Privacy policy

Who we are

SlipSprout is made by Rivoro Studio Ltd, a company registered in England and Wales (company number 17226090). Our registered office is Unit A, 82 James Carter Road, Bury St Edmunds, IP28 7DE.

We are the controller of the personal data described here, and we're registered with the Information Commissioner's Office under number ZC268679. For anything about your data, email support@slipsprout.com or write to us at the address above.

What this policy covers

The SlipSprout app for iPhone and Android, and this website, slipsprout.com. Apple and the other companies named below have their own privacy policies for what they do on their own services.

On your phone

You can use SlipSprout without an account. The photos you take, and the details read from them, are kept in the app's own storage on your phone. None of it is sent to us until you sign in.

Signing out removes your receipts from the phone. Any that haven't been backed up are lost, and the app warns you before that happens. While you're signed in, your sign-in session is kept in the iPhone Keychain, or in Android's Keystore-backed secure storage.

How receipts are read

SlipSprout reads the text on a receipt on your phone, using Apple's Vision framework on iPhone and Google's ML Kit text recognition on Android. Both run on the device, so your photo isn't sent to us, to Apple, to Google or to anyone else to be read. The app then picks out the shop, date, total, VAT and VAT number from that text, with a confidence score for each.

On Android, Google says ML Kit may send Google general information about how the feature is performing. That doesn't include your photos or the text on them.

When you sign in

Signing in is optional, and it's what turns on backup and syncing between your devices. You can sign in with Apple, or with your email address and a six digit code we email to you. There are no passwords, and with Sign in with Apple we never see your Apple ID password.

Your account

• Your email address. If you use Sign in with Apple and hide your email, this is the relay address Apple gives us.
• Your name, if Apple shares it the first time you sign in with Apple.
• A user ID created by our sign-in system.

Your receipts

Once you're signed in, the app backs up each receipt to our servers. For each one we hold:

• the original photo, and a straightened copy where the app made one;
• the shop, date, total, VAT, VAT number and currency, and any note you add;
• the text read from the receipt, and how sure the app was of each detail;
• when you took it, whether it needs checking, which workspace it's in and who added it;
• a checksum of the photo (a short fingerprint of the file) so the same photo isn't stored twice.

Your workspaces

We keep each workspace's name, type (personal, self-employed or company), currency and time zone, who belongs to it and in what role. We also log changes to receipts, workspaces and memberships: who made each change, what changed and when.

Who can see your receipts

In a personal or self-employed workspace, only you. In a company workspace, employees see the receipts they add themselves, and the workspace's owners, admins and finance managers see every receipt in it.

Rules in our database check every request against those permissions, and receipt photos are stored privately, so a photo opens only for someone allowed to see that receipt. Nobody at Rivoro Studio looks through your receipts. We would only open your data to help with a problem you've asked us about, to keep the service secure, or when the law requires it.

What the app doesn't do

• There's no advertising in SlipSprout, and no advertising or analytics companies' code in the app.
• It doesn't track you across other companies' apps or websites.
• It doesn't use your location. The camera is used only to photograph receipts, and the app never records sound.
• We don't sell your data.

If you've allowed it in your phone's settings, Apple or Google may pass us crash reports and app performance figures. Those come from Apple or Google and don't contain your receipts.

Companies that work for us

These companies process personal data on our behalf, under contracts that limit them to doing what we ask.

• Supabase runs our database, sign-in system and file storage, so it holds your account and your backed up receipts. It keeps them on servers in London.
• Amazon Web Services sends our emails through Amazon SES, starting with the sign-in codes. It handles your email address and the email itself, and sends from the United States.
• Apple provides Sign in with Apple.
• Expo (650 Industries) delivers app updates. When the app opens, it asks Expo's update service whether there's a newer version. That request carries your IP address, the type of phone system, the app's version and a random ID for this installation of the app, and nothing about you or your receipts.
• Hetzner Online hosts this website in the European Union.
• 20i hosts our email inboxes in the UK, so emails you send us are stored there.

Data sent outside the UK

Supabase, Amazon Web Services and Expo are US companies, and Amazon SES sends our emails from the United States. When personal data leaves the UK we rely on the safeguards UK law requires: the UK Extension to the EU-US Data Privacy Framework where a provider is certified under it, or the standard contractual clauses with the UK Addendum in the provider's data processing terms.

Our legal reasons

• To provide the app and the account you asked for, which is a contract between us: signing you in, sending sign-in codes, and backing up and syncing your receipts.
• Our legitimate interests: keeping the service secure, preventing abuse, fixing faults, and keeping the change log so a workspace's records can be relied on.
• Legal obligations, where the law requires us to keep or hand over information.

This website and email

slipsprout.com uses no cookies, analytics or advertising, and its fonts and pictures come from our own server. Like most web servers, ours records the IP address, browser, page asked for and time of each visit. We use those logs to keep the site running and secure, and they're deleted after 14 days.

When you email us, we keep your email and address for as long as we need them to help you and deal with any follow up.

How long we keep things

• Receipts on your phone stay until you delete them or sign out.
• Your account stays until you delete it.
• Backed up receipts stay while their workspace exists. When you delete a backed up receipt it disappears from all your devices, but we keep the stored copy until the end of the workspace's record keeping period, which is six years by default. Businesses often need old receipts as evidence, and six years covers HMRC's record keeping periods. After that the copy is deleted.
• When you delete your account, we delete it straight away, together with every workspace you own that has no other members and all the receipts and photos in them. Receipts you added to a company workspace stay with that company.

Deleted data can stay in our hosting provider's backups for a short time, until those backups expire.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct it or delete it, object to or limit how we use it, and ask for the data you gave us in a format you can take elsewhere. Email support@slipsprout.com from the address on your account and we'll reply within one month.

Some of this you can do yourself in the app: correct a receipt's details, export a PDF of your receipts, and delete your account in Settings.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

Connections between the app and our servers are encrypted. Access to every receipt is checked by our database's own rules, receipt photos are stored privately, and once a photo is stored the app can't overwrite it.

Children

SlipSprout is for keeping business records and isn't meant for children.

Changes to this policy

We'll update this page whenever SlipSprout changes what it collects, for example before daily summary emails or paid plans arrive, and change the date at the top. If a change affects how your data is used, we'll tell you in the app or by email first.