← Back to Traceipt

Privacy Policy

Last updated: 20 September 2026

Traceipt ("Traceipt", "we", "us", or "our") is operated by Traceipt Pte. Ltd. (UEN 202633811N), a company incorporated in Singapore. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Traceipt mobile application and related services (the "Service"). We are committed to handling your personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA").

By using Traceipt, you agree to the collection and use of your information in accordance with this Policy.

1. Who we are and how to contact us

  • Data controller: Traceipt Pte. Ltd.
  • Registered address: 38A Lengkong Tiga, Singapore 417460
  • Data Protection Officer (DPO): Kabir Singh Bajaj (acting Data Protection Officer)
  • Contact for privacy matters: kabir@traceipt.co

If you have any questions about this Policy or how we handle your data, or you wish to exercise any of your rights, contact us at the address above.

2. What data we collect

We collect the following categories of personal data:

a. Account information

  • Your email address (used to create and sign in to your account).

b. Financial and spending data you provide or capture

  • Expenses and income you record (amounts, dates, merchants, categories, notes).
  • Receipt images you photograph or upload, and the data extracted from them.
  • Payment method information you choose to record: the payment type (e.g. cash, PayNow, card), and — for cards — the last 4 digits and card network. We never collect or store your full card number, expiry date, CVV, or cardholder name.
  • Optional card details you add to your wallet: card nicknames, credit/rewards limits, and an Apple Pay Device Account Number (the last 4 digits shown on Apple Pay receipts) if you choose to add it.
  • Savings goals and budgets you set.

c. Data collected automatically

  • Basic device and usage information necessary to operate the Service (e.g. app version, device type).
  • If you enable notifications, a device push token used to deliver alerts.
  • Diagnostic and crash data to help us fix problems and improve the app (see Section 7).

d. Receipts received via Traceipt-enabled merchants

  • If you save a digital receipt issued by a merchant using Traceipt's receipt technology, we receive and store that receipt's contents.

We do not intentionally collect special categories of data (such as health, race, or religion). Please do not enter such information into free-text fields.

3. How we use your data

We use your personal data to:

  • Provide the core Service — recording, organising, and displaying your expenses, income, receipts, and budgets.
  • Read your receipt photos using automated optical character recognition (OCR) to extract merchant, amount, date, and similar fields, so you don't have to type them.
  • Generate spending insights and summaries about your own financial activity.
  • Power the in-app AI assistant, which answers your questions and can help you record expenses, using your financial data as context.
  • Provide credit-card comparison and rewards features (where enabled), based on the spending data you have recorded.
  • Convert foreign-currency amounts to Singapore dollars using published exchange rates.
  • Send you notifications you have enabled (e.g. budget alerts).
  • Maintain the security, integrity, and proper functioning of the Service, and detect and prevent fraud or abuse.
  • Respond to your requests and provide customer support.
  • Comply with legal obligations.

Legal bases / consent. We rely on your consent (given when you provide data or enable a feature) and, where applicable, on our legitimate interests in operating and securing the Service, consistent with the PDPA. You may withdraw consent as described in Section 8.

4. Third-party services (data processors)

To operate Traceipt, we share limited data with trusted third-party service providers who process it on our behalf and under contract. These include:

  • Supabase — database, authentication, and file storage hosting.
  • Fly.io — application server hosting.
  • Google (Gemini) — an AI provider that processes your receipt images and spending summaries to provide OCR, insights, and the AI assistant. We send only what is necessary for the feature, and receipt image links we send are short-lived.
  • Frankfurter (European Central Bank data) — published foreign-exchange rates (we send a currency and a date, not your personal data).
  • Sentry — error and crash reporting (configured to exclude your authentication tokens and personal data).
  • Expo — push notification delivery.
  • Creatory (MoneyHero Group) — if you choose to apply for a credit card through a link in the app, you will be directed to their service; your interaction there is governed by their privacy policy.

We do not sell your personal data.

5. International transfers

Some of our service providers may process data on servers located outside Singapore. Where personal data is transferred out of Singapore, we take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA, as required by law.

Our database, authentication, and file storage (Supabase) are hosted in the Asia-Pacific (Singapore) region. Our application server (Fly.io) is hosted in Singapore. Our AI provider (Google Gemini) and error-reporting provider (Sentry) may process data on servers outside Singapore; where this occurs we take reasonable steps to ensure a comparable standard of protection as required by the PDPA.

6. How long we keep your data

We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account (see Section 8), we permanently delete your personal data, including your recorded financial data and receipt images, except where we are required to retain certain records to comply with legal obligations.

We keep your personal data only for as long as your account is active. When you delete your account, we permanently delete your personal data, including your recorded financial data and receipt images, except where we are required by law to retain specific records.

7. Data security

We take the security of your data seriously and use technical and organisational measures to protect it, including:

  • Encryption of data in transit.
  • Access controls so that your data is only accessible to your authenticated account.
  • Restricting sensitive card data to the last 4 digits (we never store full card numbers).
  • Serving receipt images only through short-lived, access-controlled links.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission as required by the PDPA.

8. Your rights and choices

Under the PDPA, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data (you can edit most of your data directly in the app).
  • Withdraw consent to our collection, use, or disclosure of your personal data.
  • Delete your account and data. You can permanently delete your account and all associated data at any time from Settings → Account → Delete Account within the app. This action is immediate and irreversible.

To exercise the access or withdrawal rights, contact us at kabir@traceipt.co. We will respond within the timeframes required by the PDPA.

9. Children

Traceipt is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated Policy here with a revised "Last updated" date, and where changes are material, we will notify you within the app.

11. Contact

If you have any questions or complaints about this Policy or our handling of your personal data, please contact:

Traceipt Pte. Ltd.

Kabir Singh Bajaj, Data Protection Officer

kabir@traceipt.co

38A Lengkong Tiga, Singapore 417460

You also have the right to lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC).