Your Privacy is
Our Priority

Welcome to Proofey! We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Proofey (“we,” “our,” or “us”) collects, uses, shares, and safeguards your information when you use our financial receipt management application (the “Service”). It also describes your rights and how you can exercise them.

Proofey serves users around the world, and we strive to comply with all applicable privacy and technology regulations, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) (as amended by CPRA), and emerging laws governing AI and data. By using Proofey, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Service.

This Policy applies to information we collect through our app and any related services, features, or content. It does not cover any third-party services that you may access through Proofey (except our service providers as described below). We may update this Policy from time to time to stay compliant with new laws and technologies, and we will notify you of any material changes.

We collect information you provide directly to us, such as when you create an account, update your profile, or contact us for support.

(a) Account Information

When you create a Proofey account, we collect identifiers such as your name, email address, and a password. We may also collect contact details and profile information.

(b) Receipt Content

Proofey allows you to upload or capture images of receipts, or forward digital receipts, to organize your expenses. We process the text and data from your receipts using Optical Character Recognition (OCR) technology to extract line items, totals, merchant info, and other relevant details.

(c) Device and Technical Data

We gather data about the device and app version you use, including your device type/model, operating system and version, unique device identifiers, browser type (if applicable), preferred language, and the Internet Protocol (IP) address from which you access the Service.

(d) Communications and Support

If you contact us for support, provide feedback, or otherwise communicate with us, we will collect the information you choose to share.

We process your personal data to operate and improve the Service, to provide AI-powered features (like automatic receipt parsing and categorization), to communicate with you, for customer support, for security/fraud prevention, and to comply with legal obligations. We do not use your data for advertising or sell your data.

(a) Provide and Enhance the Service

We use your information to operate Proofey's core functionality, including using your receipt data to categorize your spending, organize your expense records, and generate your reports.

(b) AI-Powered Features

Proofey leverages AI and machine learning (through OpenAI's platform) to interpret and categorize the content of your receipts, suggest expense categories, or extract insights. Your receipt text and related data may be sent to OpenAI for processing.

(c) Communications

We use contact information (like your email) to send essential service-related communications, including verification emails, password reset messages, and important notices about the Service.

(d) Improvement and Analytics

We may use aggregated, anonymized, or de-identified data about how users use Proofey to understand and improve our Service.

(e) Security and Fraud Prevention

We process certain data to keep Proofey and our users safe, including using device/IP information to detect unusual account access.

For individuals in the European Economic Area (EEA), United Kingdom, or other regions with similar laws, we rely on the following legal grounds to process your personal data:

• Performance of a Contract: We need to process certain personal data to fulfill our obligations under our Terms of Service.
• Consent: We rely on your consent where we ask for it explicitly, such as when you choose to enable optional features.
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving and securing our service and preventing fraud.
• Legal Obligation: In some cases we have a legal obligation to process certain data, for example retaining records to comply with tax and financial regulations.

We do not sell your personal information to third parties. We only share your data in limited situations:

(a) Service Providers

• Supabase — secure cloud storage and database services
• SendGrid — email and notification services
• RevenueCat & App Stores — subscription management
• OpenAI — AI-powered receipt parsing and categorization. OpenAI is prohibited from using our users' data for its own purposes.
• CloudConvert — document conversion for various receipt file formats

(b) Legal Compliance and Protection

We may disclose your information when necessary to comply with applicable laws or valid legal processes.

(c) Business Transfers

If Proofey undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.

(d) With Your Consent

We will share your personal data with third parties only if you direct us to or explicitly consent to such sharing.

Proofey is a global service. The data we collect from you may be transferred to, stored, and processed in countries other than your own — primarily the United States. If you are located in the EU or UK, we rely on legal mechanisms such as the European Commission's Standard Contractual Clauses (SCCs) to govern transfers of personal data.

We take the security of your data seriously and implement a combination of technical and organizational measures to protect it. Our security measures include:

• Encryption: All communication between Proofey clients and our servers is encrypted using HTTPS/TLS. We also employ encryption at rest for stored data.
• Access Controls: Only authorized personnel with a need to perform tasks can access user data.
• Security Testing: We regularly update our software and dependencies to address security vulnerabilities, and employ firewalls and network security monitoring.
• Third-Party Security: We ensure our third-party service providers also employ strong security measures.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and any applicable regulator within the required time frames.

We keep your personal data only as long as necessary for the purposes it was collected, or as required by law.

• Active Account Data: We retain your personal information for as long as you maintain an account with Proofey.
• Account Deletion: When an account is deleted, we will remove or anonymize personal data from our active databases. Data may persist in secured backups for up to 60 days.
• Legal Retention: In some cases, even after account deletion, we might retain certain information if necessary for legal obligations such as compliance with tax, audit, or accounting requirements.
• Anonymized Data: We may convert some data into anonymized form for analytical purposes. This non-personal data may be retained indefinitely.

• Access and Portability: You have the right to request a copy of the personal data we hold about you.
• Rectification: If any of your personal information is inaccurate or incomplete, you have the right to correct it.
• Deletion: You have the right to delete your personal data. You may delete individual items or your entire account at any time.
• Restriction of Processing: You can request that we restrict processing of your data in certain circumstances.
• Objection to Processing: You have the right to object to our processing when it is based on legitimate interests or for direct marketing.
• Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time.
• Data Portability: You can ask to receive your personal data in a structured, machine-readable format.

We will not discriminate against you for exercising any of these rights.

If you are a resident of California, you may have additional rights including the right to know, the right to delete, the right to correct, the right to data portability, and the right to opt-out of the “sale” or “sharing” of personal information.

We do not sell your personal data for money and do not share it for cross-context behavioral advertising. To exercise these rights, contact us at hello.proofey@gmail.com.

If you are located in the European Union, United Kingdom, or Switzerland, the GDPR provides you with additional rights, including data protection, data subject access requests, and the right to lodge complaints with your local data protection authority. We encourage you to contact us first so we can address your concerns directly.

Proofey is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us immediately.

Analytics tools may collect device identifiers and usage patterns. We may use internal analytics or third-party tools to collect error logs, crash reports, and performance data about the app. You may disable tracking from your device settings, but certain features may not function properly.

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

To request deletion of your account or associated data, visit proofey-app.com/delete-account. You may also initiate account deletion directly from within the app.

We may update this Privacy Policy from time to time. We will notify you of any significant changes and indicate the date of the latest revision at the top of the policy. If we make material changes, we may send an email notification or display a prominent notice within the app.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: hello.proofey@gmail.com

Data Protection Officer: hello.proofey@gmail.com