Anzar Narmawala (“we”, “us”) operates the BillSnap app (“the App”), published on the App Store and Google Play. BillSnap reads photos of bills, receipts and invoices and saves the details (seller, date, amounts, tax lines and line items) so you can keep and export them. This policy explains what data the App collects, how it is used, and who it is shared with.
Your bills stay on your phone
- Storage. The bills you save, and their details, are kept in an encrypted database on your phone. Our servers never store bill contents.
- Backups. You can make a backup file protected by a passphrase you choose. The file is encrypted on your phone before it is saved to wherever you pick (for example your Files app or a cloud drive you use). We never receive your passphrase or your backup. If you lose your phone without a backup, or forget the passphrase, we cannot recover your bills.
- Recovery key. So your account and remaining scans survive a reinstall, the App keeps a small random secret in your phone's secure storage (the iOS Keychain, or Google's Block Store on Android). It holds no bill data.
- Exports. When you export to PDF or Excel, or share a file, it goes where you send it; that is outside our control.
Scanning: what is sent, and to whom
- What is sent. When you scan, only the area of the photo you keep in the crop step is sent, over an encrypted connection, to our server and from there to Anthropic, the AI provider that reads it. Your phone's region is sent with it so the bill is read with the right country's tax rules.
- What we keep. Our server passes the photo through and returns the extracted details to your phone. It does not store the photo or the details.
- What Anthropic keeps. Anthropic processes the photo as our service provider under its commercial terms. It keeps API inputs and outputs for a limited period (at the time of writing, up to 30 days, longer only where needed to investigate misuse) and then deletes them. Under those terms it does not use them to train its models. See Anthropic's privacy policy.
- Camera and photos. The App asks for camera and photo library access only so you can take or pick the photo you want to scan. It does not look through your photos in the background.
What our servers keep
Our servers run on Microsoft Azure in India. They hold the minimum needed to run your account, under a random anonymous ID and a short support ID (shown in Settings, so you can quote it when contacting us):
- Plan and usage: Free or Pro, and how many scans you have used this month.
- Scan status: whether a recent scan succeeded, failed or was refunded. These records are deleted 24 hours after the scan finishes.
- Device and session records: a random install ID created by the App, your platform (iOS or Android) and app version, and the result of the device check below.
- Security counters: to stop abuse we count requests per IP address and per install. IP addresses are stored only as one-way hashes, and the counters are deleted after at most 60 days.
- Service logs: our servers log requests and errors (for example timings and error codes, with the anonymous ID) to keep the service working. These logs contain no bill contents.
Device check and email sign-in
- Device check. To prevent abuse of free scans, the App proves it is a genuine copy on a real device using Apple App Attest on iOS or Google Play Integrity on Android. Apple or Google provide that check; it does not identify you.
- Email sign-in. Only if your phone cannot pass the device check, the App asks for your email address and sends you a one-time code. The code is sent through Azure Communication Services (Microsoft), which acts as our processor. We store only a one-way hash of your address, so we cannot read it back; the code itself is stored only as a hash and expires after 10 minutes.
Subscriptions
BillSnap Pro is billed through the Apple App Store or Google Play. We never receive your payment details. Subscription status is managed through RevenueCat, which acts as our processor. RevenueCat and the store process your anonymous BillSnap ID, your purchase and renewal status, and basic device and store information (platform, app version, country or storefront) needed for pricing. RevenueCat's privacy policy is at revenuecat.com/privacy.
Crash reports
If the App crashes or hits an error, it sends a crash report to Sentry, our crash-reporting processor. Reports contain the error, the app and OS version and the device model. Before a report leaves the phone, the App removes email addresses, tokens, tax numbers, order numbers and other ID-like text. Reports contain no bill content, no screenshots, and no BillSnap user or support ID. We have told Sentry not to store IP addresses.
What we don't do
- No advertising, and no advertising or analytics SDKs.
- No tracking across other apps or websites.
- We do not sell or rent your data, or share it with anyone except the service providers named above, and then only to run the App.
Where your data is processed
Our servers are in India. Anthropic, RevenueCat and Sentry may process the data described above in the United States or other countries, under their contracts with us. Bills stored on your phone do not leave it unless you back them up or export them.
Your rights and deleting your data
- Delete in the App. Settings → Delete my data erases everything our servers hold about you: plan, usage, device and session records, the email mapping if any, and your RevenueCat record. You can choose to delete the bills on your phone at the same time. An active subscription must be cancelled separately in the App Store or Google Play.
- Records of support actions. If we have taken a support action on your account (for example granting scans), a record of that action is kept with your support ID for up to 13 months for accountability. It contains nothing else about you.
- Other requests. You can ask us about the data we hold, ask us to correct or erase it, or withdraw consent by contacting us below. Withdrawing consent means you can no longer scan, because scanning needs the processing described above; the bills already on your phone stay available.
- Uninstalling removes the bills and database from your phone. The recovery key in your phone's secure storage may remain until you delete your data from Settings or reset the phone.
Tax figures
The App reads bills automatically and can make mistakes. Check GSTIN and tax amounts against the original bill before claiming input tax credit or filing returns.
Children's privacy
The App is not directed at children under 18, and we do not knowingly collect personal data from children.
Changes to this policy
If we change what data the App collects or how it is used, we will update this page, change the effective date above, and ask for your consent again in the App before your next scan.
Contact and grievance officer
For questions, data requests or complaints, write to our grievance officer, Anzar Narmawala, at narmawalaanzar@gmail.com. Please include your support ID from Settings. We respond within 7 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.