Information we collect
- Account informationYour email address, display name, and identifiers supplied by Google, Facebook, or Apple when you choose social sign-in.
- Financial records you provideTransaction amounts, categories, dates, notes, merchants, currencies, and categorization rules.
- Receipt contentReceipt images you choose to capture or import and the text and transaction details extracted from them.
- Technical diagnosticsLimited crash, error, performance, app-version, and device-type information used to keep the service reliable. We do not enable advertising tracking.
How we use information
We use this information only to authenticate your account, store and synchronize records, scan receipts, provide account controls, protect the service, troubleshoot failures, and improve reliability. We do not sell personal information or use your financial records for advertising.
Device permissions
Camera access is requested only when you choose to photograph a receipt. The system photo picker appears only when you choose a receipt from your library. Face ID or Touch ID is optional; biometric data remains managed by your device and the app receives only the authentication result.
Retention and deletion
Synced account data is retained while your account is active. When you select Delete my account, you are signed out and deletion is scheduled for 30 days later. Signing in before the deadline cancels the request. After the deadline, your account, transactions, linked-login records, and stored receipt files are deleted from the active service. Residual encrypted backups, if present, expire through normal backup rotation and are used only for disaster recovery.
Your choices
You can decline optional permissions, edit or delete records, sign out, or initiate complete account deletion from Settings → Account. You may also contact us about access, correction, consent, or privacy questions.
Security and international processing
We use HTTPS in transit, access controls, and platform security features. No system can guarantee absolute security. Service providers may process information in countries other than yours, subject to their applicable safeguards.
Children
Sổ Thu Chi is not directed to children under 13, and we do not knowingly collect personal information from children under 13.