Privacy Notice

Last edited September 20, 2026

Thank you for using Receipt Closet. This Privacy Notice explains what personal data White River Media LLC (“we”) collects about you and how we use it, and the choices you have. It applies to the Receipt Closet website and app (the “Services”). If we make a material change we will update the date above and, where appropriate, tell you in the app.

1. Contact us

White River Media LLC is responsible for your personal data. Questions, requests or complaints: info@whiteriver.media.

2. What personal data we collect and where we get the data

Data you give us.

• Account details: your name and email address, and, only if you add them, a company name, phone number and profile photo.
• Receipts you add: merchant, date, amounts, tax, currency, category, notes, the receipt photo and any text read from the photo.
• Your settings (report currency, receipt recognition, whether you allow reading improvements, local tax rate) and any mileage trips you log.
• What our reader suggested for a scanned photo (merchant, date, total, tax), kept next to what you saved so it can be shown and, if you allow it, measured.
• Your choice to receive product update emails, if you opt in.
• A record of when you accepted the Terms of Service and Privacy Notice, and which version.
• Your password. We store only a one-way hash of it and cannot read it. Short-lived sign-up and password-reset codes are stored the same way and deleted once used or expired.

Data we generate. An account ID, and short-lived attempt counters tied to your IP address and email that we use to block password guessing.

Data from partners. We do not receive personal data about you from advertisers, data brokers or other partners.

3. Why we process your personal data

• To provide the Services (performing our contract with you): running your account, storing and displaying receipts, producing reports and exports, and answering your requests.
• Account emails (performing our contract with you): a welcome message, and notices when your password changes or your account is deleted. These are not marketing.
• Security and fraud prevention (our legitimate interests): protecting accounts and the service from abuse.
• Improving receipt reading (your consent): only if you turn on “Help improve receipt reading,” which we ask about once and which is off until you say yes. We may then review the text read from your receipt photos, the reader’s suggestions and the corrections you saved, and where needed to understand a mistake, the photo itself. We use this only to make reading more accurate, and we never sell it or use it for advertising. You can turn it off in Settings at any time, which stops any further review. Deleting a receipt or your account removes it from our live systems.
• Suggestions from your own receipts (performing our contract with you): a suggested category and a reminder when a total looks unusual are worked out from your own earlier receipts only, never from other people’s.
• Product update emails (your consent): only if you turn them on. Every product email has an unsubscribe link, and you can also switch it off on your Account page.
• Legal obligations: where the law requires us to keep or disclose data.

The camera’s check for poor light, blur or glare runs on your device; the image is not sent anywhere for it. Receipt recognition is optional and off by default. When you turn it on, text on a photo is read by software running on our own servers. Your photo is not sent to an outside AI or OCR provider. We do not sell your data, show ads, or use advertising or analytics trackers.

4. Who can see your data

• You, when signed in. Only your signed-in account can open your receipts and photos.
• White River Media LLC, for support and security, when needed.
• Service providers that process data on our behalf: Vercel (hosting and private photo storage) and a managed Postgres database provider. They may not use it for their own purposes.
• An email delivery provider, which handles your address and the message text when we send you email.
• Frankfurter, a public exchange-rate service, receives a request from our server to fetch rates. No personal data is included.
• Authorities, where legally required, and a buyer if the business is transferred (you would be told).

5. International data transfers

We are based in the United States. Our providers may process data in the United States and other countries. Where the law requires, we rely on safeguards such as standard contractual clauses.

6. Data retention

We keep your data until you delete it. Deleting your account permanently removes your profile, receipts and photos; you can also delete only your receipts. Deleted data leaves our live systems immediately. Encrypted backups kept by our providers can hold a copy for up to 30 days before they are overwritten; we do not restore or use them. We keep a record of the terms you accepted only for as long as your account exists. Security attempt counters expire automatically. We email you a confirmation when your account is deleted.

7. Your rights

You can see and change your details on the Account page, download your data (a file with your details, every receipt, the text read from your photos, and the photos themselves), delete your receipts or your account, and switch product emails off, all inside the app. Depending on where you live you may also have the right to object to or restrict processing, and to complain to your data protection authority. To use any right, contact us at the address above.

8. How do we keep your data secure

Connections use HTTPS, passwords are hashed, and photos are stored privately. No system is perfectly secure, so please use a strong, unique password and keep access to your email account secure, since we use it to confirm sign-ups and reset passwords.

9. Age matters

Receipt Closet is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Cookies and similar technologies

We set one essential cookie that keeps you signed in, and we tell you about it in a short notice the first time you visit. Your settings and mileage log are saved to your account, like your receipts. We use no advertising or analytics cookies, so there are no optional cookies to accept or decline.

11. Note for California residents

We do not sell your personal information or share it for cross-context behavioral advertising. California residents can request to know, correct or delete their personal information, and we will not treat you differently for doing so. Use the in-app tools or contact us above.