Effective 25 September 2026
CrehzTracker is an expense and mileage tracker for self-employed people. This policy explains what it collects, why, and who else sees it.
Questions: info@crehztracker.com
When you sign up we store your email address and the name you give during onboarding. If you use Sign in with Apple and choose to hide your email, we only ever see Apple’s private relay address.
Everything you enter or import:
This is the point of the app; without it there is nothing to show you.
@in.crehztracker.com address. We store the sender address, the subject line, the attachment, and the vendor and amount read from it.If you turn on Record drives automatically, the app uses your location to measure how far you drive.
Be aware that the start and end points of your regular journeys can identify where you live and work.
We count how many assistant requests your account makes each hour, to enforce rate limits. No content of those requests is stored in that count.
We do not sell data. We do not use it for advertising. We do not track you across other apps or websites. These are the services the app depends on:
| Service | What reaches them | Why |
|---|---|---|
| Supabase | Everything listed above — it is where the database, sign-in and receipt storage live | Hosting |
| Anthropic | The text of receipts being read; the name of a shop you have no history with, together with your category names; and your questions to the assistant along with your complete ledger — every expense, income entry, drive and payee, with their dates, amounts, names and notes | Reading receipts, suggesting a category, answering questions |
| OpenAI | If you turn the assistant’s voice on, the text of each reply is sent to be spoken — never a recording of you. If you ask for a logo, the business name and description you type, and the sample picture if you attach one | Speaking replies, drawing a logo |
| Postmark | Sign-in code emails, and receipts you forward | Sending and receiving mail |
| Apple | Sign in with Apple; coordinates sent to the geocoder to name a drive’s endpoints; speech, where on-device recognition is unavailable | Sign-in, place names, dictation |
| European Central Bank (via Frankfurter) | Nothing personal — only a currency pair and a date | Exchange rates |
On the assistant specifically: when you ask it a question, your entire ledger is sent to Anthropic along with the question — every expense, income entry, drive and payee, including dates, amounts, vendor and payee names, and any notes you have written. It is sent on every question, not only the first, because the assistant answers out of your books rather than looking things up in them. It is not used to train anyone’s models, and it is not kept as a profile of you. When you scan a receipt, its image or text is sent to Anthropic to be read.
On naming a category for a shop: when an expense arrives from a tap or a Shortcut for a shop you have never filed before, the shop’s name and the names of your categories are sent to Anthropic so it can pick one. Nothing else goes with it — not the amount, not the date, not your ledger. It happens once per shop, ever: the answer becomes that expense’s category, and from then on the app reuses what you chose rather than asking again. If you name the category yourself in the Shortcut, nothing is sent at all.
The app asks first. Nothing is sent to Anthropic or OpenAI until you agree, on a screen in the app that names both companies and lists what each would receive. It appears the first time you use a feature that needs one of them — scanning, dictating or writing a note, asking the assistant, choosing one of its voices, or asking for a logo. If you choose Not now, the app keeps working: a scanned receipt keeps its photo and you fill in the details by hand, and nothing is sent.
Your answer is stored on your account, not just on your phone, so our server honours it too: a receipt you forward by email is only read by Anthropic if you have agreed. If you have not, it is still filed, unread, for you to fill in.
You can withdraw at any time in Settings → Capture → AI features. From then on nothing further is sent to either company, on any phone signed in to your account. Every figure in the app can be typed in by hand.
The same protection, wherever your data goes. Every service in the table above receives your data only to provide its service to us. Each is bound by its own terms and data-processing commitments to protect it to a standard at least equal to this policy: they may not sell it, may not use it for advertising, and — for Anthropic and OpenAI — do not use data sent through the interfaces we use to train their models.
How long they keep it. Anthropic deletes what we send within 30 days of receiving it, unless it was flagged under their usage policy or the law requires longer. OpenAI keeps a copy for abuse monitoring for up to 30 days and no longer. We keep no copy of anything sent to either company, and no copy of their replies: what comes back is written into your books as an expense or an income entry, which you own and can delete.
Data is held on Supabase infrastructure. We keep it for as long as your account exists, because it is a financial record and you may need past years for tax.
If you record paying someone — a musician, a contractor — you are storing their name in our system. That is your record, and you are responsible for handling it appropriately. We use it only to show you your own books and to total payments for 1099 purposes.
CrehzTracker is a tool for working adults and is not directed at children. We do not knowingly collect data from anyone under 13.
Traffic between the app and our servers uses HTTPS. Your books are readable only by your account: the database enforces this itself, so a request for someone else’s rows is refused by the server rather than filtered by the app. Receipt images live in a private bucket and are reached through short-lived links issued one file at a time.
No system is perfectly secure, and we do not claim otherwise.
If this policy changes materially we will update the date at the top and note the change in the app.