Privacy Policy

Version: August 2026

1. Privacy at a glance

2. Controller

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Legal bases

We process personal data on the basis of Art. 6(1)(b) GDPR (performance of the user contract, see Terms), Art. 6(1)(f) GDPR (legitimate interest in secure, trouble-free operation), Art. 6(1)(c) GDPR (statutory retention obligations for payments) and, where consent has been given, Art. 6(1)(a) GDPR. Consent given can be withdrawn at any time with effect for the future.

SSL/TLS encryption

This site and all interfaces of the service are delivered exclusively over an encrypted connection (recognisable by https:// in the address bar). Data transmitted cannot therefore be read by third parties.

3. Hosting

The website and server services run on servers in the European Union. The provider processes data on our behalf under a data processing agreement (Art. 28 GDPR). The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

4. Website access data

When a page is requested, your browser transmits technically necessary information that the server records in log files:

• the address requested, date and time of the request
• the amount of data transferred and the HTTP status code
• browser type and version, operating system
• the referring page, where transmitted
• IP address

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in secure operation and the defence against attacks. This data is not merged with other data sources. Logs are deleted after 30 days at the latest, unless they are needed to investigate a specific case of abuse.

To fend off automated attacks we store the IP address of suspicious requests in a block list for a limited time.

Contacting us

If you write to us by e-mail, we process your details in order to handle the enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) or (f) GDPR. Messages remain with us until the purpose ceases to apply and no statutory retention periods stand in the way.

5. Account and sign-in

An account is optional. On registration we process e-mail address, password (stored only as a hash), display name and the time of registration. The purpose is providing the account and the sync. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

For signing in, the server issues a session identifier that is stored on the device. It is deliberately kept when signing out so that transfers already under way do not break off; it can be removed by clearing the app data or deleting the account.

6. Receipts and master data

Everything you enter in the assistant — amount, tax rate, payer, purpose, place, date, notes, signature — together with your master data (issuers, signatures, stamps, products, customers) is stored in your device's database (IndexedDB).

Without an account this data does not leave the device. The PDF is drawn on the device too; no server call takes place for it.

Note: the details on a receipt may contain personal data of third parties (the payer's name, for instance). For that processing you are the controller — we only provide the tool.

7. Sync with the server

A user who is signed in and holds at least the Premium tier can use syncing. A complete image of the receipts and master data is transmitted over an encrypted connection (TLS) to our server and stored there in the directory of the respective account. The purpose is backup and use on a further device. Legal basis: Art. 6(1)(b) GDPR.

The stored files are not publicly retrievable; every access runs through an endpoint that checks the account identifier and the session identifier. Without syncing, nothing is transmitted.

In addition a profile image is stored (display name, photo, language setting, PIN status, tier) so that these settings are available on a further device.

8. Sharing and printing a PDF

When you share or print a finished receipt, the app hands the file to your operating system's share sheet. Where it goes from there — mail, AirDrop, messenger, printer — is your decision. We are not involved in that transfer and receive no copy.

9. Advertising

Advertising is shown in the free tier. The advertising service may process device identifiers in the process. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your device's system settings (App Tracking Transparency). From the Premium tier onwards advertising disappears entirely.

10. Purchases via the App Store

Purchases and subscriptions are handled by Apple. We receive no payment data from Apple, only the information as to which tier is unlocked for your App Store account. Apple's privacy policy applies in addition.

If an account exists, we record the unlocked tier there so that it matches across your devices.

11. E-mail

We send e-mails to confirm accounts, to reset passwords and to answer enquiries. This processes the e-mail address and the content of the message. Legal basis: Art. 6(1)(b) and (f) GDPR.

12. Storage on the device

recibo stores on the device:

• the receipts and master data (IndexedDB),
• settings such as language, colour mode, onboarding status, tier flags and the daily counter of the free tier,
• for signed-in users, the session identifier.

This information leaves the device only as part of the sync (section 7). "Reset all local data" in the profile deletes it.

13. Push notifications

If you allow notifications, a device identifier is transmitted to our server so that messages can be delivered. The legal basis is your consent (Art. 6(1)(a) GDPR); it can be withdrawn at any time in the system settings.

14. Retention and deletion

We store account data and server-side images for as long as the account exists. If you delete your account in the app, the account is deactivated and the associated files on the server are removed. Data held only on the device is deleted by resetting the local data or by removing the app.

Statutory retention obligations remain unaffected.

15. Your rights

You have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21). Consent given can be withdrawn at any time with effect for the future.

Please contact [email protected].

Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

16. Changes to this policy

We adapt this policy when the service or the legal situation changes. The version published here at the time applies. In the case of substantial changes we additionally inform account holders in the application or by e-mail.