Privacy Policy

1. Introduction

Qendo ("we", "our", or "us") operates the Qendo mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Qendo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (stored securely as a hash). If you sign in with Google, we receive your name and email from Google.

Receipt Data: When you scan a receipt, the image is sent to a third-party optical character recognition (OCR) service to read its text, and that text is then sent to a third-party AI service to identify the merchant, amount, currency, date, and category. Section 5 names every service involved. Scanning is optional: the app asks for your consent before the first scan, you can decline and enter expenses manually instead, and you can withdraw consent at any time under Settings → AI receipt scanning. The original receipt image is stored securely.

Forwarded Emails: Each workspace has a private forwarding address. If you forward or BCC an email to it, we receive that message and process its PDF and image attachments through the same OCR and AI pipeline described above, then save the result as a receipt. We use the attachments and the recipient address only to create your receipts; we do not read the message for any other purpose, and we do not store the message body or use it for marketing. Anyone who knows your forwarding address can add receipts to your workspace, so treat it as private — you can view it in the dashboard under Receipts.

Mileage & Location Data: If you record a trip, your device uses its location to measure the distance travelled, and the distance itself is calculated on your device. When you save the trip we store the route you drove and the coordinates of its start and end points, alongside the distance, duration, and place names. We keep the route because it is the record supporting the distance claimed — a tracked trip is evidence rather than an assertion — and it is what lets the trip be drawn on a map. It is stored with your trip, never shared with third parties, and never used for advertising or to track you. Location is requested as "while using the app"; recording continues in the background only for a trip you started yourself, and stops when you stop it. Trips you type in by hand, or create by looking up a route between two named places, use no location data at all. Deleting a trip deletes its route with it.

Usage Data: We collect information about how you use the Service, including workspace activity, device type, and app version. We do not use analytics, advertising, or tracking SDKs, and we do not track you across other apps or websites.

Push Notification Tokens: If you enable push notifications, we store your device token to send you relevant notifications such as workspace invitations and budget alerts.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and extract data from your receipt images
• Calculate spending statistics and currency conversions
• Send push notifications you have opted in to
• Manage your account and workspace memberships
• Process subscription payments through Stripe
• Respond to your support requests
• Detect and prevent fraud or abuse

4. Data Storage & Security

Your data is stored on secure servers with industry-standard encryption in transit (TLS) and at rest. Receipt images are stored in Cloudflare R2 object storage with access controls. Passwords are hashed using bcrypt and are never stored in plain text.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Third-Party Services

We use the following third-party services to operate Qendo. Those marked (receives receipt data) are sent the contents of the receipts you scan:

• Google Cloud Vision API — reads the text in your receipt image (OCR). (receives receipt data: the image)
• Google Gemini — turns that text into merchant, amount, date, and category. (receives receipt data: the extracted text)
• Anthropic Claude — performs the same categorization as a fallback when Gemini is unavailable. (receives receipt data: the extracted text)
• Cloudflare R2 — secure storage of your receipt images. (receives receipt data: the image)
• Stripe — payment processing (we never store your card details)
• SendGrid — sending account emails such as verification codes and password resets, and receiving the messages you forward to your receipt address
• Expo Push Notifications — delivering push notifications
• Google Sign-In and Apple Sign-In — optional authentication, if you choose to use them

These services act as processors on our behalf, strictly to provide the features described above. Each has its own privacy policy governing the use of your information, and we encourage you to review them.

Receipt data is only sent to the OCR and AI services listed above when you use receipt scanning. If you decline or turn off AI receipt scanning, expenses you enter manually are never sent to them.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following cases:

• Workspace members: If you share a workspace, other members with appropriate roles may see receipt data within that workspace.
• Service providers: With third-party services listed above, strictly to provide the Service.
• Legal requirements: If required by law, regulation, or legal process.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and receipt images within 30 days, except where we are legally required to retain it.

8. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to processing of your personal data
• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at privacy@qendo.ai.

9. Children's Privacy

Qendo is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: privacy@qendo.ai