Privacy Policy

Receipt Scanner is designed so your receipts and expenses stay on your device. We do not operate a backend that receives, stores, or analyses your receipt photos or expense records.

Effective date: 2026-08-03 · Last updated: 2026-08-04 · Website: receiptscanners.com

1. Who we are

This Privacy Policy explains how Receipt Scanner (“we”, “us”, “our”) handles information in connection with the website and web application at https://receiptscanners.com (the “Service”).

Contact for privacy questions or requests: receiptscanners.com@gmail.com · Contact page

2. Scope

This Policy applies to:

• Visiting or using Receipt Scanner in a web browser (including as an installed PWA)
• Scanning receipts, storing expenses, budgets, insights, backups, and related features
• Reading our guides and other public pages on this domain

It does not cover third-party websites you may link to from our guides or elsewhere. Those sites have their own policies.

3. Summary (plain language)

• Receipt photos and expense data are processed and stored in your browser on your device. They are not uploaded to our servers—we do not run an application backend for that purpose.
• We do not create accounts, and we do not sell personal information.
• Google Analytics loads automatically on site pages to measure usage. Receipt photos, PDFs, OCR text, expenses, merchants, and amounts are never sent to Google Analytics.
• Hosting infrastructure (Cloudflare) may process standard technical request logs when your browser downloads the site’s static files.
• You can export or delete local data from the app or by clearing site data in your browser.

4. Information we process

4.1 Data that stays on your device (not sent to us)

When you use scanning and expense features, the following is handled locally in your browser (for example via IndexedDB, local storage, session storage, and the Cache API / service worker). We do not receive this content:

• Images and PDFs you capture or select for OCR (receipts, invoices, bills)
• Text and fields extracted by on-device OCR and parsing (merchant, dates, amounts, tax, tips, invoice numbers, and similar)
• Expense records, books, budgets, splits, settlements, and insights you create or edit
• App preferences (currency, date order, region prior, theme, and similar settings)
• Backups and exports you generate (files you download stay under your control)
• OCR model files cached on your device so scanning can work offline after the first load

You can verify that receipt content is not uploaded by inspecting your browser’s network activity while scanning: the Service loads static assets (including the OCR engine); it does not post receipt images or expense payloads to our origin for processing.

4.2 Device permissions

• Camera — used only if you choose camera capture, so the browser can take a photo for on-device recognition. We do not stream the camera feed to a server.
• File / gallery access — used only if you pick images or PDFs from your device.
• Persistent storage — the app may request durable storage so the browser is less likely to clear your local database. Granting or denying this is controlled by your browser.

You can revoke permissions in your browser or device settings at any time.

4.3 Technical information processed by hosting (not receipt content)

The Service is delivered as static files over the internet using Cloudflare (content delivery and hosting). When your browser requests pages, scripts, styles, fonts, icons, or OCR model files, Cloudflare and standard internet infrastructure may process technical data such as:

• IP address
• Date and time of the request
• Requested URL / resource path
• HTTP status and approximate response size
• User-agent (browser and device type)
• Referrer header (if the browser sends one)
• Basic security and performance telemetry used to operate the network

This is ordinary web-server and CDN logging. It is used to deliver the site, protect against abuse, and maintain reliability. It does not include the contents of your receipts or expense database, because those are not transmitted for application processing.

Cloudflare’s own privacy practices apply to its processing as a service provider. See Cloudflare’s documentation and privacy policy for details on log retention and security products that may be enabled on the account that hosts this site.

Google Analytics receives limited usage information such as page views, page paths, referrers, browser/device details, and approximate location inferred by Google. Analytics runs on all site pages without query strings, and the app does not send receipt content or expense data to it. Google’s own privacy terms and retention settings apply to this processing.

4.4 Information we do not collect (as of this Policy)

• Account credentials, profiles, or sign-in with Google or other identity providers
• Payment card data (the core Service is free and has no checkout)
• Advertising identifiers or cross-site tracking pixels
• Contact lists, precise GPS location, microphone audio, or background sensors
• Server-side copies of your expense history

5. How information is used

We do not use your receipt or expense content for advertising, profiling, or model training on our servers, because we do not receive that content.

6. Legal bases (where applicable, e.g. GDPR/UK GDPR)

If data protection law in your region requires a legal basis for processing:

• On-device app data — processed under your control to perform the Service you request (contract / legitimate interest in providing a local tool you chose to run).
• Hosting logs — legitimate interests in operating a secure website and network, and/or necessity to deliver the files you request.
• Permissions — based on your consent when the browser prompts you (camera, storage, etc.).
• Analytics — used on site pages to understand usage. Where local law requires consent for this processing, the site operator should configure consent controls before serving visitors in that jurisdiction.

7. Sharing and sale of personal information

• We do not sell your personal information, and we do not share receipt or expense content with third parties for cross-context behavioural advertising.
• Service providers: Cloudflare processes technical request data as needed to host and deliver the Service.
• Analytics provider: Google Analytics processes limited site usage data. We do not send receipt or expense content.
• Legal requirements: We may disclose information if required by law or to protect rights, safety, and integrity of the Service, to the limited extent such information is available to us (typically hosting/account-level data, not your local expense database).
• Business transfers: If the Service’s ownership changes, technical hosting arrangements may change; this Policy will be updated if practices change materially.

California (CCPA/CPRA) and similar laws: We do not “sell” or “share” personal information as those terms are commonly defined for advertising. You may still contact us at receiptscanners.com@gmail.com to ask about categories of information and our practices.

8. Cookies, local storage, and similar technologies

Receipt Scanner does not use advertising cookies. Google Analytics may use cookies or similar identifiers for site usage measurement. The Service also uses browser storage technologies that are necessary for the product to function:

• IndexedDB — expense records, books, budgets, related app data, optional receipt images
• Local / session storage — preferences and short-lived UI state
• Cache / service worker — offline access and faster loads (including OCR assets)
• Analytics storage — Google Analytics cookies or identifiers for site usage measurement

You can block or clear analytics cookies using browser privacy controls. Clearing all site data also deletes local expenses unless you have exported a backup.

9. Data retention

• On-device data: retained until you delete it in the app, clear site data, or your browser/OS removes it (for example storage pressure or inactivity policies, especially on some mobile browsers if the site is not installed to the home screen).
• Hosting logs: retained according to Cloudflare’s and the hosting account’s configuration (typically for security and operations for a limited period).
• Analytics: retained according to the Google Analytics property’s configured retention settings and Google’s applicable policies.

Because expense data is local-first, export backups regularly if you need a durable copy. See our guide on keeping local records safe under Guides.

10. Security

We take reasonable technical measures appropriate to a static, client-side application:

• HTTPS encryption in transit for site assets
• Content Security Policy and related browser security headers where configured
• No application backend that stores receipt content for us to breach
• On-device processing so sensitive document images need not leave your device for OCR

No method of transmission or storage is 100% secure. You are responsible for physical access to your device, browser profile security, and any backups you download. If you export files, treat them as sensitive documents.

11. International users

The Service is available over the internet and may be delivered from CDN edge locations in multiple countries. Technical request data may be processed in the regions where Cloudflare operates. Your receipt and expense content remain on your device unless you export or transfer files yourself.

12. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided information to us through hosting or contact channels, email receiptscanners.com@gmail.com and we will take appropriate steps.

13. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing, or to object to certain uses. For this Service:

• Access / portability: use in-app views and CSV/JSON export or full backup features
• Correction: edit records in the app before or after saving
• Deletion: delete records in the app, or clear site data for this origin in your browser (removes local data; there is no server copy of expenses for us to erase)
• Permissions: revoke camera or storage permissions in the browser/OS
• Requests to us: email receiptscanners.com@gmail.com. We can help with Policy questions and any limited personal data we hold (for example if you emailed us). We cannot retrieve expense data that exists only on your device.

If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority. If you are in California, you may contact us to exercise applicable rights; we will not discriminate against you for doing so.

14. Third-party links and offline use

Guides or pages may link to third-party articles or tools. We are not responsible for their privacy practices. After the first successful load, parts of the Service may work offline using cached assets; offline use still processes data only on your device.

15. Changes to this Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. We will post the revised Policy on this page and update the “Last updated” date. Material changes may be highlighted on the website when appropriate. Continued use of the Service after an update means you acknowledge the revised Policy.

16. Contact

Privacy and data requests:
Receipt Scanner
Website: https://receiptscanners.com
Email: receiptscanners.com@gmail.com
Contact page: /contact

Related: Terms of Service · Contact Us

This Policy is provided to explain our practices clearly. It is not personalised legal advice.