Privacy Policy

01Information we handle

Personal information includes information that identifies you directly or can be linked to you. Depending on the features you use, we handle:

• Account data: your email, account identifier, an account name derived from your email, password hash, and authentication/session records. Passwords are not stored in readable form.
• Expense and bill data: merchant names, items and prices, dates, currencies, categories, payment-method labels, budgets, notes, group and friend names, allocations, balances, and payments you record. Recording a payment is not a bank transfer.
• Receipt content: photos you choose to scan, save, or back up, including any personal information visible in them, and the extracted receipt data.
• Subscription data: app/customer identifiers, products, transactions, purchase or trial status, renewal and entitlement information, and paywall interactions processed through Apple and Adapty. We do not receive your full payment-card details from Apple.
• Technical and support data: IP addresses and request metadata processed by servers and providers; device, app, and operating-system information used by SDKs; scan request identifiers, timing and usage counts; and information you send when asking for help.

02Local use and account backup

Manual expenses, budgets, friends, recorded payments, bills, and receipt photos are stored on your iPhone. An account is optional for manual use. Without signing in, those local records are not backed up to a TabPick account.

When you sign in, supported records and receipt images can be uploaded to our server and synchronized with your account. Guest records may be brought into the signed-in account. Offline changes can upload when connectivity returns. Signing out does not erase the separate local account data or the copies already stored on the server.

Local entries are not automatically sent to OpenAI merely because they exist in your ledger. Receipt content is sent for AI processing when you use scanning. Subscription SDK processing is separate from expense backup and can occur even when you are using the app without a TabPick account.

03AI receipt scanning and OpenAI

When you request an AI scan, the selected receipt image is sent to our backend and forwarded to OpenAI to extract receipt information. This may include anything visible on the receipt, such as a merchant, purchase items, date, a customer name, or partial payment details. Crop or cover unnecessary information before scanning, and do not upload sensitive documents that are not needed for this feature.

Our extraction service does not deliberately save a permanent receipt image solely to perform a scan. Temporary upload files are used for processing. Separately, images you save with bills or include in account backup can be stored by TabPick as described in this Policy.

We request that OpenAI not store the response as application history. This does not mean zero provider retention: OpenAI may retain information for abuse prevention or legal reasons under its applicable API data controls. Review OpenAI’s current data controls using the link below. AI extraction can be inaccurate; review and correct the result before use.

04Apple and Adapty subscriptions

Apple processes App Store payments under its own terms and privacy policy. Adapty helps load paywalls, validate purchases, manage access levels, and understand subscription and paywall performance. It processes app/profile identifiers, device and app information, purchase events, and subscription state for these purposes.

When signed in, TabPick supplies Adapty a pseudonymous customer identifier derived from your account identifier and service address. Our integration does not send your email, password, authentication token, receipt photos, expense ledger, or budget records to Adapty as customer profile attributes. Pseudonymous identifiers can still be personal information.

Advertising identifier (IDFA) collection is disabled in the current Adapty configuration. This does not turn off the subscription SDK’s operational data processing. We do not currently use the website or app to sell personal information or to share it for cross-context behavioral advertising.

05Why we use information and legal grounds

We use information to provide the features you request, create and secure your account, extract receipts, calculate and store expense records, synchronize backups, recognize paid access, answer support requests, investigate errors and misuse, and meet legal obligations.

Where a legal basis is required, we rely on performance of our agreement for requested services; legitimate interests for proportionate security, troubleshooting, and service administration; legal obligations where applicable; and consent where required for optional permissions or processing. You may withdraw consent without affecting prior lawful processing. We do not use your expense records to make decisions with legal or similarly significant effects about you.

06Permissions and information about other people

Camera and photo access are used to capture or select receipts you choose to provide. You can refuse or withdraw permissions through iPhone Settings and use manual entry instead. The current app does not require your address book or precise location to split a bill.

Friend names and group records are entered by you. Provide only information you are entitled to use and avoid unnecessary sensitive information. Expense categories or receipts can reveal health or other sensitive details; do not include them unless necessary and lawful. We do not request sensitive personal information to provide basic splitting.

You decide whether to share a summary and which app or recipients receive it. That destination’s practices apply to the copy you send. Other people’s copies are not removed by deleting a TabPick record.

07Recipients and international processing

Information is shared only as needed with service providers such as hosting and infrastructure providers, OpenAI for requested receipt scans, Adapty for subscriptions and paywalls, Apple for App Store services, and providers used to respond to your support messages. These providers are subject to their applicable service, privacy, security, and data-protection obligations.

We may disclose information where lawfully required, to protect users or the service, or in connection with a lawful business transfer subject to applicable protections. We do not publish your expense ledger or share it with your friends automatically.

The operator is based in Thailand. Service providers may process information in other countries, including the United States, whose laws may differ from yours. Where required, we use applicable contractual or other lawful safeguards for international transfers. Contact us to ask about safeguards relevant to your information.

08Retention and deletion

Local records remain on your device until you remove them or the app’s data is removed. Device backups and Keychain items may follow Apple’s settings and retention behavior. Removing the app is not a request to delete server-side account data or provider records.

We keep account information, synchronized expenses, saved bills, and uploaded receipt images while your account remains in use or until you request their deletion, subject to legal requirements. Removing a record locally or from a synchronized document does not necessarily erase every separately stored receipt image, saved bill, or backup copy. Contact us to request removal of associated server-side records.

To request access, a copy, correction, or deletion of your account and associated data, email the contact address below. Use the registered email where possible, identify the request, and do not send your password. We may ask for proportionate verification before acting. The current release does not provide an in-app account-deletion control; requests are handled through the contact channel.

After verifying a deletion request, we remove or anonymize the account data covered by the request unless a lawful retention requirement or exception applies. We will explain any relevant limitation and respond within applicable legal time limits. Operational logs, support records, purchase records needed for compliance, and any protected backup copies may remain only as needed for their purposes or legal obligations. Provider-held records follow applicable provider obligations as well.

Deleting an account, signing out, or deleting TabPick does not cancel an Apple subscription or delete Apple’s transaction history. Cancel subscriptions separately through Apple. Do not reconnect a device with records you intend to remove without first following the deletion instructions we provide, because synchronization may upload local copies again.

09Your rights and choices

Depending on applicable law, you may request access, a copy, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing relies on it. These rights are subject to applicable legal exceptions and proportionate identity verification.

You can use manual features without submitting a receipt for AI scanning, control camera and photo permissions through your device, and manage subscriptions through Apple. We will not unlawfully discriminate against you for exercising privacy rights.

Contact us to exercise a right or raise a concern. You may also complain to your competent data-protection authority, including Thailand’s Personal Data Protection Committee where applicable.

10Security

We use reasonable measures appropriate to the service, including protected credentials, restricted access to private account records, account-scoped receipt access, and HTTPS for production app connections. No internet transmission or storage method is completely secure. Protect your device and account, and tell us if you suspect unauthorized access. We address and notify relevant data breaches as required by applicable law.

11Cookies and children’s privacy

The Cookie Policy describes necessary website cookies and related device storage. The current landing-page split demo uses only illustrative sample data in page memory; it does not upload your selections or create an expense account.

TabPick is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child under 13 has provided information so we can investigate and remove it as appropriate. Parental or guardian consent is required for other minors where applicable law requires it.

12Changes to this Policy

We may update this Policy when the service or data handling changes. We will publish the updated version and date, provide notice of material changes through an appropriate available channel, and obtain new consent where legally required. The planned domain does not create a new account or authorize us to use your information for a new purpose.