, 1 year.

11. Children

The Service is not intended for anyone under 16. By creating an account you confirm that you are at least 16. If we learn that a younger person has an account, we delete it.

12. Changes and language versions

If we change this policy in a way that matters, we will tell you in the Service or by email before the change takes effect.

This policy is available in several languages. If the versions differ, the Portuguese version prevails.