Privacy Policy

Last Updated: March 2026

Receivi is designed with privacy as a core principle. This policy explains how the current Gmail-only MVP handles your data.

Summary

• All data stays on your device
• We do not upload your emails, email bodies, or receipt attachments to Receivi-operated servers
• Scanning only happens when you tap "Scan Gmail Now"
• During a scan, we read email metadata and Gmail preview text; for receipt-like emails we may also read supported attachments or the email's text/HTML body on-device to extract receipt fields
• We use Gmail's read-only permission—we cannot send emails or modify your inbox
• You can disconnect Gmail or delete all local data at any time from Settings

What We Access

When you connect your Gmail account, Receivi requests read-only access to your emails. During a user-initiated scan, the app may access:

• Email metadata: Gmail message ID, sender/from, subject line, and date
• Gmail preview text: Snippets used to decide whether an email looks like a bill or receipt
• Candidate attachments: Attachment filename, MIME type, size, and supported PDF/image bytes when the app downloads a likely receipt or bill attachment
• Email body text/HTML: For messages that appear to contain a receipt or bill in the email itself, the app may read the text/plain or HTML body on-device to extract merchant, date, amount, and tax details

We use the Gmail API scope gmail.readonly, which means we cannot:

• Send emails from your account
• Delete or modify emails
• Access your contacts or calendar
• Make any changes to your Gmail account

When Scanning Happens

Receivi only scans your email when you explicitly tap "Scan Gmail Now" while using the app. There is no automatic, scheduled, or background scanning. You are always in control of when your inbox is accessed.

Where Your Data Is Stored

All data stays on your device. The current MVP does not use Receivi-operated servers or cloud storage for scanning or receipt storage. Your receipts, scan history, downloaded attachments, and account information are stored only in your device's local storage and iOS Keychain.

This means:

• Your data is not uploaded anywhere
• Your data is not shared with anyone
• Your data is not accessible to us or any third party
• You can clear local data from Settings at any time

Data We Collect

Receivi does not collect any personal data, analytics, or telemetry. We do not track:

• How you use the app
• Which receipts you scan
• Any personal information

Third-Party Services

Receivi uses the following third-party services:

• Google Gmail API: To read your emails (with your explicit permission). Google's privacy policy applies to their handling of your Gmail data: https://policies.google.com/privacy

We do not use any analytics, advertising, or tracking services.

Your Rights

You can:

• Disconnect Gmail at any time from Settings. This removes stored Gmail tokens and linked-account metadata. Existing receipts and downloaded attachments stay on your device until you delete them.
• Delete all data at any time from Settings. This permanently removes local receipts, downloaded attachments, scan history, and your Gmail connection.
• Export your data as a CSV file at any time.

If you plan to uninstall the app and want to ensure local receipts, scan history, and stored Gmail tokens are cleared first, use Delete all data from Settings before uninstalling.

Data Retention

Your data remains on your device until you delete it. We do not have access to your data and cannot delete it remotely.

When you disconnect Gmail:

• Your existing receipts, attachments, and scan history remain on your device
• We can no longer access your inbox

When you delete all data:

• All receipts are permanently deleted
• Your Gmail connection is removed
• All local receipt files and scan records are deleted

Security

• Gmail OAuth tokens are stored securely in iOS Keychain
• All communication with Gmail uses HTTPS encryption
• Attachments are stored in your app's sandboxed storage

Children's Privacy

Receivi is not intended for children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Changes will be posted here with an updated "Last Updated" date.

Contact

If you have questions about this privacy policy, please contact us at privacy@receivi.app.