Privacy Policy

• Account information: email address, display name, and authentication credentials managed by our backend provider.
• Expense data: receipt photos, OCR-extracted line items, amounts, dates, categories, GST details, vendor names, and notes you enter.
• Approval data: manager email, approval action (approve/reject/resubmit), comments, timestamp, IP hash, and user agent string.
• Subscription entitlement data: we may process Google Play Billing subscription entitlement information — such as subscription product ID, subscription status, purchase timestamp, and a purchase token reference/hash — only to verify paid access to app features. We do not receive or store your card or payment details; those are handled entirely by Google Play.
• Device & diagnostic data: app version, schema version, and anonymous crash/error logs.

• To provide expense capture, report generation, and approval routing.
• To authenticate users and enforce access controls.
• To generate signed, short-lived URLs for receipt files shared with approvers.
• To maintain an audit trail of manager approval actions.
• To verify active paid entitlement for subscription-only features.
• To diagnose errors and improve reliability.

Receipt images are processed only for OCR, report generation, and approval workflows. Approval links and receipt attachments may be made available to the manager or company approver you explicitly select for a report. We do not sell your data.

Draft expenses created in the Android app remain on your device until you explicitly tap "Send for approval". We do not sync, read, or store draft content before submission.

• Receipt files are stored in a private storage bucket; access is granted only via short-lived signed URLs.
• Row-Level Security (RLS) ensures users can only access their own reports; administrators have scoped access governed by role policies.
• Manager approval links use single-use, expiring tokens.
• All data is transmitted over TLS.

We use trusted infrastructure providers strictly to operate the Service:

• Supabase / Lovable Cloud — authentication, database, secure storage, and approval workflows.
• AWS Textract — OCR processing of receipt images when the scanning feature is used.
• Google Play Billing — monthly subscription payments and entitlement verification.

We share information only:

• With managers or approvers you explicitly designate for a report (including receipt attachments).
• With the infrastructure providers listed above.
• When required by applicable law.

We do not sell your personal data.

Submitted reports, approval actions, and receipt files are retained for as long as your account is active or as required to comply with legal, accounting, and audit obligations. You may request deletion of your account and associated data at any time.

Subject to applicable law, you may request access, correction, export, or deletion of your personal data by contacting us at the address below.

The Service is not directed to children under 13, and we do not knowingly collect data from them.

We may update this Privacy Policy from time to time. Material changes will be notified within the app or via email. Continued use of the Service constitutes acceptance.

BoostingIN Technologies Private Limited
Email: info@boostingin.com