Data handling for ReceiptsPath
Last updated: September 24, 2026.
This notice explains what data ReceiptsPath uses, why it uses it, where it is stored, and what controls the individual has. It complements the privacy policy and the terms of use.
Data and purpose
- Receipt images: they are used to retain evidence and extract merchant details, date, total, currency, and other fields.
- Confirmed fields: may include category, payment method, project, client, purpose, entity, country, notes, and tax information, solely for organizing and exporting the selected records.
- Local technical data: SHA-256 fingerprints to detect duplicates, OCR or manual origin, and review status.
Processing and retention
The OCR runs on the device. Multi‑page originals and the index are encrypted with AES‑256‑GCM within the app’s private space; the key is protected by Android Keystore or Apple Keychain. There is no account, cloud, advertising, analytics, or remote OCR. Records remain until they are sent to the trash and deleted, the app data is cleared, or the app is uninstalled.
Exports and chosen third parties
The individual can create a package for their accountant or an encrypted portable backup. Only by that action does the system allow choosing another destination. If Drive, email, messaging, or another provider is selected, that third party receives the export and applies its own terms. An exported copy must also be deleted from the destination where it was stored.
Permissions and control
- The camera or gallery are used only when the individual initiates a capture or import.
- Device authentication can protect opening; ReceiptsPath does not receive or store the fingerprint or face.
- Each OCR suggestion requires review before being saved.
- The individual can correct, export, move to trash, and delete their records from the app.
Cookies and tracking
ReceiptsPath does not use cookies, advertising identifiers, or tracking within the described app. The website you are reading may use site‑specific technologies, explained in Cookies and terms of use of whitehatmgmtllc.com.
Changes and contact
Before adding accounts, cloud, ads, analytics, remote OCR, or synchronization, White Hat Mgmt LLC must review and update this notice and the privacy policy. For questions, use our contact page.