Privacy Policy
The short version: your data is used to collect what you're owed, and for nothing else. We never sell it, we don't run ads, and you can export or erase everything with one tap in Settings.
01What we collect
Your email address, display name and language; the items, receipts and notes you add to your ledger; the claims and correspondence you log; and your plan and billing status. That's it — no tracking pixels, no contact scraping, no data brokers.
02How we use it
To build your ledger, watch warranty windows, detect opportunities, draft and track claims, and bill your subscription. Receipt images and claim text are sent to an AI provider (OpenAI) solely to extract purchase data and draft letters — never for advertising or profiling.
03What we never do
We never sell your data. We never use it for advertising. We don't train models on your data. We make money from subscriptions — you are the customer, not the product.
04Storage and security
Data lives in Supabase (Postgres) with row-level security, so your rows are only readable by your authenticated session. Receipt images live in a private storage bucket scoped to your account. Everything is encrypted in transit and at rest.
05Payments
Subscriptions are processed by Stripe. Your card details go directly to Stripe — we never see or store full card numbers.
06Your rights
Export everything you've ever put into OWED as JSON, or delete your account — ledger, claims, receipts and all — from Settings. Deletion is immediate and irreversible. You can also write to us to exercise any data right your jurisdiction grants.
07Retention
We keep your data for as long as your account exists. When you delete your account, your data is erased from the live database immediately; residual backups expire on a rolling schedule within 30 days.
08Changes
If this policy changes in any meaningful way, we'll say so in the app before the change applies. Continued use after that means you accept the updated policy.