Recepta · Effective date: 20 August 2026 · Version 1.0
This Privacy Policy explains how Nadeen Bawardi ("we", "us", "our"), the operator of the Recepta mobile application and related services (together, the "Service"), collects, uses, shares, and protects your personal data, and the rights you have. Recepta helps you scan, import, and organise receipts, track return/refund/warranty deadlines, and manage store credit.
We are the data controller for your personal data. If you have any questions or wish to exercise your rights, contact us at support@recepta145.com.
We collect only what we need to run the Service:
We do not use third-party advertising or analytics trackers, and the Service does not use web cookies for tracking.
| Purpose | Data used | Legal basis (GDPR, where applicable) |
|---|---|---|
| Provide the app — store/organise receipts, extract details, compute return/refund/warranty deadlines, manage store credit | Account, receipt, connected-mailbox data | Performance of a contract with you |
| Send verification codes (sign-up, login, password reset, email change, account deletion) | Performance of a contract | |
| Send reminders and import notifications you opt into | Deadlines, push token | Consent |
| Secure the Service, prevent fraud/abuse, and comply with law | Account, logs | Legitimate interests; legal obligation |
We do not sell your personal data and we do not use it for advertising or profiling.
To read your receipts automatically, the receipt image/text is sent to our AI provider (Anthropic) which returns the extracted fields. This is an automated process used to save you typing; it does not produce legal or similarly significant decisions about you. You can always review and edit the extracted details, and you may enter receipts manually instead of scanning.
We share data with a small set of trusted providers ("sub-processors") strictly to operate the Service. They act on our instructions and are bound by their own security and privacy commitments:
| Provider | Purpose |
|---|---|
| Anthropic | AI extraction of receipt details |
| Resend | Sending verification & notification emails |
| Google Firebase Cloud Messaging | Delivering push notifications |
| Google Cloud | Backend hosting |
| Cloudflare | Storage of receipt images & content delivery |
| Neon | Database hosting |
| Google (Gmail API) | Only if you connect a mailbox — receipt import |
These providers may process data on servers outside your country, including outside the EEA/Israel. Where required, such transfers rely on appropriate safeguards (for example, the providers' Standard Contractual Clauses). We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer.
If you connect Gmail, we request read-only access
(gmail.readonly) for the sole purpose of locating and importing
receipt/order/invoice emails into your Recepta account. Specifically, Recepta:
We keep your account and receipt data for as long as your account is active or as needed to provide the Service. You can delete individual receipts, disconnect a mailbox, or delete your entire account at any time in the app (Profile → Delete account), which permanently removes your account and associated personal data from our live systems. Residual copies may remain in encrypted backups for a limited period before being overwritten, and we may retain limited records where required by law.
Subject to applicable law (including the EU/UK GDPR and Israel's Protection of Privacy Law), you may have the right to: access your data; correct it; delete it; restrict or object to processing; withdraw consent; and receive a copy of your data in a portable format. You can exercise most of these directly in the app, or by emailing support@recepta145.com. We will respond within the time required by law. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data-protection authority.
We protect your data using encryption in transit (HTTPS), one-time codes that are hashed rather than stored in plain text, encryption of mailbox tokens at rest, and access controls. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you and any regulator as required if a breach affects your data.
Recepta is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. We will revise the "Effective date" above and, for material changes, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.
Nadeen Bawardi — support@recepta145.com
This policy is provided in good faith to describe our actual practices. It is general information, not legal advice; you should obtain professional advice for your specific circumstances.