ReceipTap Wallet Privacy Policy
This page explains what happens to your personal information once you create a ReceipTap Wallet account — the account behind the wallet login/signup pages and account Settings. It's published by J.A.C. GLOBAL APPROACH LTD. (2150 Winston Park Drive, Unit 203, Oakville, Ontario, L6H 5V1, Canada), and is governed by the laws of Ontario, Canada. Tapping a puck and viewing a receipt without saving anything doesn't create an account and isn't covered here — see our general Privacy Policy for that, and for how a business using ReceipTap handles its own account data.
What we collect, and why
- Your email address — to identify your account and let you log in.
- A password — stored securely hashed, never in plain text, if you sign up with email and password rather than Google, Apple, or Microsoft.
- Your name — only if you sign in with Google, Apple, or Microsoft, and only if that provider gives it to us. Signing up with just an email and password doesn't ask for a name.
- The receipts you save from a tap — which business, what you bought, how much, and when — so we can show them to you in one place.
- Receipt photos you scan or upload — see "Scanning a receipt" below for exactly how these are used.
- Access to your email inbox, if you choose to connect it — see "Connecting your email" below for exactly what we look at, what we keep, and what we never keep.
- The IP address your device connects from — only at the moment you tap a consent checkbox (like agreeing to receive marketing emails from a business at the tap screen). This is kept as proof of that specific choice, not to track you.
We use this to build your receipt wallet, automatically sort your purchases into spending categories, and let you download a copy whenever you need one.
Scanning a receipt
When you photograph or upload a receipt, the actual image is sent to Anthropic, an AI company, so it can read the store name, date, total, and item list off of it. This is different from how we categorize a receipt that arrives through a tap: for a tap receipt, we only ever send Anthropic the store name and a short item list, never an image — scanning a receipt yourself is the one case where a photo you provide is sent to a third party.
The extracted details are shown to you to review and correct — nothing is saved to your wallet automatically. Once you confirm it, the photo itself is kept (so you can still view the original later), along with the details you confirmed.
Receipt photos are held in object storage (Supabase Storage, on infrastructure in the United States) rather than on the server that runs the app, so a photo survives the app being updated or restarted. Each is stored under a long random filename, and deleting a receipt deletes its photo as well.
One limit worth being straight about: a photo is served from a public web address, so anyone who has that exact address can open it. The address is unguessable, and it is never shown to anyone but you — but it is not password-protected, and for a short period after you delete a receipt a cached copy may still be reachable at it.
Connecting your email
You can optionally connect an email inbox (Gmail, Outlook, or another provider) so receipts that arrive by email — order confirmations, shipping notices, digital receipts from stores you didn't tap a puck at — are added to your wallet automatically, without you scanning or forwarding anything yourself. This is entirely separate from tapping a puck or scanning a photo: connecting your email never requires, and never depends on, having paid with a specific card.
We connect through Nylas, a third-party email-access provider, using their own secure sign-in screen for your email provider — we never see or store your email password. You can disconnect at any time from Settings; disconnecting revokes our access immediately and stops any further reading of your inbox, but doesn't remove receipts we already saved to your wallet before you disconnected.
We do not read your whole inbox. For each new message, we first check only the sender and subject line for signs it might be a receipt. Nothing else about a message that doesn't pass this check is ever looked at, kept, or sent anywhere. Only a message that passes is fetched in full and read by Anthropic, the same AI company used for receipt scanning (see "Scanning a receipt" above), so it can be confirmed as a real receipt and its details extracted — for this feature, that means the email's text, not a photo.
If that check decides a message isn't actually a receipt, nothing about it is retained — no content, no summary. We keep only a record that a given message ID was looked at and rejected, so we don't re-fetch or re-analyze it on a later check; that record never contains anything from the message itself. If a message is confirmed as a receipt, we keep the receipt details in your wallet, along with the original email (or its PDF attachment, if that's how the receipt arrived) — kept indefinitely, unlike a tapped or scanned receipt, which follows the schedule described in "How long we keep your data" below. We treat an email receipt's original document the same way we treat a scanned receipt's photo: as the evidence behind the figures we show you, so it's kept for as long as you keep the receipt, not on a time-based schedule.
Deleting your account, or deleting an individual email-sourced receipt, deletes that receipt's original document along with it, the same as deleting a scanned receipt deletes its photo.
The business gets your email too, for a tap receipt
When you save a receipt from a tap, the business you bought from receives your email address as well. They collected it through ReceipTap, but once they have it, it's theirs to use — not ours. Whether they email you about sales, loyalty offers, or anything else is their decision, and following the law when they do is their responsibility. If you'd rather a specific business not have your email, contact them directly, or see "Deleting your data" below.
This doesn't apply to a receipt you scan or upload yourself — there's no business on the other end of that one to receive your email.
How long we keep your data
Our policy is to keep your saved receipts — whether tapped or scanned — and your account itself, for 7 years, and then delete them. Both kinds of receipt follow the same schedule, measured from the purchase date on the receipt itself (or, for a scan with no legible date, from when you uploaded it). A receipt added through a connected email inbox is the one exception: as described in "Connecting your email" above, we keep those and their original documents indefinitely rather than on this schedule, since a receipt that arrived that way often is the only copy that exists anywhere. Deleting your account still deletes them right away, the same as everything else described here — indefinite retention is our default, never a reason to refuse a deletion you ask for. We keep them that long on purpose: the Canada Revenue Agency expects business records to be kept for six years after the end of the tax year they belong to, and US limitation periods can run to seven. Deleting sooner would take your receipts away while you might still need them. This is our policy and our commitment to you. The automated system that enforces it is built and is being finalized before we switch it on, so it isn't yet actively removing data on this schedule today — if you'd like something deleted sooner, contact us at privacy@receiptap.com.
Getting a copy or deleting your data
- Get a copy: log into your wallet and export your receipts anytime.
- Delete your account: go to Settings and choose Delete account. This is immediate and self-serve — it removes your saved and scanned receipts, your consent records, and your account itself right away, without needing to email us or wait for us to act on a request.
- Ask a specific business to delete your data with them: contact that business directly — they can look you up by email and remove your data from their own records, separate from your wallet account.
Where your data is stored
Your ReceipTap Wallet database records are stored in Canada — Supabase, our database provider, hosts them in Montreal. The application server that actually runs ReceipTap, however, is hosted in the United States (Railway, US West region), so your data is processed there as well as stored in Canada. A few features additionally send part of it outside Canada: Google, Apple, or Microsoft, to confirm your identity if you sign in with one of them; Anthropic, for AI category suggestions and receipt scanning, as described above; Nylas, if you connect an email inbox, as described in "Connecting your email" above; and Resend, if you ever request a password-reset email from us.