Scan Pro Receipts — Privacy Policy
Last updated: July 30, 2026
Publisher: TJ Schiller
Contact: support@tj-s.ca
1. Introduction
Scan Pro Receipts (“the App,” “we,” “us”) is an Android expense receipt app published by TJ Schiller. This Privacy Policy explains what information the App collects, how we use it, and your choices.
Summary: Your receipt data (images, OCR text, vendor names, amounts, taxes, reports, and backups) is processed on your device. We do not upload receipt content to our servers in normal use. We use anonymous Firebase/Google Cloud records only for trial and purchase management, fraud prevention, and limited app-usage statistics.
2. Information processed on your device (not uploaded)
When you use the App, the following stays on your phone or tablet unless you choose to share it (for example by emailing support or using Android’s share sheet):
- Receipt photos and PDFs
- OCR results (vendor, date, subtotal, tax, tip, total, and related fields)
- Fiscal periods, categories, comments, and report settings
- Generated PDF/CSV/image reports and local backups
- App preferences and language settings
We do not operate a cloud backup of your receipt library. You control export, backup, and deletion on your device.
3. Information sent to Firebase / Google Cloud (anonymous)
To operate the free trial, one-time purchase unlock, purchase restore, and abuse prevention, the App syncs anonymous data to Firebase (Google Cloud) using a hashed device identifier and Firebase Authentication (anonymous/custom token). We do not link this record to your name, email, or receipt content unless you contact us separately.
Identifiers
- androidIdHash — one-way hash of your device’s Android ID (not the raw Android ID)
- firebaseInstallationId — Firebase Installation ID
- Anonymous Firebase Auth user ID (same as the trial document ID)
Trial and entitlement
- Install, expiry, creation, and last-seen timestamps
- App open count
- App version
- Last UI route shown (App or paywall) and when it was recorded
Approximate location (country only)
- Install country and last-seen country — derived from IP address at sync time (country code only). We do not collect precise GPS location.
Purchase information
- Purchase type, status (for example PURCHASED), timestamp, and a Google Play purchase token reference (for restore and support)
- Payment card or bank details are not collected by us. Google Play processes payments.
Grace period (purchase flow)
Timestamps and flags related to a one-time grace window during purchase (for example intent time, expiry, and consumed flag). Used only to manage entitlement during checkout.
Play Integrity (fraud and device integrity)
When available, we may send a Play Integrity token to our server for decoding. Stored verdict fields may include integrity check time, app recognition, licensing, device integrity flags, and whether decoding failed. These are used for fraud prevention and detecting unofficial installs. They do not give us access to receipt content.
Abuse and support monitoring
In rare cases we may store counters or flags related to paywall bypass attempts or manual access review. These are anonymous and used for fraud prevention and support.
Anonymous usage statistics
To understand whether the App is genuinely used (for example after trial expiry or during access review), we store counts and timestamps only:
- Number of receipts saved in the App
- Number of reports successfully generated (PDF, CSV, or custom report)
- Last receipt saved time and last report generated time
These statistics do not include receipt images, OCR text, vendor names, amounts, report contents, or file names. They cannot be used to reconstruct your expenses.
Purposes for Firebase data
- Provide and manage the free trial and paid unlock
- Restore purchases and prevent abuse
- Monitor app integrity and unofficial installs
- Understand anonymous app usage through the counters above
- Respond to support and legal requests where applicable
We do not use this data for advertising. We do not sell your personal information.
4. Information you voluntarily send us
If you email support@tj-s.ca (or attach files), we receive whatever you choose to send (name, email address, message text, screenshots, receipt samples, logs). That information is used only to respond to your request and is not part of the anonymous Firebase trial record unless you ask us to link them.
5. Information we do NOT collect in normal use
We do not collect in normal App operation:
- Your name, postal address, or phone number (unless you email us)
- Receipt images, OCR text, or report contents on our servers
- Vendor names, amounts, taxes, or expense categories on our servers
- Precise GPS or continuous location
- Contacts, SMS, call logs, or microphone/audio
- Health, biometric, or government ID data
The App does not use in-app advertising SDKs or in-app Google Analytics.
6. Permissions
The App may request:
| Permission | Why |
|---|---|
| Camera | Capture receipt photos |
| Notifications | Optional reminders (if enabled) |
| Internet / network | Firebase trial sync, purchase verification, Play Integrity |
| Google Play Billing | One-time in-app purchase |
| Storage / media access | On older Android versions or when you pick files from storage (user-initiated) |
You can deny or revoke permissions in Android settings; some features may not work without them.
7. Third-party services
| Service | Role |
|---|---|
| Firebase / Google Cloud | Anonymous trial, purchase, integrity, and usage statistics |
| Google Play | Billing, app distribution, Play Integrity |
| Google Analytics | Used on our website only, not inside the App |
Each provider has its own privacy policy. Google Play payment processing is governed by Google’s terms.
8. Data retention
- On-device: Receipts, reports, and settings remain on your device until you delete them or uninstall the App.
- Firebase: Anonymous trial/entitlement records are retained while needed for trial management, purchase restore, fraud prevention, and support. You may request deletion (see Section 9).
- Support email: We retain emails only as long as needed to resolve your request and for reasonable business/legal record-keeping.
9. Your choices and deletion requests
On-device deletion: Delete receipts, periods, or backups in the App, or uninstall the App to remove local data.
Firebase record deletion: Email support@tj-s.ca with subject line Data Deletion Request. Include enough detail to identify your request (for example the email you used to contact us, approximate install date, and country). We will delete or anonymize the Firebase trial record associated with your device where reasonably possible. Deletion does not remove data you already exported or emailed to us unless you ask separately.
We will respond within a reasonable time (typically within 30 days).
10. Security
We use industry-standard practices through Firebase/Google Cloud (authentication, encrypted transport, access controls). No method of transmission or storage is 100% secure. Receipt data on your device is your responsibility to protect (device lock, backups, etc.).
11. Children’s privacy
The App is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@tj-s.ca.
12. International users
Firebase servers may be located outside your country (including the United States). By using the App, you understand that anonymous entitlement data may be processed in those locations under Google’s infrastructure and applicable law.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use of the App after changes means you accept the updated policy. Material changes may also be noted in the App or on our website where practical.
14. Contact
TJ Schiller — Scan Pro Receipts
Email: support@tj-s.ca
Data deletion requests: support@tj-s.ca (subject: Data Deletion Request)