PRIVACY BY DEFAULT

Your receipt isn’t our business.

Cart and receipt images are decoded, stripped of metadata, safety-checked, processed in memory for product identification, and then immediately discarded. They are never written to our database or object storage.

What we keep

What we do not keep

Public result links

Public links contain a random identifier and sanitized product results. They expire after twelve months. They do not expose the uploaded image or an identity.

Optional accounts

If you sign up, we store your Neon Auth identity plus the result links, shopping preferences, and confirmed swaps you explicitly save. A saved result is attached only when the creating browser proves ownership with its private deletion token. Your photo is already gone before signup is offered.

Platform impact totals are opt-in, aggregate only confirmed self-reported spending, and remain hidden until at least 20 consenting users contribute. They do not measure donations prevented or establish causation. You can permanently delete all app-owned account data from your account page.

Important operational detail

If validation, moderation, or product recognition fails, the image is still discarded. Research continues only from the text product list confirmed on screen.