Privacy Policy

Information We Collect

We collect the following types of information:

• Account information — your name and email address, collected during registration via our authentication provider.
• Financial data — expense records, categories, and receipt images that you upload to the service.
• Usage data — AI scan counts, feature usage, and general app interactions used to enforce plan limits and improve the service. This includes product analytics collected through PostHog: page views and events recording actions such as signing in, starting a receipt scan, creating an expense, or subscribing to a plan. These events are linked to your account so we can understand how the service is used, and they reference your records by internal identifier rather than by vendor name, amount, or description.
• Search terms that return no results — when a search of your own expenses finds nothing, we record the term you searched for, along with any date range or category filter that was active, so we can find and fix searches that should have worked. These records are stored in our own database, are never sent to our analytics provider, and are deleted automatically after 90 days. Searches that return results are not recorded.
• Technical data — when you use the service, our analytics and hosting providers receive standard request information such as your IP address, browser and device type, and the page that referred you.
• Payment information — billing details are collected and processed directly by Stripe. We do not store your credit card number.

How We Use Your Information

• To provide and maintain the expense tracking service.
• To process receipt images using AI-powered extraction so you can log expenses quickly.
• To process payments and manage your subscription.
• To communicate with you about your account, service updates, or support requests.
• To monitor usage for plan enforcement and service reliability.

Third-Party Services

We use the following third-party services to operate CentSense:

• Supabase — authentication and database hosting.
• Cloudinary — secure storage of uploaded receipt images.
• OpenAI — AI-powered extraction of receipt data from uploaded images. Receipt images are sent to OpenAI for processing and are subject to OpenAI's Privacy Policy.
• Stripe — payment processing and subscription billing.
• Upstash / QStash — asynchronous job queue for background processing.
• PostHog — product analytics, hosted in the United States. We send your account identifier and email address so activity can be attributed to your account, together with page views and the interaction events described above. Analytics data is subject to PostHog's Privacy Policy.

Each provider operates under its own privacy policy. We encourage you to review them.

Data Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), row-level security policies on our database, and secure authentication flows. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention & Deletion

We retain your data for as long as your account is active. Deleted expenses are soft-deleted and may be retained for a limited period before permanent removal. Records of searches that returned no results are deleted automatically once they are more than 90 days old. You may request full deletion of your account and associated data at any time by contacting us.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Export your expense data (available to eligible plan tiers via report export).

To exercise any of these rights, contact us at askcentsense@gmail.com.

Children's Privacy

CentSense is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

Contact

If you have questions about this Privacy Policy, contact us at askcentsense@gmail.com.