Privacy Policy

Information you provide

• Account details — name, email address, and business details (e.g. VAT number) if you add them.
• Receipt images you capture or upload, and any edits you make to the extracted data (merchant, amount, category, VAT, date).

Information collected automatically

• Device and usage information — device type, operating system, app version, and how you interact with the app, so we can fix bugs and improve performance.

• To extract merchant, total, and VAT data from your receipts.
• To categorise spending, calculate running totals, and keep your VAT figures current.
• To maintain your account and receipt history.
• To provide customer support and respond to your requests.
• To maintain the security of the app and diagnose technical issues.

We do not sell your personal information, and we do not use your receipt data to serve you advertising.

When you scan a receipt, the image is sent to a third-party optical character recognition (OCR) / AI service to extract the merchant name, amount, VAT, and date. That provider processes the image only to return this extracted data to Sifta, under its own data processing terms with us.

Your receipt images are stored securely with our cloud storage provider so you can view your history at any time. We don't share the images themselves with anyone outside of this processing pipeline.

We use trusted third-party providers to run Sifta, including cloud hosting and storage (to store your account data and receipt images) and the OCR/AI provider described above. These providers only receive the data needed to perform their function and are contractually required to protect it.

We keep your account and receipt data for as long as your account is active, so you have a complete, searchable history. If you delete your account, we delete your personal data and receipt images within a reasonable period, except where we're required to retain records for legal, tax, or accounting purposes.

Depending on where you're located, data protection laws such as POPIA (South Africa), the GDPR (EU/UK), the CCPA (California), or similar legislation may give you the right to:

• Access the personal information we hold about you.
• Ask us to correct or update inaccurate information.
• Ask us to delete your account and associated data.
• Object to or restrict certain processing of your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at privacy@sifta.app.

We use industry-standard safeguards — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Sifta is intended for freelancers and business owners and is not directed at children. We do not knowingly collect information from anyone under 18.

We may update this policy as Sifta evolves. If we make material changes, we'll notify you in the app or by email before they take effect. The "Effective date" above reflects the most recent update.

Questions about this policy or how we handle your data? Reach us at privacy@sifta.app.