Privacy Policy

Effective Date: 29 Jan 2026
App: Super Even
Support Email: birthdaygirl0121@gmail.com

1) Overview (Privacy-by-Design)

We designed the App to minimize data collection:

No login/sign-up
No user profiles
No local scan history (the App clears results; nothing is retained as a history)
We do not sell personal data

However, the receipt scanning feature uses cloud AI services (OpenRouter + routed model providers), which means receipt content may be transmitted off-device for processing.

2) Scope

This policy applies to the iOS and Android App and our support communications.

3) What We Process

A) Receipt/Bill Data You Provide

When you capture or upload a receipt, we may process:

receipt image(s)
extracted text (merchant name, items, quantities, prices, taxes, totals)
your edits/corrections

Receipts may include personal data (e.g., phone numbers, loyalty IDs, partial payment info). Please avoid uploading receipts with unnecessary sensitive information where possible.

B) Names/Labels and Assignments

If you enter names/labels and assign items, we process those inputs to generate the split summary.

C) Subscription Status (No Card Data)

Apple/Google process payments. We may receive limited purchase/subscription status signals (e.g., active/expired) from the store.

D) Technical/Operational Data (Minimal)

To operate and secure the service, we or our infrastructure providers may process limited technical data such as:

request timestamps, rate-limiting signals, and security logs
device/app version (if included in network headers)
network diagnostics

We do not use this to build an advertising profile.

4) What We Do NOT Collect

We do not collect (as part of normal operation):

account credentials (no login)
your contacts list
precise GPS location
biometric identifiers
advertising identifiers for targeted ads (unless you add ad SDKs—if you do, you must update this policy)

5) How We Use Data

We process data to:

extract and structure receipt information
calculate bill splits and generate exportable results
provide customer support if you contact us
maintain security, prevent abuse, and ensure reliability

We do not sell personal information.

6) AI Processing (OpenRouter + Model Providers)

6.1 OpenRouter routing and providers

We use OpenRouter to send receipt content to LLMs for structuring/interpretation. OpenRouter may route to different underlying model providers, and those providers may have different retention policies.

6.2 Data sent for processing

Depending on how your build is implemented, we may transmit:

receipt text (e.g., OCR output), and/or
receipt images (or image-derived content),
prompts/instructions necessary to generate structured output.

6.3 OpenRouter data collection and retention posture (important)

OpenRouter states it stores metadata about requests (e.g., token counts, latency) and not necessarily the prompt/response contents by default.
OpenRouter also documents that providers have their own retention policies and that users can choose providers/endpoints based on retention needs.
OpenRouter offers a Zero Data Retention (ZDR) mode/setting that routes only to endpoints that do not retain data.

Important limitation: Because routing can involve multiple providers, and because retention depends on configuration and provider policies, we cannot guarantee how long a third-party processor retains data in all cases. We aim to minimize retention and use privacy-preserving settings where available.

7) Storage & Retention (Your “nothing saved” claim, made accurate)

7.1 On your device (local)

The App does not keep a scan history. Results are intended to be temporary and are cleared. If you want to remove any residual app data, you can uninstall the App or clear storage via OS settings.

7.2 On our servers

We do not provide accounts and do not store your receipts or extracted items as a user history on our servers.

We may temporarily process receipt content to provide the feature (for example, transient buffering in memory, short-lived processing queues, or short-term error logs strictly necessary for security and reliability). We aim to minimize and avoid retention of receipt content.

7.3 On third-party processors

Receipt data you submit may be processed by OpenRouter and the routed model provider(s). Their retention may vary by provider and settings.

8) Sharing

We share data only:

with processors needed to provide the scanning feature (OpenRouter and model providers),
with infrastructure providers (hosting, security) as needed to run the service,
if required by law or to protect rights/safety/security.

We do not sell personal information.

9) Security

We use reasonable safeguards (such as encryption in transit where applicable and access controls) designed to protect information. No method of transmission or storage is completely secure.

10) International Transfers

Because the App is offered worldwide and uses global providers, your data may be processed in countries other than where you live (including India and wherever our processors operate).

11) Your Privacy Rights (Region-Specific)

11.1 India (DPDP Act 2023)

If DPDP applies, you may have rights such as access to information about personal data, correction/erasure, grievance redressal, and nomination.
To submit a request, contact: [support@email.com].
Because we do not keep user accounts and aim not to retain receipt content, we may have limited ability to retrieve or delete data that we do not store.

11.2 EEA/UK/Switzerland (GDPR/UK GDPR)

If you are in the EEA/UK/Switzerland, you may have rights including access, correction, deletion, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

Lawful bases: We process data to provide the service you request (performance of a contract / providing the App’s core function), and for legitimate interests (security, abuse prevention, reliability). Where required, we rely on consent (e.g., device permissions), which you can withdraw by disabling permissions or stopping use.

11.3 California (CCPA/CPRA)

If you are a California resident, you may have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” (as defined by law).

We do not sell personal information and we do not share it for cross-context behavioral advertising.

To submit a request: email [support@email.com] with subject “California Privacy Request”. We may request information to verify your request. If we don’t store data, we may not be able to retrieve it.

12) Children’s Privacy

The App is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact birthdaygirl0121@gmail.com and we will take reasonable steps to delete it if we have it.

13) Third-Party Links and Sharing Targets

If you share an exported result via messaging/social/email apps, those third parties process the shared content under their own policies. We do not control them.

14) Changes to This Policy

We may update this Privacy Policy. We will update the Effective Date and make the updated policy available in the App and/or store listing.

15) Contact / Grievance

Support: birthdaygirl0121@gmail.com