Privacy Policy
Last updated: 6 November 2026
This policy covers the RCT iOS app (“RCT - Budget Tracker”) and the website getrct.com.
The short version:
- You do not need an account.
- Your receipts live on your phone and, if you use iCloud, in your own iCloud account.
- To read a receipt, the photo is sent to our server and to an AI model. We do not keep the photo.
- A copy of your receipt lines is stored on our server under a random ID, not your name, to make categorisation better.
- We do not sell your data and we do not show ads.
1. Who is responsible
Dániel Elek 9099 Pér, Domb utca 46., Hungary rctapp@proton.me
2. What we handle, and why
2.1 Receipts you scan, lists you type, translations
When you scan a receipt, the photo is sent to our server and to AI models that read and categorise it. When you type a list (“Add without scanning”) or translate a receipt, the text is sent the same way. We only use AI providers that do not train on what we send them.
We do not store the photo. What the AI read is not written to our logs, except briefly when reading fails, so we can fix the problem.
Why: to provide the feature you used.
2.2 Receipt lines kept to improve RCT
When you save a receipt or add an expense, a copy of each line is stored on our server: item name, price, currency, category, shop, date, the receipt’s tag and language, and a random installation ID. It does not include your photo, name or email.
Why: to train and test the models that read and categorise receipts (our legitimate interest). You can object at any time by emailing us. Kept for: as long as it is useful for that, or until you ask us to delete it.
2.3 Scan allowance and server protection
Our server counts scans and translations per installation, using random IDs stored by the app, so the free plan can work. Before a scan, the app also proves it is the genuine RCT app (Apple App Attest through Firebase App Check).
Why: to provide the free plan and prevent abuse. Kept for: as long as you use the app, or until you ask us to delete it.
2.4 Purchases
Subscriptions are sold and charged by Apple; we never see your payment details. RevenueCat tells the app whether you have Premium. It receives a random customer ID, your purchase history, and which screen led to a purchase, linked to your app analytics ID.
Why: to give you what you paid for, and to understand what leads to purchases.
2.5 Usage statistics and crash reports
We use Firebase Analytics, Crashlytics and Remote Config to see how the app is used (for example which screens are opened and whether scans succeed), to receive crash reports, and to test changes to the app. This is tied to a random ID, not your name, and includes device and app details such as model, iOS version, language and approximate country.
Why: to find bugs and improve the app. You can object by emailing us. Kept for: as long as it is useful for that.
2.6 Feedback
If you send feedback, we store your message, app and iOS version, installation ID, and your email address if you choose to give one. It is forwarded to my inbox by email.
Why: to answer you and fix what you report. Kept for: as long as it is useful for that, or until you ask us to delete it.
2.7 Shared links
If you share a receipt or a split as a link, what you shared is stored so the link can open it. Anyone with the link can see it. It is deleted after 7 days.
Why: to provide the sharing feature.
2.8 Your phone and your iCloud
Everything else you keep in RCT (budgets, limits, notes, settings and so on) stays on your phone and, if iCloud is on, in your own iCloud account, run by Apple. We cannot read either.
2.9 The website
getrct.com uses Google Analytics and our own cookies to count visits and see which channels (search, QR codes, social media) bring people to the app. Advertising features are off. You can block these cookies in your browser.
If you vote for an Android version, we store your email address (through Google Forms) so we can tell you when it exists.
Why: to understand how people find RCT, and to send you the one email you asked for. Kept for: your vote, until the Android version is announced or you ask us to delete it.
3. Service providers
| Provider | What for |
|---|---|
| Google Cloud / Firebase | Server, database, analytics, crash reports, Android vote form |
| OpenRouter and the AI providers it routes to | Reading receipts, typed lists and translations |
| RevenueCat | Subscription status |
| Apple | Payments, App Attest, iCloud |
| Cloudflare | Website and shared links |
| Resend | Forwarding feedback by email |
Some of them process data outside the EU, including in the United States.
4. Children
RCT is not meant for children under 16. If you believe a child has sent us data, contact us and we will delete it.
5. Your rights
You can ask us to access, correct, delete, restrict or export your data, and object to how we use it. Email rctapp@proton.me; we answer within one month.
We store server data under a random ID, not your name, so we cannot tell on our own which data is yours. If you can, include the shop, date and total of a few receipts you scanned so we can find it.
You can also complain to a data protection authority, in Hungary the NAIH (naih.hu), or the one where you live.
6. Changes
When we change this policy, we update the date at the top.