Privacy Policy
Receiptile Pty Ltd (ACN 696 486 674, ABN 41 696 486 674)
Last updated: 27 July 2026
1. About this policy
This Privacy Policy explains how Receiptile Pty Ltd ("Receiptile", "we", "us" or "our") handles personal information when you use our websites, mobile applications, App Clip, Receiptile Tile hardware, and related services (collectively, the "Service").
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where another privacy law applies to you, we also provide the rights required by that law.
2. Information we collect
2.1 Account and profile information
We may collect your name, email address, phone number, account identifier, authentication information supplied by our identity provider, communication preferences, and account type. Our identity provider manages passwords and authentication credentials; Receiptile does not receive your identity-provider password.
2.2 Receipt and transaction information
When you capture, import, upload, save, or view a receipt, we may process and store:
- receipt images, PDFs, text, and other source files;
- merchant name, address, contact details, and transaction date and time;
- item descriptions, quantities, prices, discounts, taxes, totals, currency, and category;
- masked payment method information shown on the receipt, such as card brand and last four digits;
- the source of the receipt and how or where it was saved or exported, such as Receiptile, Photos, Files, Apple Wallet, or a browser.
We do not intentionally collect full payment card numbers, card verification codes, or online banking credentials as receipt data.
2.3 Gmail integration (optional)
If you connect Gmail, Receiptile requests read-only Gmail access to identify and import receipt and order-confirmation emails. We do not send, modify, forward, or delete your email.
Receiptile may process the content and attachments of emails selected as likely receipts to extract structured receipt information. This content can contain personal and transactional information. Receiptile stores the resulting receipt and may store associated source content or files needed to display, verify, or reprocess that receipt.
Disconnecting Gmail stops future access, revokes or removes the stored connection tokens, and does not delete receipts already imported into Receiptile. You can delete imported receipts individually, or delete them through account deletion.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only to provide and improve user-facing receipt features and for security or legal purposes permitted by that policy. It is not used for advertising.
2.4 Camera, Photos, and uploaded content
If you choose to scan or upload a receipt, we process the image or file you select. Receipt source images and generated receipt files may be stored so the receipt can be displayed, downloaded, exported, verified, or reprocessed. On iOS, Receiptile requests access to Photos only when you choose a feature that needs it, such as selecting a receipt image or saving a receipt to your photo library.
2.5 Merchant, hardware, and integration information
For merchant and hardware services, we may collect business and contact details, ABN or ACN, business and postal addresses, branding assets, point-of-sale configuration, device identifiers, firmware and diagnostic information, activation and ownership records, network name used during setup, print-job metadata, and device interaction events.
If you connect an accounting, banking, payment, point-of-sale, or other integration, we process the identifiers, tokens, account metadata, and transaction or receipt information needed to provide that integration. The information available depends on the service and permissions you select.
2.6 Usage, support, and technical information
We may collect IP address, device and browser type, operating system, app version, security and authentication events, pages and features used, receipt interactions, save and export outcomes, diagnostic information, and messages or files you send to support.
We may infer an approximate region from an IP address for security and service operation. The Receiptile iOS app does not request precise or background device location.
2.7 Billing and fulfilment information
When you purchase hardware or a subscription, we may collect order, plan, billing status, transaction identifier, delivery address, fulfilment, and support information. Payment card details are collected and processed by our payment provider. Receiptile does not receive or store your full card number or card verification code.
3. How we use information
We use information to:
- create, authenticate, secure, and administer accounts;
- capture, process, store, display, search, categorise, and export receipts;
- provide Gmail, Apple Wallet, accounting, banking, point-of-sale, and merchant features you choose;
- operate, activate, support, and improve Receiptile Tiles;
- personalise receipt organisation and provide analytics and insights;
- record whether a receipt was saved or exported successfully;
- process payments, fulfil orders, and provide customer support;
- communicate service, security, legal, product, and opted-in marketing updates;
- prevent fraud, abuse, and security incidents;
- diagnose problems, measure performance, and improve the Service; and
- comply with legal obligations and enforce our agreements.
We do not sell personal information. We do not use receipt or Gmail content for third-party advertising.
4. Artificial intelligence processing
Receiptile uses OpenAI's API to extract and organise information from receipts and to provide selected intelligent features. Depending on the feature, receipt images, text, attachments, email receipt content, or structured receipt data may be sent to OpenAI. This material may contain personal and transactional information.
OpenAI processes this information as our service provider under its business and API terms. Receiptile does not permit it to be used for advertising or to train general-purpose models for other customers. We store the structured output and may retain source content as described in this policy.
Automated extraction can make mistakes. You should verify important receipt information before relying on it for tax, accounting, warranty, or legal purposes.
5. When we disclose information
We disclose information only as reasonably necessary to operate the Service, when you direct us to, or where required by law. Current service providers and integrations include:
- Replit for application hosting and object storage;
- Neon for managed database infrastructure;
- Auth0 for identity and authentication;
- OpenAI for receipt extraction and selected AI features;
- Google for Gmail integration and related Google services you connect;
- Apple for iOS, App Clip, Photos, and Wallet features you choose;
- Stripe for subscription and payment processing;
- Resend for service and support email delivery;
- Square for point-of-sale and payment-related integrations;
- Xero for accounting exports and integrations;
- Basiq for banking integrations; and
- Microsoft for Microsoft services or integrations you choose.
These providers receive only the information needed for their role and process it under their own terms and our applicable agreements. We may also disclose information:
- to professional advisers, insurers, regulators, courts, law enforcement, or government bodies where authorised or required;
- to investigate fraud, security incidents, or misuse;
- as part of a merger, financing, acquisition, restructure, or sale of assets, subject to appropriate protections; or
- with your direction or consent.
When you export or save a receipt to another service or device, that provider's privacy practices also apply.
6. Storage, security, and international processing
Receiptile uses administrative, technical, and organisational safeguards appropriate to the nature of the information, including encrypted network connections and access controls. No system is completely secure, and we cannot guarantee absolute security.
Our providers may process or store information outside Australia, including in the United States and other locations in which they operate. We take reasonable steps to use providers and arrangements that protect information consistently with applicable law.
7. Retention and deletion
We generally keep account and receipt information while your account is active and for as long as needed to provide the Service.
When you delete a receipt, we remove the active receipt record and its stored files where possible. When you delete your account, we promptly delete or de-identify account-linked data that we can delete. Stored-file deletion is automatic and retried if a provider is temporarily unavailable.
Some information may be retained where reasonably necessary for legal, tax, accounting, fraud prevention, security, dispute, warranty, fulfilment, or regulatory obligations. Where practical, retained business records are detached from the deleted account. Residual copies in encrypted backups are not used for ordinary business purposes and expire through our providers' normal backup lifecycle.
Disconnecting an integration stops future access but does not necessarily delete information already imported. In particular, disconnecting Gmail keeps previously imported receipts until you delete those receipts or delete your account.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, receive, restrict, object to, or request deletion of personal information, and to withdraw consent where processing relies on consent.
You can update common profile settings, disconnect integrations, delete individual receipts, and delete your account from within the Service. You can also contact us at info@receiptile.com. We may need to verify your identity before completing a request.
If you have a privacy complaint, contact us first so we can investigate. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au, or the relevant regulator in your jurisdiction.
9. Cookies, analytics, and marketing
The Service uses cookies and similar storage necessary for authentication, security, preferences, and operation. We may use product analytics to understand feature use and improve the Service. We do not use receipt or Gmail content to build third-party advertising profiles.
Our public marketing website may use separate analytics or advertising tools described in its cookie or consent interface. Opting into marketing email is optional, and you can unsubscribe using the link in the message.
10. Children
The Service is not directed to children under 16, and merchant accounts require an adult with authority to contract. If we learn that we collected personal information from a child contrary to applicable law, we will take appropriate steps to delete it.
11. Changes to this policy
We may update this policy as the Service or law changes. We will publish the new version and effective date and provide additional notice where a change is material or the law requires it.
12. Contact
Receiptile Pty Ltd
ACN 696 486 674
ABN 41 696 486 674
Shop 3B, 47 Tweed Coast Road
Bogangar NSW 2488
Australia
Email: info@receiptile.com