Privacy Policy
rizitz turns a photo of a receipt into a record of what you bought and what it cost. This page explains, plainly, what we collect to make that work, why, and what stays entirely in your control.
1. Who this covers
This policy applies to the rizitz mobile app, published by rizitz ("we," "us"), on iOS and Android. It describes how we handle information for anyone who downloads or uses the app, whether you're browsing as a guest or signed in to an account.
2. Information we collect
We collect only what rizitz needs to scan, categorize, and total your receipts:
| Category | What it includes |
|---|---|
| Account information | Email address, used to create and secure your account. We don't ask for your name. If you sign in with Google, Google shares your profile name with our sign-in provider, which keeps it on your account record; we don't use it. Accounts created with earlier versions of the app may still hold a name you entered; it's deleted along with your account. If you sign in with Apple and choose Hide My Email, we only receive a private relay address from Apple, never your real one. If you sign up with email and a password, we send a one-time link to confirm the address before you can scan. If you use the app as a guest, we assign a random anonymous identifier instead, with no email or name attached. |
| Receipt photos | Images you capture with your camera or choose from your photo library to scan. We strip location and other embedded metadata (EXIF) from a photo before it's uploaded. A photo shows whatever is printed on the receipt, which can include the store's address or the last digits of a payment card. |
| Receipt data | Store name, store type, purchase date, line items, prices, and categories — extracted from your photos or edited by you. |
| Plan & usage | Your plan (Free or Personal Pro), how many scans you've used in the current 30-day period, and whether your subscription is active or set to renew. We never see or store your card or payment details — those stay with Apple or Google. |
| Preferences | Settings you choose in the app, such as your currency. The app also remembers, on your device only, which sign-in method you last used, so it can remind you next time. That stays on your device and is cleared when you delete your account. |
| Crash reports | If the app crashes or hits an error, a diagnostic report with device model, OS version, app version, and your account ID (never your name or email), so we can find and fix the problem. |
| App usage | Which screens you open and which buttons you tap, and key steps such as signing up, starting a scan, saving a receipt, or viewing the upgrade screen, along with your plan, device model, OS version, app version, and approximate country or region (worked out from your IP address, which isn't stored). Linked to your account ID, never your name or email. It never includes your receipt photos or what's on your receipts. |
| Device permissions | Camera and photo library access, requested only at the moment you use a related feature (scanning, choosing a photo, or saving a receipt photo back to your device). |
We do not collect your precise location, contacts, or browsing activity outside the app. We do not use advertising identifiers, and we do not track you across other companies' apps or websites.
3. How we use it
- To read the text on a scanned receipt and turn it into structured items, prices, and categories.
- To store your receipts and spending history so you can review it later, from any device you sign in on.
- To apply your plan's scan limit and spending insights window, and to unlock Personal Pro features when you subscribe.
- To authenticate you and keep your account secure.
- To prevent abuse of the free plan, such as deleting an account and signing up again to reset the free scan allowance (see Data retention).
- To diagnose crashes and keep the app stable.
- To understand how the app is used, such as how many people finish a scan or where they get stuck, so we can improve it.
- To respond when you email us for support.
We do not sell your information, and we do not use your receipts or account data to serve you ads.
4. Who else sees it
rizitz is built on a small number of service providers who process data strictly on our behalf, under their own security and confidentiality commitments:
| Provider | Purpose |
|---|---|
| Google Firebase (Authentication, Firestore, Storage, Cloud Functions) | Signing you in, storing your receipt data and photos, and running the app's backend. |
| Firebase Crashlytics | Collecting crash and error reports so we can fix problems. |
| Google Analytics for Firebase | Counting app usage (see App usage above) so we can see which features are used and improve the app. Advertising features are turned off: no advertising identifiers are collected, and the data isn't used for ads or shared with advertisers. |
| Google Sign-In | Optional sign-in method, if you choose it instead of email and password. |
| Sign in with Apple | Optional sign-in method on iPhone and iPad. Apple shares only your email (or a private relay address, if you choose to hide yours) with us. When you delete your account, we ask Apple to revoke rizitz's access to your Apple ID. |
| Resend | Sending account emails: confirming your email address, password reset links, and sign-in help. Receives only your email address and the message. |
| Anthropic | A third-party AI provider. Its Claude AI reads the text on a receipt photo you submit, returns the extracted store, items, and prices, and sorts item names into categories. Photos and item names are sent to Anthropic through our servers, solely to perform this extraction, and are not used by Anthropic to train models. |
| RevenueCat | Managing Personal Pro subscriptions: confirming purchases, renewals, and cancellations with the App Store or Google Play, linked to your account ID. |
| Apple App Store & Google Play | Processing subscription payments. Their own privacy policies apply to your payment details. |
Your consent to AI processing. Before your first scan, the app tells you that receipt photos are sent to Anthropic and asks for your permission. Nothing is sent to Anthropic unless you agree, and you can choose "Not now" and keep using the rest of the app. After that, a photo is only sent when you scan a receipt, so you can stop at any time by not scanning.
We do not otherwise share your personal information with third parties, except where required by law.
5. Storage & security
Your account data, receipt records, and receipt photos are stored on Google Cloud infrastructure via Firebase, encrypted in transit and at rest. Access to your data is scoped to your account — we don't browse user receipts, and no other rizitz user can see yours. Receipt photos are only ever shown to you through short-lived, signed links.
No method of transmission or storage is perfectly secure, but we take reasonable, industry-standard measures to protect your information.
6. Your choices & rights
- Delete a receipt at any time, directly in the app — this removes both the record and the underlying photo.
- Delete your account and all associated data yourself in the app, under You → Settings → Delete account. This permanently removes your account, receipts, and receipt photos (see Data retention for the one small record we keep for up to 30 days). If you signed in with Apple, you'll be asked to confirm with Apple, and we revoke rizitz's access to your Apple ID. Deleting your account doesn't cancel a Personal Pro subscription — cancel that in the App Store or Google Play so you aren't charged again.
- Share or export any receipt as a PDF from the receipt screen, or email support@rizitz.com to request a copy of your data.
- Ask us to delete your usage data from Google Analytics by emailing support@rizitz.com.
- Revoke permissions for the camera or photo library at any time in your device's system settings.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to correct or restrict how we use your information. Contact us to exercise any of these rights.
7. Data retention
We keep your receipts and account information for as long as your account is active, so your spending history stays available to you, on every plan. When you delete your account, your receipt photos, receipt data, and account information are deleted from our systems right away; residual copies in backups and logs expire within 30 days, except where we're required to retain records for legal or fraud-prevention purposes. Subscription purchase records are kept by Apple, Google, and RevenueCat under their own retention policies. App usage data in Google Analytics is deleted automatically after 14 months, or sooner if you ask us to delete it.
To stop the free plan being reset by deleting an account and signing up again, when you delete your account we keep one small record: a one-way hash of your email address (a scrambled code that can't be turned back into your email), together with how many scans you'd used in your current 30-day period and when that period started. If you sign up again with the same email (including variants of it, such as a Gmail address with dots or a "+tag" added), your free scan allowance picks up where it left off instead of starting over. The record holds no receipts, photos, name, or readable email, and is deleted automatically when that 30-day period ends.
8. Children's privacy
rizitz is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we'll delete it.
9. Changes to this policy
If we make material changes to this policy, we'll update the effective date above and, where required, notify you in the app. Continuing to use rizitz after a change means you accept the updated policy.
10. Contact us
Questions about this policy or your data? Email support@rizitz.com and we'll get back to you.