Privacy Policy

Last updated: July 2, 2026

Kwitly ("we", "us") helps you capture, organize, and report business receipts. This page explains what data we collect, why, and how it's handled. We built Kwitly to save people time on expense admin — not to collect or sell data, and we don't.

What we collect

Account info — when you sign in with Google, we receive your name, email address, Google account ID, and profile picture. We don't receive or store your Google password.
Receipt data — the merchant, amount, currency, date, category, VAT, and any notes you enter or that our OCR extracts from a photo.
Receipt photos — images you upload are stored so you (and your accountant, if you choose to send a report) can view the original receipt.
Accountant email — if you add one in Settings, so reports can be sent on your behalf.

How your data is used

Receipt photos are briefly processed by an AI model to extract merchant, amount, date, and VAT automatically. This happens at the moment you scan a receipt.
Your data is used to build your dashboard, generate PDF/CSV reports, and — only when you tap "Send to accountant" — to email a report to the address you've set.
We do not use your data for advertising, and we do not sell or rent your data to any third party.

Where your data lives

Kwitly runs entirely on Cloudflare's infrastructure:

Expense records are stored in a Cloudflare D1 database.
Receipt photos are stored in Cloudflare R2 object storage.
Login sessions are stored in Cloudflare KV and expire automatically.
Report emails are sent via Resend, an email delivery provider, solely to deliver the report you request.

Who can see your data

Only you can see your receipts and reports through your account. Photos are served through authenticated links tied to your account — they aren't public. If you choose to send a report to your accountant, that report (and the data in it) is shared with the email address you provide.

In short: your receipts belong to you. We store them so the app works, we don't look at them, and we don't share them with anyone except where you explicitly ask us to (sending a report to your accountant).

Data retention & deletion

We keep your data for as long as your account is active, so your history stays available across devices. If you'd like your account and all associated data deleted, email us at contact@kwitlyapp.com and we'll remove it within a reasonable timeframe.

Third-party services

We rely on a small number of infrastructure providers to run Kwitly: Google (sign-in), Cloudflare (hosting, database, storage, and AI-assisted OCR), and Resend (email delivery). Each processes data only as needed to provide their service to us, under their own privacy terms.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continued use of Kwitly after a change means you accept the updated policy.

Contact

Questions about your data or this policy? Reach us at contact@kwitlyapp.com.