Privacy Policy

1. What we collect

• Account information — your name and email address.
• Expense data you enter or upload — receipt images, amounts, merchants, dates, categories, tax fields, tips, mileage, notes, and who paid.
• Shared-space data — which spaces you belong to, your ownership or split percentages, and invitations you send or accept.
• Subscription status — your plan and renewal state.
• Technical data — sign-in sessions and error logs.

We never receive or store your payment card details. Those go directly to our billing provider.

2. How we use it

To run the Service: storing and organising your expenses, reading receipt images with AI to extract their details, calculating shared balances, producing reports and exports, and sending invitations you initiate. We also use aggregated, de-identified usage patterns to improve the product. We do not sell your personal information, and we do not use your data for advertising.

3. Shared spaces — what other people can see

When you add an expense to a space you share with other people, those members can see it — the amount, description, date, category, who paid, and any receipt image attached. They can also see your name and the balances calculated from those expenses.

People can be added to a space before they create an account. Until they join, the space's members see them by the email address they were invited with, and balances track what they owe or are owed from the start. Someone who deletes their account likewise stays in the balances of spaces they shared — see section 8.

This is how shared expense tracking works rather than a disclosure to an outside party, but it is worth being deliberate about what you put into a shared space. Expenses in a personal space are visible only to you.

4. Who processes your data for us

These companies process data on our behalf so the Service can function:

• Supabase — database hosting, file storage and authentication
• Vercel — application hosting
• OpenAI — reading receipt images to extract their details
• RevenueCat — subscription billing
• Resend — sending invite and notification email

Receipt images are sent to our AI provider solely to extract the details printed on them. Some of these providers operate outside Canada, which means your data may be stored or processed in another country and be subject to that country's laws. We share data with anyone else only where the law requires it.

5. Security

Data is encrypted in transit and at rest. Receipt images live in private storage — they are never publicly accessible, and every view is authorised against your account and served through a short-lived signed link. Database access is governed by row-level security so you only ever reach your own records and those in spaces you belong to. No system is perfectly secure and we cannot guarantee absolute security.

6. If there is a breach

If a breach of our security safeguards creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada as required under PIPEDA, and we keep records of security breaches as the law requires.

7. Getting a copy of your data

Settings → Export my data produces a download containing your expenses as a spreadsheet, your receipt images, and your profile and membership records — everything you own or participate in. You can do this yourself at any time, as often as you like.

8. Deleting your account

Settings → Delete account removes your account. It is irreversible, so it asks you to type a confirmation first. Deletion completes within 30 days; in practice it happens immediately.

We delete:

• Your profile and login.
• Spaces only you belonged to, and every expense and receipt image in them.
• Your subscription record.

We keep, and must keep:

• Expenses in spaces you shared with other people. Those records are also theirs — they rely on them for their own balances and tax filing, and erasing them would delete another person's financial history. They stay visible to the other members for as long as those members keep their accounts, still grouped together as one person's receipts so they can be filtered and exported — but shown as added by “Former member” rather than your name.
• Receipt images attached to those shared expenses, for the same reason.
• A minimal record that a deletion happened — the account identifier and timestamps — so we can show the request was honoured.
• Anything the law requires us to retain, such as financial records.

If you want your expenses removed from a shared space entirely, delete them before deleting your account, or ask the other members.

9. Your rights under PIPEDA

You have the right to access the personal information we hold about you, ask us to correct it, and withdraw consent for non-essential processing, subject to legal and contractual limits. Export and deletion are available directly in the app; for anything else, contact support@coceipt.com.

10. Retention

We keep your data for as long as your account is active. After deletion, the rules in section 8 apply.

11. Cookies

We use essential cookies to keep you signed in. We do not use third-party advertising cookies or cross-site trackers.

12. Children

The Service is not directed at children under 18, and we do not knowingly collect personal information from them.

13. Changes to this policy

Each version carries a number and date, shown at the top of this page. If a change is material we will tell you in the app and ask you to accept the new version before continuing.

14. Contact

Privacy questions or complaints: support@coceipt.com. You may also contact the Office of the Privacy Commissioner of Canada if you believe we have not addressed your concern.