Privacy Policy

Your receipts belong to you. The scanner runs on your device by default. Cloud verification is opt-in and can be switched off, and images sent for that verification are not retained after the check. The scanned image you save with a receipt is kept in your own account so you can check it later, and is deleted when you delete the receipt. We do not sell your data, and we do not track you across other companies’ apps or websites.

Account

Your email address, so we can create your account and sign you in. Authentication is handled by Supabase on our behalf.

Receipts you scan

When you save a receipt, we store what was on it — merchant, date, line items, subtotal, taxes and fees, total, and the currency — so your receipts sync across your devices and are there when you come back. This data is tied to your account and is visible only to you.

Receipt images

The scan itself runs on your iPhone. When cloud verification is enabled, an image is sent to our verification service to be read and checked; that verification image is used for the single check and is not retained afterwards. You can turn cloud verification off, and scanning continues entirely on-device.

Separately, when you save a receipt, Swoopit keeps the scanned image of that receipt in your own private storage, so you can open it later and check the digital copy against the paper. This saved image is tied to your account, visible only to you, and is deleted when you delete the receipt (or your account).

Location (optional)

If you allow it, Swoopit tags a receipt with where you scanned it so the spending map can show where your money went. This uses your location only while you are using the app, only at the moment of a scan, and is entirely optional — deny it and receipts are simply left un-pinned; everything else works the same.

Merchant mode (local network)

If you run a business, merchant mode can act as your till’s Wi-Fi receipt printer. This uses your local network to receive the sale your point-of-sale prints so Swoopit can turn it into a digital receipt. It is used only for that, and only in merchant mode.

What the iPhone app does not collect

The iOS app includes no advertising SDK, no analytics SDK and no crash-reporting SDK, and does not track you across other companies’ apps or websites. It does not access your contacts, microphone, health data or browsing history.

The website

justswoopit.com uses privacy-respecting product analytics and error monitoring (PostHog and Sentry) to understand which pages are used and to detect faults. This is separate from the app and is not used to build advertising profiles.

We do not sell personal information. We share data only with the service providers needed to run Swoopit, and only for that purpose:

• Supabase — account authentication, database and storage.
• Anthropic (via Vercel AI Gateway) — reads and checks a receipt image when cloud verification is on. Images are not retained after the check.
• Stripe — payments, for business subscriptions only. Card details go directly to Stripe; we never see or store them.
• Resend — sending transactional email such as receipt copies.
• Vercel — hosting for justswoopit.com.

We may also disclose information where we are legally required to.

Receipts — and the scanned image saved with each one — stay until you delete them or delete your account. Verification images are not kept once the check finishes. Deleting your account removes your receipts, saved images and profile from our systems.

• Turn off cloud verification — Settings in the app. Scanning then never leaves your phone.
• Delete a receipt — at any time, from the app.
• Delete your account and data— in the app, go to Profile › Delete Account. This erases your account and every receipt saved to it immediately, and cannot be undone. You can also email support@swoopit.app if you would rather we did it for you.
• Access a copy of your data — ask us and we will provide it.

Depending on where you live you may have additional rights over your personal information (for example under the Australian Privacy Principles, the GDPR or the CCPA). Contact us and we will honour them.

Swoopit is not directed at children under 13, and we do not knowingly collect their personal information.

Data is encrypted in transit using HTTPS/TLS and stored on managed infrastructure with per-user access rules, so one account cannot read another’s receipts. No system is perfectly secure, but we keep credentials on our servers rather than in the app and review access regularly.

If this policy changes materially we will update this page and the date above, and where appropriate tell you in the app.

Questions, requests or complaints: support@swoopit.app. We answer within one business day.