Privacy Policy

Effective Date: November 28, 2025

Daniel Mochalov ("Company," "we," "us," or "our") operates the Receipt Ledger mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

A. Information You Provide Directly

When you create an account or use the App, you may provide us with:

• Account Information: First name, last name, email address, and password (stored in encrypted form).
• Receipt Data: Photographs of receipts, merchant names, purchase dates, amounts, tax information, itemized purchases, categories, notes, and any other information you choose to enter about your receipts.
• User-Generated Content: Folder names, tag names, workspace names and descriptions, budget goals, and any notes or annotations you add to receipts.
• Communication Data: When you contact us for support, we collect your email address and any information you provide in your message.

B. Information Collected Automatically

When you use the App, we may automatically collect:

• Device Information: Device type, operating system version, unique device identifiers, mobile network information, and device settings.
• Usage Data: Features used, time spent in the App, interactions with the App interface, and crash reports.
• Log Data: Access times, pages viewed, App crashes, and other system activity.

C. Information from Device Features

With your explicit permission, we may access:

• Camera: To capture photographs of receipts for scanning and storage.
• Photo Library: To allow you to select existing photos of receipts from your device's photo library.

We do NOT access your contacts, location, microphone, or other sensitive device features.

2. How We Use Your Information

A. To Provide and Maintain the App

• Create and manage your account
• Process and store your receipt data
• Enable receipt organization features (folders, tags, workspaces)
• Provide analytics and spending insights
• Enable export functionality (CSV, PDF)
• Facilitate receipt sharing with other users

B. To Improve the App

• Analyze usage patterns to improve features
• Identify and fix technical issues
• Develop new features based on user needs

C. To Communicate With You

• Send important updates about the App
• Respond to your inquiries and support requests
• Notify you of changes to our policies

D. To Ensure Security

• Protect against unauthorized access
• Detect and prevent fraud
• Maintain the integrity of our systems

3. Data Security and Encryption

We implement comprehensive security measures to protect your information:

A. Encryption Standards

• All receipt images are encrypted using AES-256-GCM encryption before storage
• Each user has a unique encryption key for their data
• Data in transit is protected using TLS/SSL protocols
• Passwords are hashed using bcrypt with salt

B. Access Controls

• Role-based access controls for shared workspaces
• Secure token-based authentication (JWT)
• Password-protected user accounts

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

A. With Your Consent

• When you share receipts with other users through the App's sharing features
• When you invite members to your workspaces

B. Service Providers

We may share information with trusted third-party service providers who assist us in operating the App, including cloud hosting providers, analytics services, and customer support platforms. These providers are contractually obligated to protect your information.

C. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Third-Party Services

A. Optical Character Recognition (OCR)

We use third-party OCR services to extract text from receipt images. When used, only the receipt image is processed, and the service does not retain your data after processing.

B. Analytics

We may use third-party analytics services to understand how users interact with the App. These services collect anonymized usage data and do not have access to your personal receipt information.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Deletion: Request that we delete your personal information. You can delete your account at any time through the App settings.
• Data Portability: Receive your data in a structured, commonly used format using the App's export feature.
• Withdraw Consent: Withdraw consent to process your information at any time.

7. Children's Privacy

The App is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected and how it's used
• Right to request deletion of your personal information
• Right to non-discrimination for exercising your privacy rights

We do not sell personal information to third parties.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Daniel Mochalov is the data controller for your personal information.

10. Data Retention

We retain your personal information for as long as necessary to provide you with the App services, comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes. Receipt images and associated data will be permanently deleted upon account deletion.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 days.