Privacy Policy

Data collected

Enceipt has no servers and no user accounts. Receipt images, amounts, merchant names, notes, and all other financial data are stored only in the app's private storage on your device, encrypted at rest. None of it is ever sent to Enceipt.

Analytics

Analytics events are anonymous and aggregate. Event properties never include merchant names, amounts, OCR text, receipt identifiers, or any other financial data. Analytics exists only to tell us which features people use.

Third-party services

Enceipt uses a small number of third-party services. Except where you explicitly choose to send data — AI providers and the Sheets export, both noted below — none of them receive your financial data:

• PostHog — anonymous usage events. No personal identifiers, no financial data, no receipt content. Events include: app opened, receipt scanned (count only), paywall viewed. PostHog is configured to exclude all financial properties.
• Firebase Crashlytics — crash reports including device model, OS version, and stack trace. No receipt content, no financial data.
• RevenueCat — subscription status and purchase history. RevenueCat receives your device's anonymous identifier and purchase receipt from Google Play. No financial data from Enceipt is shared.
• Google Drive / Dropbox (optional) — if you enable backup, encrypted backup files are uploaded to your own account. Enceipt cannot decrypt or access these files — you hold the encryption key.
• Google Sheets (optional, Pro) — if you tap "Export to Sheets", Enceipt creates a spreadsheet in your own Google account containing the expenses you chose to export (date, merchant, amount, category, notes). This export is user-initiated and goes only to your own Google account; Enceipt keeps no copy. Unlike a backup, an exported spreadsheet is a normal, unencrypted spreadsheet that you own and control.
• AI providers (optional, Pro) — if you configure an AI provider (OpenAI, Google Gemini, Anthropic Claude, Ollama), receipt text is sent to that provider's API when you scan a receipt. This is governed by your agreement with that provider. Enceipt does not store or transmit these requests.

On-device AI model

Enceipt offers an optional AI model for more accurate receipt extraction. It is entirely opt-in, and when enabled it changes nothing about our core privacy promise:

• The AI model runs entirely on your device. Receipt text is never sent to any server for AI processing.
• The model file is downloaded once from Launchwick's CDN and stored in app-private storage on your device.
• The model is Google Gemma 3, provided under the Gemma Terms of Use.
• You can delete the model at any time from the app settings to free up space; the app keeps working with its built-in text recognition.

Rights for EU/EEA residents (GDPR)

Since Enceipt stores all data on your device, you have complete control. There is no account to delete, no server-side data to request.

To delete all your data: open Enceipt → Settings → Delete All Data. This permanently removes all receipts, categories, and settings from your device.

For questions: [email protected]

Rights for California residents (CCPA)

Enceipt does not sell personal information. We do not collect personal information in the traditional sense — your financial data is stored only on your device. The limited analytics we collect (anonymous usage events via PostHog) do not include personal identifiers.

Data deletion

You can erase all app data at any time from Settings → Delete All Data. Because nothing is stored off-device, this removes everything.

To delete your account and data, visit our account deletion page.

Contact

Privacy questions: [email protected]

General support: [email protected]

For GDPR data requests: since data lives on your device, the fastest resolution is Settings → Delete All Data within the app.

Last updated: 2025