Privacy policy

The short version

Filed stores pictures of your receipts and the details read from them so you can keep, check, search and export them. The pictures go to an AI service to be read, and nowhere else. We don't sell your data, we don't show ads, and when you delete a receipt or your account it's gone.

What we collect

• Your account: your name, email address and a scrambled (hashed) version of your password. We never see the password itself.
• Your receipts: the pictures and PDFs you add, and the details read from them or typed by you: supplier, ABN, date, amounts, GST, category, payment type, notes. Photos are re-saved when uploaded, which removes location data a phone camera may have put in the file.
• Usage: how many receipts you've added each day (to spot runaway use), when you agreed to AI reading, and ordinary server logs (the address your connection came from, the pages requested, errors). Logs are kept for a short time to keep the service running and to catch abuse.

We don't ask for your accounting software password. When sync arrives, connecting to Xero, QuickBooks or MYOB will be done through their own secure sign-in, and the keys they give us will be kept on our server only, never in the app on your phone.

Payments

Card payments are handled by Stripe. Your card number goes to Stripe, never to us; we keep only Stripe's reference for your subscription and whether it's paid. Stripe's own privacy policy covers what they hold.

Reading receipts with AI

To read a receipt, the picture (or the text of a PDF) is sent to OpenAI's API service, which returns the supplier, date, total, GST and so on. Under OpenAI's terms for its API, content sent this way is not used to train its models, and is retained by OpenAI only briefly for abuse monitoring. We ask for your agreement before the first receipt is sent, and you can stop using the service at any time. No other outside company receives your receipts.

Where it's kept

On a server located in Australia. Data is encrypted in transit (HTTPS) and stored on disk accessible only to the service. Backups are taken regularly so a hardware failure doesn't lose your records.

How long we keep it

Receipts are tax records, and Australian law generally asks you to keep them for five years, so we keep every receipt until you delete it. Deleting a receipt removes the picture and its details straight away. Deleting your account (from the account menu in the app) removes everything: your receipts, pictures, categories and account details. There's no waiting period and no "deactivated" state.

Who can see it

You. Each receipt belongs to one account and is only ever shown to that account. The people who run Filed can access the server to fix problems, and don't look at receipts unless you ask us to help with a specific one.

Cookies

One cookie, to keep you signed in. No tracking or advertising cookies.

Your rights

You can see and change everything we hold about you from inside the app, export it all as a spreadsheet at any time, and delete it yourself. If something isn't right, or you'd like a copy of your data in another form, email privacy@filedreceipt.com. We follow the Australian Privacy Principles and the Notifiable Data Breaches scheme: if a breach ever puts your information at risk we'll tell you and the regulator promptly.

Changes

If this policy changes in a way that matters, we'll say so in the app before it takes effect. Small wording fixes just update the date at the top.

Questions about any of this: privacy@filedreceipt.com.