Privacy Policy
Effective date: July 6, 2026 · Last updated: July 6, 2026
Receipt Locker LLC ("Receipt Locker," "we," "us," or "our") operates ReceiptLocker.app, a digital vault that helps households capture, organize, and retain their receipts. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. Receipt Locker LLC is the controller of the personal information described here.
1. Information we collect
Information you provide
- Account information — your name, email address, and password (stored only as a cryptographic password hash) when you create an account.
- Household information — the household you create or join, and invitations you send or accept to share access with others.
- Receipt content — the images, PDFs, and files you upload, along with the information extracted from or added to them, such as merchant, amount, date, tax, line items, category, notes, and whether an item is HSA/FSA-eligible or reimbursed. Receipts you store may reveal sensitive details, including health-, medical-, or purchase-related information.
- Communications — messages you send us for support or other inquiries.
Information collected automatically
- Usage and device data — log data such as IP address, browser type, pages viewed, and timestamps, used to operate and secure the service.
- Authentication data — session identifiers, authentication tokens, and related security information used to authenticate users and protect accounts.
Payment information
Subscription payments are processed by Stripe. Your card number and full payment details are collected and stored by Stripe under its own terms and privacy policy — Receipt Locker does not receive or store your full card number. We retain limited billing metadata (such as subscription status, plan, and the last four digits or card brand where provided by Stripe) to manage your subscription.
2. How we use your information
- To provide, maintain, and improve the service — including storing your receipts and extracting their details.
- To enable household sharing and the features of your plan.
- To process subscriptions, trials, and billing through Stripe.
- To secure the service, prevent abuse, and troubleshoot problems.
- To communicate with you about your account, security, and service changes.
- To comply with legal obligations and enforce our Terms of Use.
We may analyze aggregated and de-identified usage information to improve the reliability, performance, and usability of Receipt Locker. We do not use receipt content to train AI models.
3. Legal bases for processing (where applicable)
Where required by applicable law, we process your personal information because:
- it is necessary to provide the service you request;
- it is necessary to perform our contract with you;
- we have legitimate interests in operating, securing, and improving the service; or
- you have provided consent.
4. Artificial-intelligence processing
To extract details from your receipts, we send receipt images and related content to a third-party AI provider that performs the extraction on our behalf. We configure and contract with our AI provider to process receipt data under zero data retention and no model training terms, subject to the provider's capabilities, contractual commitments, and applicable law — meaning your receipts are processed to return a result and are not used to train AI models. We do not include your receipt content in our own model training.
5. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, maintain security, remember preferences, and understand how the service is used. You can control cookies through your browser settings, although some features may not function properly if cookies are disabled.
We may also use cookies or similar technologies to understand usage patterns and improve the Service. These technologies are not used to access the contents of your receipts.
6. How we share information
We do not sell your personal information. We share it only as described here:
- Within your household — receipts and household data are visible to members of the household you share with, according to their role.
- Service providers (subprocessors) — vendors that process data on our behalf under contractual confidentiality and security obligations. Our current subprocessors include:
- Amazon Web Services — hosting and storage
- Stripe — payment processing
- AI processing providers — receipt data extraction
- Legal and safety — when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or Receipt Locker.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
7. Data security
- Encryption of sensitive data at rest using encryption keys managed through AWS Key Management Service (KMS), and TLS 1.2+ encryption in transit.
- Tenant and household isolation designed to keep each household's data separate.
- An append-only audit trail and least-privilege access controls.
- Production access is restricted using least-privilege principles and operational controls designed to minimize human access to production data.
- Versioned and geographically replicated storage designed to improve durability and resilience against data loss.
No method of transmission or storage is perfectly secure, but we work to protect your information using the controls above.
8. Data retention
Receipt Locker is built for long-term retention. The service is designed to support long-term retention, including retention periods of ten years or longer where supported by your subscription and continued account activity, so your records are available when you need them. We retain your information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete a receipt it is removed from your active vault; residual copies may persist for a limited period in backups or replicated storage before expiring. You are responsible for maintaining a current email address so we can communicate important information about your account and retained data.
Account closure. If you close your account, your receipts and account data will be scheduled for deletion, subject to backup retention periods, legal obligations, and fraud-prevention requirements.
9. Your choices and rights
- Access and export — you can view and export your receipts from within the app.
- Correction — you can edit the details on your receipts and your account information.
- Deletion — you can delete receipts and request deletion of your account. Some information may be retained where required by law or for legitimate business purposes.
- Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA, including rights to access, correct, delete, or restrict processing of your personal information. To exercise these rights, contact us at the address below.
10. Children's privacy
Receipt Locker is not directed to children and is intended for users 18 years of age or older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11. International users
We operate in the United States, and your information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, processed, and stored in the United States.
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised Policy.
13. Contact us
Questions or requests about this Policy or your information:
Privacy questions
privacy@receiptlocker.app
Security matters
security@receiptlocker.app
Receipt Locker LLC
2503D N Harrison St PMB 2095
Arlington, VA 22207-1640
United States