1) Who we are and how to contact us

Operator: SmartCheck
Contact email: support@thesmartcheck.app
Website: thesmartcheck.app

If you have questions or want to request deletion of your data, contact us using the email above.

2) Information we collect

A) Account and profile information

When you create an account or sign in, we collect:

• Email address
• Name (profile display name)
• Profile photo (if available through Google Sign-In or provided by you)
• Password (for email/password accounts). We do not store your raw password; it is stored using secure hashing.
• Phone number (optional) if you choose to add it in your profile (currently visible only to you inside the app).

We use this information to create and manage your account and display the correct identity in collaborative screens.

B) Content you provide in the app (user-generated content)

We collect and store the content you create or upload while using SmartCheck, such as:

• Tables and table metadata
• Participants/members added to a table
• Expense items and related details (item names, quantities, prices, taxes/tips, assignments, and statuses)
• Actions performed in a table (join/leave, assign/unassign items, set member states, close/reopen tables)

C) Receipt images (photos you upload)

SmartCheck allows you to upload receipt images to help build tables faster.

• Receipt images are stored in cloud storage (AWS S3).
• We generate secure, time-limited links (presigned URLs) to upload and access receipt images.
• Our backend may download and process receipt images to extract structured information (such as item lists and totals) to create or update your Table.

Important: Receipts may contain personal or transaction-related details depending on the merchant (for example, order identifiers or partial payment details). We treat receipt images as user content stored within the Tables you choose to share.

D) Usage analytics (Firebase Analytics)

We collect app usage and interaction data to understand how the app is used and improve features. This may include:

• Screens viewed and feature usage (e.g., receipt flow funnel events)
• App and device technical info (e.g., app version)
• Pseudonymous identifiers used by analytics SDKs

We do not intentionally log receipt images, full table/item text, or your raw email address as analytics event parameters. We use hashed identifiers for tables where applicable.

E) Diagnostics and crash information (Firebase Crashlytics)

If the app crashes or experiences errors, we may collect diagnostics such as:

• Crash reports and stack traces
• Device/app technical info related to the crash
• Timestamps and stability signals

We avoid adding personal content (such as emails or receipt text) to crash logs.

F) Device and network information

We may collect technical data needed to operate the app securely and reliably, such as:

• IP address and request metadata (typically logged by servers as part of normal operation)
• Timestamps and basic security-related logs

3) How we use your information

We use the information we collect to:

• Provide core functionality (authentication, syncing, receipt upload/processing, table collaboration)
• Operate and maintain the service (reliability, performance, bug fixes)
• Improve the product (feature iteration and UX improvements)
• Ensure security, prevent abuse, and troubleshoot issues
• Respond to support requests

4) How we share information

We do not sell your personal information.

We may share data with service providers that help us operate SmartCheck, such as:

• Google/Firebase (Analytics and Crashlytics)
• AWS (receipt image storage and delivery)
• Infrastructure/hosting providers used for backend services

These providers process data on our behalf to provide their services. We may also disclose information if required by law or to protect rights, safety, and security.

5) Data retention

We keep data as long as needed to provide the service and operate SmartCheck:

• Account and Table data: retained while your account is active, and until you delete your account (see Section 8).
• Receipt images: retained as part of shared Tables so participants can reference them.
• Server logs: We keep limited server logs for security and troubleshooting. We do not log request or response bodies in production.
• Crash reports and analytics: retained according to the retention settings of our analytics/crash providers and our internal operational needs.

Backups: Our hosting providers may maintain routine backups for reliability and disaster recovery. Deleted data may persist in backups until those backups are rotated or overwritten.

6) Security

We use reasonable technical and organizational measures designed to protect information, including encryption in transit (HTTPS/TLS) and access controls. No method of transmission or storage is 100% secure.

7) Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing.

8) Account and data deletion

You can delete your SmartCheck account in two ways:

• In the app: Settings → Delete account
• On the web: thesmartcheck.app/delete-account

What deletion does:

• Your account is disabled immediately and you can no longer sign in.
• Personal profile data is deleted or anonymized (such as name, email, phone, and profile photo).
• Shared Tables, items, and receipt images may remain available to other participants in those Tables. In those shared records, you will appear as an anonymous/deleted user.

This approach preserves shared table history for other members while removing your personal identity and access.

9) Children’s privacy

SmartCheck is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

10) International data transfers

Our service providers and infrastructure may process data in countries other than where you live. We take steps designed to ensure appropriate protections are in place.

11) Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, if changes are significant, we may provide additional notice.