Privacy Policy

Resiboo works fully without an account. By default your receipts live in your Personal Vault, which keeps your receipts, receipt images and the details read from them only on your device. Resiboo has no access to your Personal Vault, and nothing about that changes with Resiboo Cloud.

Resiboo Cloud, an optional paid subscription described below, is the first and only case where receipt data leaves your device for Resiboo's servers — and only for vaults you explicitly create or upgrade as Cloud vaults.

If you don't use Resiboo Cloud, the Application does not collect your name, email, or location, and does not use analytics or advertising SDKs. Optional AI features can send receipt text to a provider you choose, as explained under "AI features".

Resiboo Cloud is an optional, paid subscription that syncs your Cloud vaults across your devices and lets you share a vault with people you invite. It is available on iOS and Android. If you use it, Resiboo collects and stores:

• Account details. Your account is created with Sign in with Google or Sign in with Apple. We receive your name, email address and a unique account identifier from that provider. There is no Resiboo password.
• Cloud vault contents. Receipt images and receipt details — merchant, date, amounts, line items, categories, tags and notes. Receipts can include printed information such as partial card numbers or addresses; you control which receipts you add to a Cloud vault.
• Display name. Shown to other members of a shared vault so they can see who added a receipt.
• Subscription status. Your purchase and subscription status, via Google Play, the App Store and RevenueCat. Resiboo does not receive your card details.
• Push notification token. One per device, used to notify members when a receipt is added to a shared vault.
• Usage analytics. For Cloud users only: the type and time of actions such as scanning a receipt, correcting a field, or exporting. Analytics never include receipt contents — no merchants, items or amounts. You can turn this off in Settings → Resiboo Cloud → Share usage analytics.

Resiboo Cloud data is stored with Supabase, our hosting provider, in its Singapore region (ap-southeast-1). It is encrypted in transit (HTTPS) and encrypted at rest by the provider.

TODO (owner): State whether Resiboo staff can access Cloud receipt data (for example, for support or debugging) and under what conditions. Do not claim that no one can access Cloud data.

Reading the basic details of a receipt — merchant, date and total — always happens on your device.

Two optional features go further: AI line-item extraction, and Ask Resiboo, a conversational way to query your spending or add entries. They are off unless you turn them on. When you use them, the text read from the receipt (never the photo), or the question you ask, is sent to one of:

• An AI provider you configure with your own API key (for example OpenAI or Google Gemini). The request goes directly from your device to that provider and is governed by that provider's terms and privacy policy.
• Resiboo Processing, the AI extraction included with Resiboo Cloud, for receipts in Cloud vaults. The receipt text is sent to OpenRouter for processing. Resiboo Processing is not used for Personal Vault receipts.
• Apple Intelligence on supported iPhones, which runs on the device.

Only the specific receipt text or question is sent — not your full receipt history. Resiboo does not use your receipts to train AI models.

Voice input for Ask Resiboo uses your phone's built-in speech recognition. On iPhone this happens on the device. On Android, the system speech service may process audio under your device provider's own privacy policy.

These providers process data on Resiboo's behalf, each for a specific purpose, and have their own privacy policies:

• Supabase — database, file storage and accounts for Resiboo Cloud.
• RevenueCat — subscription management. It receives your Resiboo account ID and purchase records, not card details.
• Google Play and the Apple App Store — billing.
• Google and Apple — sign-in.
• Expo — push notification delivery.
• OpenRouter — AI processing of receipt text for Resiboo Processing only (Cloud vaults). It receives receipt text, not receipt photos.

Resiboo does not sell your data, does not show advertising, and does not share data with data brokers. Beyond the service providers above, information is shared only as required by law or to protect the Service Provider's legal rights.

In a shared vault, every member can see that vault's receipts, receipt images, and members' display names.

Personal Vault data lives only on your device: deleting a receipt, using Delete local data in Settings, or uninstalling the app removes it. Backups remain in your own iCloud, Google Drive or local storage until you delete them there.

For Resiboo Cloud, you can delete individual receipts, leave a shared vault, or delete your Cloud account in the app (Settings → Resiboo Cloud → Account deletion, while your Cloud vault is active). You can also request deletion by email — see how to delete your Resiboo Cloud account.

• Account deletion is scheduled 30 days out. You can cancel it by signing back in during that time.
• Vaults you own become read-only for other members immediately, and are permanently deleted, with their receipts and images, after 30 days.
• You are removed from vaults you only joined.
• Deleting your account does not cancel your subscription. Cancel it in Google Play or the App Store.
• Google, Apple and RevenueCat may keep billing and tax records under their own policies.

TODO (owner): State how long data in a lapsed Cloud vault (subscription unpaid, but not deleted) is kept.