Privacy Policy

The short version

• We collect what it takes to keep your receipts: your email, the photos you take, and what we read from them.
• We do not sell your data, show ads, or track you across other apps and websites.
• You can export everything, free, on every plan, and delete your account from inside the app.

What we collect

• Account details. Your email address, which is how you sign in (with a one-time code — there is no password), and a name if you add one. The organizations and workspaces you create or join, and your role in them.
• Receipts. The photos you capture or import, and the details read from them or typed by you: merchant, date, amounts, tax, currency, payment method, categories, tags, notes and splits. Budgets and other settings you create.
• Usage counts. How many receipts you scan and exports you make each month, so plan limits can be applied.
• Billing status. Which plan an organization is on, its renewal state, and who is recorded as paying. Card and bank details go to the payment provider and are never seen or stored by us.
• Device and app diagnostics. App version, operating system, error and crash reports, and the requests the app makes to our servers, used to keep the service working.

We do not collect your location, contacts or microphone, and the camera and photo library are used only when you choose to add a receipt.

Why we use it

• To provide the service: storing your receipts, reading them, and showing them to the people you share a workspace with.
• To sign you in and send the emails you ask for — sign-in codes, invitations, and scheduled exports.
• To apply your plan and take payment for it.
• To keep the service secure, prevent abuse, and fix problems.

Where the law asks for a legal basis, it is the contract with you for the service itself, and our legitimate interest in keeping it secure and working. [Confirm with counsel.]

Who processes it for us

These companies handle data on our behalf, only to run the service, under their own security and data-processing terms:

• Supabase — the database and sign-in.
• Cloudflare (R2) — storage of receipt photos and export files.
• Anthropic — AI reading of receipt photos, to extract the merchant, date and amounts. Photos are sent for that purpose only. [Confirm: under Anthropic’s commercial terms, API inputs are not used to train its models.]
• Stripe — payments made on the web. Apple and Google — payments made in the app stores, managed through RevenueCat.
• Resend — delivery of email.
• Expo — delivery of app updates.

Some of these providers process data outside your country, including in the United States. [Describe transfer safeguards, e.g. Standard Contractual Clauses.]

Who else sees it

People you share a workspace with see that workspace’s receipts, as the app shows them. We disclose data to anyone else only when the law requires it, or to protect the safety of a person or the service. If the business is sold or merged, this policy continues to apply to your data.

How long we keep it

• Your receipts are kept while your account is open, until you delete them.
• Deleted receipts, workspaces and organizations wait 30 days in Trash, then are permanently deleted, photos included.
• Deleting your account starts a 30-day window in which signing back in can undo it. After that the account is permanently deleted, along with any organization only you were in.
• Backups age out within [N] days. Billing records are kept as long as tax law requires.

Your choices and rights

• Export everything. The “Everything” export — your receipts, data and photos — is free on every plan.
• Delete your account in the app (More → Delete account), without contacting anyone. A subscription bought through the App Store or Google Play is billed by Apple or Google and has to be cancelled there.
• Correct anything in the app, or ask us to. You can also ask for access to, or restriction of, your data, and object to how it is used, at support@theiqsuite.app. You may complain to your local data-protection authority.

Security

Data is encrypted in transit. Access is checked by the database for every request, so one organization cannot read another’s books, and receipt photos are served only through short-lived signed links.

Children

The service is for running a business and is not directed at children under [13/16]. We do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will say so in the app or by email before the change takes effect. The date at the top is the current version.