Privacy Policy

TrackBit is operated by Abuelgsaim Ishag, an individual seller trading as TrackBit. He is the data controller for personal data processed through the app and decides the purposes and means of that processing. Contact: gasim622@gmail.com.

• Account data: your email address and account identifier when you sign up with email, Google or Apple.
• Receipt images and PDFs you upload, plus the data extracted from them (merchant, date, total, tax, payment method, category, notes).
• Budgets, reminders and your in-app assistant conversations.

Data is used only to run the app's features: receipt extraction, categorization, the spending dashboard, reports, reminders and exports. We do not sell your data and we do not use it for advertising.

Data is stored in a managed database with row-level isolation so no other user can read your records. Receipt images and text are sent to a language-model provider to extract fields and generate summaries; they are processed to fulfil that request.

Camera: to photograph receipts. Photo library: to pick an existing receipt. Sharing and files: to export reports. These permissions are requested only when used and can be declined.

Your data is kept while your account is active. You can delete any receipt at any time, or delete your whole account from the account deletion page — receipts, images, budgets and conversations are then permanently removed.

• Performance of a contract: creating your account, storing receipts and delivering the features you request.
• Legitimate interests: security, fraud prevention, product improvement and resolving support issues.
• Legal obligation: keeping sales records and meeting tax obligations through our Merchant of Record.
• Consent: device permissions and any optional marketing messages, which you can withdraw at any time.

• Service providers / subprocessors: hosting, database, storage and our AI model provider, under data processing agreements.
• Paddle.com Market Ltd, the Merchant of Record for all our orders: it handles payment processing, subscription management, invoicing, sales tax compliance, customer service enquiries and refunds. Paddle's own privacy notice applies to data it collects directly at checkout.
• Professional advisers (legal, accounting) and authorities where required by law.

Data may be transferred outside your country and stored with providers in the EU or the United States, protected by appropriate safeguards such as Standard Contractual Clauses.

We apply appropriate technical and organisational measures: encryption in transit, account authentication, per-user row-level access policies and restricted administrative access. No method of transmission or storage is completely secure, but these measures are reviewed regularly.

We use strictly necessary cookies and local storage only: keeping you signed in and remembering your language and theme, plus cookies set by Paddle to complete checkout securely. We do not use advertising cookies. You can clear or block them in your browser settings, though sign-in may then stop working.

You have the right to access, correct, delete, restrict, object to and port your personal data, to withdraw consent, and to complain to your data protection authority. Email gasim622@gmail.com and we will respond within one month.