Privacy Policy
Ecoslip photographs receipts and invoices, reads them into structured data, keeps a digital copy for you, shows your spending against a budget, and answers questions about it. This policy describes exactly what that involves.
In short
- We store what you scan so that you can get it back.
- We do not sell your data, and the app shows no advertising.
- Receipt photographs are read and then discarded, not kept.
- You can delete everything yourself, in the app, at any time.
01What we collect
- Your sign-in identity
- With Google we receive your name, email address, profile photo and Google account identifier. With Apple we receive your Apple account identifier and the email address Apple gives us, which may be a private relay address. We use these to create your account and show you your own documents, and for nothing else.
- The documents you scan
- The data read from each receipt: merchant and address, dates, line items, amounts, taxes, payment method, and barcodes and serial numbers where present. This is stored on our server so that your archive follows your account onto any phone. The photograph itself is not kept: it is sent to be read and then discarded. Documents scanned with app versions before 1.8 may still have their photograph stored until you delete the document.
- One scan before you sign in
- You can try one scan without an account. Its photograph is read the same way and then discarded, and what was read stays on your phone, not on our server, until you sign in and save it. So that the trial is given once per phone, we keep a one-way code of a random identifier the app creates, and briefly use your network address to limit repeated attempts. Neither is linked to you.
- Your settings
- Your currency, categories, folders and monthly budgets, and the name you choose to show a budgeting partner.
- What you tell the assistant about yourself
- Chat conversations are not stored on our server. The one exception is the budget coach: what you tell it about your situation, such as your city, household, housing costs, income and savings goals, is saved to your account so that it does not ask twice. You can erase this at any time under Settings → Your data → Forget what I told the assistant.
- Usage counts
- How many scans and chat answers your account has used, because plans have limits.
- Subscription state
- If you subscribe, Google Play or the App Store sends us a purchase token proving the subscription. Payment is handled entirely by the store. We never see your card or bank details.
- App activity and device information
- Which features you use: for example, that a receipt was scanned, a budget was set or a question was asked, and never what the receipt, budget or question contained. Alongside it, your device model, operating system, app version and language, and the token your phone uses to receive notifications. This is recorded under an anonymous identifier, not your name or email address.
02Budgeting with a partner
If you choose to pair with a partner, the two of you share one monthly budget. Your partner sees the name you chose and how much you have spent against that budget, overall and for each budgeted category, and may be notified of the amount and category of a purchase.
Your partner never sees your receipts, the shops or items on them, or your chat. Either of you can end the pairing at any time, and it ends automatically if either account is deleted.
03Who processes your data
These are the only outside services involved. Each is used solely to make the app work.
| Service | What it receives, and why |
|---|---|
| OpenAIUnited States | Each receipt photograph, sent over an encrypted connection to be read into structured data. When you use the chat: a summary of your spending, your budget, what you have told the budget coach, and your question. Under OpenAI's API terms this data is not used to train their models. |
| Hetzner OnlineHelsinki, Finland (EU) | Hosts the server we operate, where your documents and settings are stored. Data is encrypted in transit. |
| AmplitudeUnited States | App activity and device information, under the anonymous identifier, so that we can see which features are used and where the app fails. |
| Customer.ioUnited States | Sends the app's notifications. It receives the same app activity and device information, your notification token, and the figures a notification mentions: the amount and category of a purchase, the name of the partner who made it, how much of a budget is used or left, and your week's total, number of receipts and largest category. |
| Google Firebase and ApplePush delivery | Firebase Cloud Messaging and the Apple Push Notification service carry notifications to your phone. |
| Logo.dev | The name of a shop from a receipt, and nothing about you, so that the app can show the shop's logo. |
| Fixer | Provides currency exchange rates. It receives no personal data. |
| Google and AppleSign-in and billing | Your sign-in, and your subscription through Google Play or the App Store. |
| Google SheetsOnly if you turn it on | If you connect a folder to Google Sheets, the app writes rows into the spreadsheet you selected, directly from your phone using your own Google permission. We do not read, store or access any other file in your Google account. |
04Notifications
Notifications are optional. The app asks once, and you can turn them off at any time in your phone's settings. They concern your own account: that a budget is nearly used, that your partner has spent against a shared budget, a short summary of your week, or a single reminder if you have stopped scanning.
05What we never do
- We do not sell or rent your data to anyone, for any purpose.
- We show no advertising and use no advertising trackers.
- We do not share your data with third parties beyond the services named above.
- We do not read your Google Drive, Gmail or contacts, or anything beyond the single spreadsheet permission you grant.
06How long we keep it, and deletion
Your documents stay until you delete them. You can delete any single document, every document at once, or your entire account, all from the app under Settings → Your data.
Deleting your account removes your documents, your settings and budgets, what you told the assistant, any partner pairing, your usage history and the account record itself from our server, and removes your profile from Customer.io. It is immediate and permanent: there is no recycle bin on our side.
You can also request deletion without the app. See Delete your Ecoslip account.
What remains after deletion. A count of the free scans and free chat answers the account had already used, kept under a one-way code that cannot be turned back into your identity. It exists only so that deleting an account and creating it again does not reset the free allowance.
App activity already recorded in Amplitude remains there under its anonymous identifier, which is no longer connected to any account. Rows already written into your own Google Sheets are yours and are not touched by any deletion we perform.
07Children
Ecoslip is not directed at children under 13, and we do not knowingly collect data from them.
08Changes to this policy
If this policy changes in a way that matters, the effective date above changes with it, and material changes will be flagged in the app before they take effect.
09Contact
RippleIT LLC
support@rippleit-co.com