Privacy Policy
Last updated: September 29, 2026
This policy describes how your data is collected, used, stored and shared when you use TrackBit on the web, iOS or Android, wherever you live. This page is available without signing in.
Who we are (data controller)
TrackBit is operated by Abuelgsaim Ishag, an individual seller trading as TrackBit. He is the data controller for personal data processed through the app and decides the purposes and means of that processing. Contact: support@gettrackbit.com.
Data we collect
- Account and authentication data: your email address, account ID, display name and preferred currency. Email/password, Google or Apple sign-in uses credentials and session tokens to authenticate you; a social sign-in provider may give us your name and email.
- Receipt photos and PDFs you capture or upload; extracted or edited expense details such as merchant, date, amount, tax, currency, payment method, category, items or notes, tags, folders, return dates and warranties.
- Budget limits, bills, reminders, assistant conversations and spending summaries, plus your subscription status and Paddle customer and subscription identifiers.
- Usage and diagnostic data: feature interaction events, technical errors, and device/browser information and IP address that may be processed to operate, secure and troubleshoot the service.
How we use data
We use account data to sign you in and manage your profile; receipts and expenses to extract and categorize details, enable search, dashboards, reports, budgets, reminders and exports. Assistant conversations and spending data help produce personalized answers and tips. Subscription data enables paid features and support. Usage events and errors help troubleshoot, improve and protect the service. We do not sell your data or use receipt contents for targeted advertising.
AI processing
When you scan a receipt or request assistant answers or insights, relevant receipt images/PDFs, conversation text or spending details are sent through our AI service to a model provider for extraction, summaries, suggestions and answers. AI results may be inaccurate; review them before relying on them. These providers process requests under their own data-handling and retention practices.
Storage and analytics
Account, expense, budget, bill, chat and subscription records are stored in managed cloud services; receipt images and PDFs are held in cloud storage. Account-based access controls restrict access to your records. Some feature events are recorded in browser memory and diagnostic logs, and may be forwarded to an analytics tool if enabled; current feature events do not include receipt contents.
Device permissions
Camera: to photograph receipts. Photo library: to pick an existing receipt. Sharing and files: to export reports. These permissions are requested only when used and can be declined.
Retention and deletion
We keep account, receipt and expense data while your account is active or as needed to provide the service. You can delete receipts or request account deletion on the account deletion page. Other parties, including Paddle and service providers, may retain records they are legally required to keep or limited backup copies under their own policies.
Legal basis for processing
- Performance of a contract: creating your account, storing receipts and delivering the features you request.
- Legitimate interests: account security, fraud prevention, usage-event analysis, product improvement and resolving support issues.
- Legal obligation: keeping sales records and meeting tax obligations through our Merchant of Record.
- Consent where required: device permissions and any optional marketing communications; you can withdraw it at any time.
Data sharing and Merchant of Record
- Service providers needed to run TrackBit: hosting, database, storage, authentication and sign-in email services, AI gateway and model providers, and diagnostic or analytics tools if enabled. We share data needed for their services.
- Google or Apple, if you choose their sign-in option, to handle authentication under their own privacy practices.
- Paddle.com Market Ltd, the Merchant of Record for all our orders: it handles payment processing, subscription management, invoicing, sales tax compliance, customer service enquiries and refunds. Paddle's own privacy notice applies to data it collects directly at checkout.
- Professional advisers (legal, accounting) and authorities where required by law.
TrackBit is available worldwide. Your data may be processed outside your country, including in the EU or United States, subject to the applicable arrangements used by our service providers.
Security
We apply appropriate technical and organisational measures: encryption in transit, account authentication, per-user row-level access policies and restricted administrative access. No method of transmission or storage is completely secure, but these measures are reviewed regularly.
Cookies
The site uses cookies or local storage for sign-in, language and theme preferences and recent searches; Paddle may use cookies to complete checkout securely. We do not set our own advertising cookies. You can clear or block them in browser settings, though this may affect sign-in or checkout.
Your rights and contact
You have the right to access, correct, delete, restrict, object to and port your personal data, to withdraw consent, and to complain to your data protection authority. Email support@gettrackbit.com and we will respond within one month.