🔒 Privacy-First Commitment
BillSnap is built with privacy as the default. Your bill data stays on your device unless you choose Premium Cloud Backup. Cloud backups are encrypted on-device with your backup password before upload, and we do not sell data or use it for tracking.
1. Data Collection Summary
❌ What We Do NOT Collect
Unlike most apps, BillSnap does NOT collect or access:
- Your bill photos or images unless you choose to include them in a Premium Cloud Backup
- Bill amounts, due dates, or payment information unless you choose to include them in a Premium Cloud Backup
- Personal financial data unless you choose to include it in a Premium Cloud Backup
- User behavior or analytics data for advertising
- Device identifiers for tracking
- Location data
- Browsing history
✅ What We Do Collect (Minimal & Necessary)
We only collect the minimum data required for app functionality:
- Subscription Status: If you purchase Premium, Apple and RevenueCat provide transaction and entitlement verification data (transaction ID, purchase date, subscription status)
- Cloud Backup Account: If you create an optional cloud backup account, Supabase stores your email address and authentication data for sign-in
- Encrypted Cloud Backup: If you use Premium Cloud Backup, Supabase stores the encrypted backup file and metadata such as backup time, size, and item counts
- Product Analytics: If enabled, BillSnap records limited app usage events such as app opens, paywall views, purchases requested/completed, and backup success/failure states. These events do not include bill names, bill photos, notes, account numbers, or payment credentials.
- Crash Diagnostics: If crash reporting is enabled for your build, BillSnap may receive technical crash and error details needed to diagnose app failures. We configure diagnostics to avoid personal data.
- Support Communications: Your email address and messages when you contact us
🔒 Your Bill Data Stays Private
Important: Your bills, photos, and financial information stay on your device by default. If you choose Premium Cloud Backup, the app encrypts a backup on your device before uploading it. BillSnap cannot recover your backup password, and cloud backup data is never used for advertising or tracking.
2. Data Storage
Local By Default
Bill data, photos, and app settings are stored on your device using secure local storage unless you choose Premium Cloud Backup:
- Bill Photos: Stored in your device's secure file system
- Bill Information: Stored in encrypted local database
- App Settings: Stored in device preferences
- Premium Cloud Backup: Optional encrypted backup stored in Supabase so you can restore on another device
- Backup Password: Used to encrypt the backup before upload and cannot be recovered by BillSnap
- iOS Widget Snapshot: If you use the BillSnap widget, a small local snapshot of due bill counts, due dates, and amounts is stored in the app's private shared widget container. It does not include bill photos, notes, account numbers, or payment credentials.
Data Control
You have complete control over your data:
- Export your data at any time
- Delete individual bills or all data
- Uninstalling the app removes all data
- No backup-password recovery if you forget the password used to encrypt a cloud backup
3. Device Permissions
BillSnap requires certain device permissions to function. Here's what we request and why:
Camera Permission
- Purpose: To capture photos of your bills
- Usage: Only when you actively take a photo within the app
- Storage: Photos are saved locally on your device only
Photo Library Permission
- Purpose: To import existing bill photos, screenshots, or PDFs
- Usage: Only when you choose to import a file
- Access: We only access files you explicitly select
Notifications Permission
- Purpose: To send reminders about upcoming bill due dates
- Usage: Scheduled locally on your device, not from a server
- Control: You can disable notifications anytime in device settings
Biometric Authentication (Optional)
- Purpose: To secure app access with Face ID/Touch ID
- Usage: Only if you enable this feature in settings
- Storage: We use device's native biometric APIs; no biometric data is stored by our app
4. OCR (Optical Character Recognition)
BillSnap uses on-device OCR technology to extract text from your bill photos:
- Processing: All OCR processing happens locally on your device
- No OCR Upload: Images are not uploaded for text recognition
- Technology: We use on-device text recognition libraries to extract bill text where supported
- Data Usage: Extracted text is only used to populate bill fields in the app
5. Third-Party Services
BillSnap uses minimal third-party services:
Payment Processing (Premium Subscriptions)
- iOS: Apple App Store handles all payments
- Entitlements: RevenueCat helps verify Premium access
- Our Access: We receive subscription verification data from Apple/RevenueCat:
- Transaction ID (anonymous identifier)
- Purchase date and expiry date
- Subscription status (active, expired, cancelled)
- Product ID (monthly, annual, or lifetime)
- What We DON'T Get: Credit card numbers, billing addresses, payment methods, or other payment details
- Purpose: This data is only used to verify your premium subscription status and unlock features
- Storage: Purchase verification tokens stored locally on your device
Supabase (Optional Premium Cloud Backup)
- Purpose: Account sign-in and encrypted backup storage for Premium Cloud Backup
- Data Stored: Backup account email, encrypted backup file, and backup metadata such as storage path, item counts, size, and timestamp
- Encryption: BillSnap encrypts backup contents on your device before upload using your backup password
- Access Control: Cloud backups are stored in a private bucket with owner-only access controls
- Backup Password: BillSnap does not receive or store your backup password and cannot recover it
Product Analytics and Diagnostics (No Cross-App Tracking)
- Purpose: Product analytics helps us understand which app features work, where users get stuck, and whether Premium/backup flows are reliable.
- Data Excluded: Analytics events do not include bill names, bill photos, notes, account numbers, payment credentials, or backup contents.
- User Control: You can turn product analytics off in BillSnap under Settings > Privacy > Product Analytics. Turning it off removes unsent analytics events from that device.
- Diagnostics: Crash diagnostics may collect technical error information needed to fix app crashes, configured without personal user data.
- We do NOT use Google Analytics, Facebook Pixel, or similar services
- We do NOT embed advertising SDKs
- We do NOT track you across other apps or websites
6. Children's Privacy
BillSnap is intended for users 18 years and older. We do not knowingly collect information from children under 13 (or 16 in certain jurisdictions). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at help@billsnap.online.
7. Network Communication
BillSnap operates primarily offline, with your bill data stored locally. However, the app does communicate over the network for limited purposes:
- Subscription Verification: Validating premium subscription status with Apple and RevenueCat servers (encrypted HTTPS connection)
- In-App Purchases: Processing subscription purchases through the Apple App Store (handled by Apple, not us)
- Cloud Backup: Creating a backup account and uploading or downloading encrypted backups if you enable Premium Cloud Backup
- Product Analytics and Diagnostics: Sending limited app usage events or crash diagnostics when enabled
- App Updates: Checking for new app versions (standard app store behavior)
Critical Privacy Protection: Your personal bill data is never transmitted for advertising or analytics. If you use Premium Cloud Backup, backup contents are encrypted on your device before upload and can only be decrypted with your backup password.
8. Data Security
We implement appropriate security measures to protect your data:
- Local Encryption: All bill data stored on device is encrypted
- Encrypted Transit: All network communications use HTTPS/TLS encryption
- Secure Coding: Following industry best practices (OWASP Mobile guidelines)
- Biometric Protection: Optional Face ID/Touch ID/Fingerprint for additional security
- No Third-Party Tracking: No advertising SDKs or cross-app tracking
9. Data Retention
How long we keep your data:
- Bill Data: Stored locally on your device until you delete it (we have no access to this)
- Cloud Backups: Your latest encrypted backup is retained until you replace it, delete it, or request deletion of your backup account
- Subscription Data: Retained as long as your subscription is active, plus 2 years for financial records
- Product Analytics and Diagnostics: Retained only as long as needed to improve reliability, understand feature usage, and support business records, then aggregated or deleted
- Support Communications: Kept for up to 2 years to help with ongoing issues
- Deleted Data: When you delete data from the app or uninstall, it's immediately removed from your device
10. Your Rights
Under various privacy laws (GDPR, CCPA, etc.), you have rights regarding your data. Since BillSnap stores all data locally on your device, you have full control:
- Right to Access: You can view all your data in the app
- Right to Export: Export your data anytime from Settings
- Right to Delete: Delete individual bills or all data from Settings
- Cloud Backup Control: Sign out of cloud backup, replace your latest backup, or contact support to delete the backup account
- Analytics Control: Turn product analytics off in Settings > Privacy > Product Analytics
- Right to Portability: Export data in standard JSON format
- No Data Sale: We do not sell personal data
11. International Users
BillSnap is designed to work worldwide with full privacy protection:
- GDPR Compliance (EU): Data minimization, export/delete controls, and optional cloud backup account deletion on request
- CCPA Compliance (California): No data sale or sharing
- Other Jurisdictions: Local-only storage respects all privacy laws
12. Support Communications
When you contact our support team:
- Email Address: We collect your email to respond to support requests
- Support Messages: We store your inquiries to help resolve issues
- Optional Information: Any diagnostic information you choose to share
- Retention: Support communications are kept for up to 2 years
- Not Shared: Support data is never shared with third parties
13. App Updates and Changes
We may update this Privacy Policy from time to time. Changes will be effective when:
- Posted on this page with a new "Last Updated" date
- Included in app update notes (for material changes)
- Users notified in-app (for significant changes affecting privacy)
Continued use of the app after changes indicates acceptance of the updated policy.
14. California Privacy Rights
California residents have specific rights under the CCPA:
- Right to Know: We don't collect personal information beyond what's stored locally on your device
- Right to Delete: Delete all data from within the app settings
- Right to Opt-Out: Not applicable as we don't sell personal information
- Non-Discrimination: All users have the same features regardless of privacy choices
15. Do Not Track
BillSnap does not track users, so "Do Not Track" browser settings are not applicable. We don't track you in the first place.
16. Data Breach Notification
Because BillSnap is local by default and optional cloud backups are encrypted before upload, server-side exposure is limited. However, we recommend:
- Use device passcode/biometric authentication
- Enable BillSnap's in-app biometric lock
- Keep your device's operating system updated
- Regularly backup your data using the export feature
- Use a unique backup password for Premium Cloud Backup and store it safely
17. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices:
💚 Our Privacy Promise
Your bills, your data, your control. BillSnap works locally by default. If you choose Premium Cloud Backup, the backup is encrypted before upload and protected by your backup password.
18. App Store Requirements
This privacy policy meets the requirements of: