FinSnap Privacy Policy

Last updated: July 2026

FinSnap ("we", "our", "us") is a personal and small-business expense tracking application operated in Canada. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information: your email address, provided when you sign in with Google.
• Financial data you enter: transactions, amounts, categories, dates, and any receipt photos you scan.
• Payment information: if you subscribe to a paid plan, billing is handled entirely by Stripe. We never see or store your card number — we only receive your subscription status and plan.
• Usage data: how many receipts you've scanned in a billing period, so we can enforce your plan's limits.

2. How receipt photos are processed and stored

When you scan a receipt, the photo is sent to Anthropic's Claude API to extract the merchant, date, amount, and line items. We also compute a fingerprint of the image to detect accidental duplicate scans. The receipt photo is then archived in your private storage — accessible only to your account — so you retain a copy for your own records, since tax authorities such as the CRA generally require supporting documents to be kept for several years. Archived receipts are permanently deleted if you delete your account.

3. Where your data is stored

Your account and transaction data are stored with Supabase (hosted in the cloud) with access restricted to your own account. Payment processing is handled by Stripe. We do not sell your data to third parties or use it for advertising.

4. Your rights

You can request a copy of your data or ask us to delete your account and all associated data at any time from Settings, or by contacting us. Under Canadian privacy law (PIPEDA), you have the right to access, correct, or withdraw consent for the use of your personal information, subject to legal or contractual retention requirements (e.g. Stripe's own record-keeping obligations for payments already processed).

5. Cookies and local storage

FinSnap uses your browser's local storage to keep the app responsive offline and to remember your language preference. Authentication is managed via secure, signed session tokens issued by Supabase.

6. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

7. Contact

Questions about this policy? Contact us through the support link in the app.

This document is a plain-language summary provided for transparency and does not constitute formal legal advice. FinSnap recommends having this policy reviewed by a qualified lawyer before relying on it for compliance purposes.