ReceipTap

ReceipTap Wallet Privacy Policy

Version 2026-08-23.1 · last updated 2026-08-23

This page explains what happens to your personal information once you create a ReceipTap Wallet account — the account behind the wallet login/signup pages and account Settings. It's published by J.A.C. GLOBAL APPROACH LTD. (), and is governed by the laws of Ontario, Canada. Tapping a puck and viewing a receipt without saving anything doesn't create an account and isn't covered here — see our general Privacy Policy for that, and for how a business using ReceipTap handles its own account data.

What we collect, and why

We use this to build your receipt wallet, automatically sort your purchases into spending categories, and let you download a copy whenever you need one.

↑ Back to top


The important part

Scanning a receipt

When you photograph or upload a receipt, the actual image is sent to Anthropic, an AI company, so it can read the store name, date, total, and item list off of it. This is different from how we categorize a receipt that arrives through a tap: for a tap receipt, we only ever send Anthropic the store name and a short item list, never an image — scanning a receipt yourself is the one case where a photo you provide is sent to a third party.

The extracted details are shown to you to review and correct — nothing is saved to your wallet automatically. Once you confirm it, the photo itself is kept (so you can still view the original later), along with the details you confirmed.

Receipt photos are held in object storage (Supabase Storage, on infrastructure in the United States) rather than on the server that runs the app, so a photo survives the app being updated or restarted. Each is stored under a long random filename, and deleting a receipt deletes its photo as well.

One limit worth being straight about: a photo is served from a public web address, so anyone who has that exact address can open it. The address is unguessable, and it is never shown to anyone but you — but it is not password-protected, and for a short period after you delete a receipt a cached copy may still be reachable at it.

↑ Back to top


The business gets your email too, for a tap receipt

When you save a receipt from a tap, the business you bought from receives your email address as well. They collected it through ReceipTap, but once they have it, it's theirs to use — not ours. Whether they email you about sales, loyalty offers, or anything else is their decision, and following the law when they do is their responsibility. If you'd rather a specific business not have your email, contact them directly, or see "Deleting your data" below.

This doesn't apply to a receipt you scan or upload yourself — there's no business on the other end of that one to receive your email.

↑ Back to top


How long we keep your data

Our policy is to keep your saved tap receipts, and your account itself, for 7 years, and then delete them. We keep them that long on purpose: the Canada Revenue Agency expects business records to be kept for six years after the end of the tax year they belong to, and US limitation periods can run to seven. Deleting sooner would take your receipts away while you might still need them.

A receipt you scan or upload yourself doesn't age out on that same automatic schedule — it's kept for as long as your account exists.

↑ Back to top


Getting a copy or deleting your data

↑ Back to top


Where your data is stored

Your ReceipTap Wallet data is stored in Canada. A few features briefly send part of it outside Canada: Google, Apple, or Microsoft, to confirm your identity if you sign in with one of them; Anthropic, for AI category suggestions and receipt scanning, as described above; and Resend, if you ever request a password-reset email from us.

↑ Back to top


Cookies and local storage

ReceipTap sets one cookie for your wallet: a session cookie that keeps you logged in. It's marked secure in production and expires after 30 days. We don't set any advertising, tracking, or analytics cookies, and we don't use your browser's local storage to store anything about you.

If you sign in with Google, Apple, or Microsoft, that provider's own sign-in flow may set its own cookies as part of it — governed by their policies, not ours.

If something goes wrong

If a data breach happens that puts your personal information at risk, we will notify you and any privacy regulator we are required to notify, as required by Canadian law.

Changes to this policy

When we change this policy, we'll update the "last updated" date at the top of this page.

Contact us

Privacy Officer
J.A.C. GLOBAL APPROACH LTD.
privacy@receiptap.com