ReceiptTruth ("we", "us") operates the marketing website at receipttruth.com and the application at app.receipttruth.com. This policy explains what we collect and why.
1. Who we are
ReceiptTruth is a grocery delivery verification service for UK shoppers. The app is hosted at app.receipttruth.com.
2. Information we collect
- Account data: email address and Firebase authentication identifiers when you register.
- Order data: supermarket name, receipt items, prices, import source, and scan/verification results you create in the app.
- Email import: if you forward receipt emails to your personal ReceiptTruth address, we process the email content to create an order.
- Product barcodes: when you match items, barcode and product names may be stored in a shared catalogue to improve matching for all users.
- Contact form: name, email, and message if you contact us via the marketing site.
- Usage cookies: on the app, authentication and theme preference cookies. See our Cookie Policy.
3. How we use AI
We use Google Gemini (via Google GenAI) to parse receipt photos and email text, match scanned items, and identify products from photos. Receipt and item data is sent to Google for processing solely to provide these features. Do not submit sensitive personal data unrelated to your grocery order.
4. How we use your information
We use your data to operate the service: storing orders, running verification, showing your dashboard statistics, and improving barcode matching. We may publish anonymised aggregate totals (e.g. number of deliveries checked) on our website — never your personal orders.
5. Third-party services
- Google Firebase — authentication and database hosting
- Google Gemini — AI receipt parsing and item matching
- Resend — inbound receipt email and contact form delivery
- Vercel — website and application hosting
6. Data retention & deletion
Your orders remain in your account until you delete them or your account. You may delete individual orders in the app. To request full account deletion, contact us via the contact form.
7. Security
We use industry-standard practices including encrypted connections and Firebase security rules. No internet transmission is 100% secure.
8. Your rights
UK GDPR gives you rights to access, correct, or delete personal data we hold. Contact us to exercise these rights.
9. Changes
We may update this policy. Material changes will be reflected on this page.
Last updated: 25 June 2026