Legal

Privacy policy

Last updated 10 August 2026

This policy explains what myReceets collects, why, who we share it with and what you can do about it. It covers the app and this website. We have tried to write it in plain English rather than legal boilerplate.

Who we are

myReceets is a receipt and return-deadline tracker operated by MYRECEETS Limited, a company registered in England and Wales. MYRECEETS Limited is the data controller for the personal data described here. For anything in this policy, including data-protection requests, contact support@myreceets.com.

What we collect

Your account. Your email address, your name and profile picture if your provider supplies them, and the date you signed up.

Your email messages. If you connect a mailbox, we read messages in it to find receipts and order confirmations. We read the message body, not only the subject line, because the retailer, the amount, the order number and the return terms are written inside the message.

Receipt details. What we extract from those messages: retailer, purchase date, amount, currency, order number, items where listed, and the return deadline where one is stated.

Photos you add. If you photograph a paper receipt or attach an image, we store that image and the text read from it.

Device tokens. A push notification token for each device, so we can send you deadline reminders.

Access tokens. The tokens your mail provider issues so we can keep checking for new receipts. These are encrypted before they are stored.

Google user data

When you connect a Gmail account, myReceets requests the gmail.readonly scope. This is read-only: we cannot send, modify, label or delete anything in your mailbox, and we never attempt to.

We request this scope rather than a narrower one because a receipt cannot be identified or understood from message metadata alone. The retailer, the total, the order number and the return window are in the message body, and reading it is the only way to tell you when your return window closes.

We use Gmail data for exactly one thing: finding your receipts and working out their return deadlines, so the app can list them and remind you. We do not use it for advertising, profiling, training machine-learning models, or any other purpose.

Human access. We do not read your mail. The only exceptions are the narrow ones the Limited Use policy allows: where you have given us explicit permission to look at a specific message to fix a problem you have reported, where it is necessary for security purposes such as investigating abuse, or where we are required to by law.

You can withdraw our access at any time by disconnecting the inbox in the app, or from your Google account directly at myaccount.google.com/permissions.

Microsoft account data

Connecting an Outlook account works the same way and is also read-only. The same limits apply: we read messages to find receipts, and we use what we find for nothing else. You can revoke access from your Microsoft account or by disconnecting the inbox in the app.

Where your data is held

Your data is stored on servers in the United Kingdom (London). Receipts extracted from email are processed on our own servers. The content of your email is never sent to a third-party service, and it is never used to train any model.

Who we share it with

We do not sell your data, and we do not give it to advertisers, data brokers or credit-reference agencies. We share it only with the services needed to run the product:

• Amazon Web Services. Hosting and databases, in the London region. If you photograph a paper receipt, that image is sent to Amazon Textract, also in the London region, to read the text on it. This applies only to photographs you take. It is never used on your email.
• Google Firebase and Apple Push Notification service. Delivering push notifications to your device. A reminder can include a retailer name and a deadline date, because that is what makes the reminder useful.
• Google and Microsoft. The mail providers themselves, when we ask them for your messages on your behalf.

We may also disclose data where the law requires it, or to protect the rights and safety of our users.

How long we keep it

We keep your receipts for as long as your account exists, because the app's job is to show you your history. Disconnect an inbox and we stop reading it immediately. Delete your account and we delete your receipts and the tokens that let us reach your mailbox.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict that use. Write to support@myreceets.com and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Traffic to our servers is encrypted in transit. Provider access tokens are encrypted before being stored. Access to production systems is limited to those who need it.

Children

myReceets is not intended for children under 13, and we do not knowingly collect their data.

Changes

If we change how we use your data we will update this page and change the date at the top. If the change is significant we will tell you in the app.

Contact

Questions about this policy: support@myreceets.com.