Your receipts are your business.

1. Data we collect

We collect the minimum data needed for the app to work. The table below lists every category, why we need it, where it lives, and how long we keep it.

On Android, the app requests only these permissions: Camera (to photograph receipts), Internet and network state (for optional AI parsing, sign-in, and backup). On iPhone, the app requests only Camera access (to photograph receipts). We do not access your location, contacts, or other apps.

2. How each feature uses your data

Neural Vision Engine (on-device, default)

Receipt text is extracted on your phone using on-device OCR and parsed by a deterministic engine running entirely on your device. No receipt data leaves your phone in this mode. It also runs as a silent fallback: whenever the cloud is unreachable, it takes over invisibly: the result looks identical.

Smart Bill Engine (cloud AI, automatic)

When you scan, the app first tries cloud AI: the OCR text of a receipt (never the photo) is sent over an encrypted connection to our proxy, which forwards it to Google's Gemini API for parsing. Cloud scans are unlimited: there is no monthly cap. Your Firebase account ID accompanies the request to operate the service. No connection? The on-device engine takes over silently, and the result looks identical either way.

Our proxy is a blind pipe: it keeps no logs of receipt content and stores nothing about your receipts: the only thing it records is an anonymous monthly scan count tied to your account for service-operation purposes. No human at Nortruva Labs can see your receipts. They live on your device or in your own Google Drive (Android) or iCloud (iPhone) backup, both of which we cannot access. Data sent to Google is processed under Google's API terms; Google states it does not use API data to train its models. Nortruva Labs does not use your receipt data to train AI models.

Sign-in (optional)

You can use the app without an account. If you sign in: with Sign in with Apple on iPhone, or with email or Google on Android (via Firebase Authentication): we store your account identifiers to keep you signed in and enable backup.

Google Drive backup (Android only, optional)

Backups are encrypted on your device with a backup password only you know before upload, then written to a private AppData folder in your own Google Drive. Only you (and apps you authorize) can read it: Nortruva Labs cannot access your Drive backup or recover your password. If you forget the password, encrypted backups cannot be restored.

iCloud backup (iPhone only, optional)

Backups are written as a plain JSON snapshot to the private database of your own iCloud account (Apple CloudKit). There is no backup password. The snapshot is transferred over TLS and stored in iCloud with Apple's storage encryption; your sign-in refresh token is kept in the iOS Keychain. Only you can read it: Nortruva Labs cannot see your backup.

Widgets & notifications

Home-screen widgets and reminders are generated locally on your device from your local data.

3. What we never do

• We never sell your personal data: not to advertisers, data brokers, or anyone else.
• We never show ads in the app, and we share no data for advertising or cross-context behavioral advertising.
• We use no third-party analytics or tracking SDKs. Spending "insights" are computed on your device from your local data.
• We never read your other apps, messages, location, or contacts.
• No human at Nortruva Labs can see your receipts: they live on your device or in your own Google Drive (Android) or iCloud (iPhone), and our parse proxy is a stateless pipe that logs and stores nothing about them.
• We do not use receipt data to build profiles about you for anyone else.

4. Consent & legal bases

We rely on your consent for data processing. Concretely:

• Using the app's core features (scanning a receipt) is itself your consent for on-device processing: described in plain language before you scan.
• Scanning a receipt is itself your consent for cloud AI parsing: the app sends only the OCR text (never your photo) to our parse proxy. This is described in plain language in the app.
• You can withdraw consent at any time: stop scanning, delete receipts, or delete your account. Withdrawing is as easy as giving consent.

5. Your rights (by region)

No matter where you live, you can access, correct, export, and delete your data. Email [email protected] from the address on your account (or use in-app deletion), and we respond within the timelines below. Deleting your account in the app deletes your local data, your Firebase account record, and your server-side quota records; your Drive (Android) or iCloud (iPhone) backup is deleted from your Drive or iCloud by you.

6. Children's privacy

Mapping Bills is for adults. You must be 18 or older to use the app: this is our product policy; keeping the app adults-only lets us avoid the complexity of child-privacy rules (such as the US Children's Online Privacy Protection Act). We do not knowingly collect personal information from children, we do not ask for your date of birth, and the app contains no child-directed content. If you believe a child has provided us data, contact us and we will delete it promptly.

7. Security & breach notification

• On Android, receipt data is stored in a SQLCipher-encrypted on-device database. On iPhone, receipt data is stored in iOS's protected app storage (encrypted at rest by iOS data protection; sign-in tokens are kept in the iOS Keychain). All network traffic uses TLS encryption.
• Our proxy keeps minimal logs (device ID for quota/abuse), retained up to 90 days.
• We use Google's Firebase security controls for authentication data and accept Google's Data Processing Addendum for services we use. When you enable iCloud backup, your backup snapshot is stored by Apple (iCloud/CloudKit).

If a data breach occurs, we will notify affected users without undue delay (and within 30 days of discovery as our working rule), and notify Canada's OPC promptly where required. We maintain an incident register as required by law.

8. International transfers

Nortruva Labs is based in Canada. When you enable cloud AI parsing or sign in, limited data is processed in the United States via Google services (Firebase Authentication, Gemini API through our proxy). When you enable iCloud backup (iPhone), your backup snapshot is stored by Apple (iCloud/CloudKit).

• United States: no data-residency restrictions apply to this app's data.

9. Retention

We keep personal data only as long as needed for the purposes above:

• Receipts & parsed data: until you delete them (or delete your account).
• Account identifiers: until you delete your account.
• Backups: in your Drive (Android) or iCloud (iPhone) until you delete them.
• Server logs (device ID): up to 90 days.
• Support correspondence: up to 2 years.

When a purpose is fulfilled or consent is withdrawn, we delete the data unless a law requires us to keep it (in which case we tell you).

10. Changes to this policy

We may update this policy as the app or the law changes. Material changes will be announced in the app and the "Effective" date above will be revised. Continued use after changes take effect means you accept the updated policy.