On your phone
The phone reads the receipt. Local capture and saving work without an account or a signal.
Security and privacyYour receipts.
Your receipts.
Your boundaries.
Read on your phone by default. Sign in when you want a workspace. Choose who else may see it.
The app is being prepared for release. Hosting region and operational policies will be confirmed before launch.
Where a receipt goes.
In your workspace
When you choose to sign in and sync, the account keeps a private copy so you can work on the web.
Optional cloud reading
Planned for a later release. You switch it on, and the product shows when it is used. Reading copies are designed to be deleted after processing.
The platform’s security foundations.
These are the controls the product is built around. They are not a certification claim.
Row-level security
Database access follows the account, workspace role and approved client permissions. Row-level security is enabled on every table.
Private image storage
Receipt images live in private storage. An authorised request gets a signed link that expires after five minutes.
Two-step sign-in
Two-step sign-in is supported and required for staff access. Sensitive staff actions require a verified second factor.
Encryption
The hosting design requires encrypted connections and encryption at rest. The production providers and region will be confirmed before launch.
UK or EU hosting
The planned hosting region is the UK or EU. The exact region belongs in the published subprocessor list.
Owner-controlled support
Support access requires the owner’s consent. Staff access is scoped and recorded rather than an unrestricted view of receipts.
Your data,
your decisions.
Download your data, remove a client link or request deletion. Deletion removes receipt data and private images according to the published policy, rather than simply hiding them.
Read the published privacy policyShared facts are separate.
Business names and addresses can improve the supplier list. Your receipt images, totals, notes and spending remain private.
Planned benchmarks use anonymised groups of at least 20 workspaces, with a choice to opt out. Client viewing does not keep an offline copy on the accountant’s phone.
Report a security concern
Tell us privately.
Send a description and the steps to reproduce it. Please avoid accessing anyone else’s data or including receipt contents.
Email a security report
A formal disclosure policy and response commitment will be published before launch.
General information as at 5 October 2026. This page describes the product’s design. The published privacy policy, terms and data processing agreement are the documents that apply.