Privacy Policy

Last updated: February 26, 2026

Dynamic Dev Solutions LLC ("we," "our," or "us") operates the Purchy mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Purchy, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address (via Google OAuth or email sign-up)
  • Profile information provided by Google if you sign in with Google

Receipt and Purchase Data

To provide our core service, we collect:

  • Email receipts: When you connect your Gmail account, we access order confirmation and receipt emails to automatically extract purchase details. We only read emails that match receipt/order patterns — we do not read your entire inbox.
  • Camera and photo data: When you scan receipts using your device camera or upload photos, we process the images to extract purchase information. Images may be temporarily stored for processing.
  • Purchase history: Items purchased, prices, dates, store names, return deadlines, warranty information, and other transaction details extracted from your receipts.

Usage Data

We automatically collect certain information about how you interact with the Service, including device type, operating system, app version, and general usage patterns.

Push Notification Tokens

If you enable push notifications, we collect your device token to send you return deadline alerts, price drop notifications, and other Service-related messages.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Extract and organize purchase data from receipts
  • Send return deadline reminders and price drop alerts
  • Track warranty expiration dates
  • Monitor subscription renewals
  • Process payments and manage subscriptions
  • Respond to support requests
  • Comply with legal obligations

3. AI-Powered Processing & Third-Party AI Disclosure

Purchy uses artificial intelligence to extract, categorize, and analyze information from your receipts and purchase data. By using Purchy, you acknowledge that your receipt data is processed by third-party AI services as described below.

AI Providers We Use

  • OpenAI (GPT-4o-mini): Receipt text extraction, item categorization, and purchase data structuring. Receipt content is sent to OpenAI's API for processing. OpenAI processes this data according to their API data usage policies and does not use API data to train their models.
  • Anthropic (Claude): Receipt validation, data extraction verification, and intelligent categorization. Receipt content is sent to Anthropic's API for processing. Anthropic processes this data according to their privacy policy and does not train on API inputs or outputs.

What Data Is Sent to AI Providers

  • Receipt text, images, or email content you upload or connect
  • Merchant names, item descriptions, prices, and dates from your receipts
  • No account credentials, passwords, or payment method details are ever sent to AI providers

AI Accuracy Disclaimer

AI-generated results may contain errors. Information extracted by AI — including item names, prices, return deadlines, warranty dates, and merchant details — should be verified by you before making any financial decisions or taking action based on this data. Purchy provides AI-assisted extraction as a convenience and does not guarantee the accuracy of AI-processed information.

Your Control Over AI Processing

AI processing is a core part of how Purchy extracts receipt data. If you do not wish your receipt data to be processed by third-party AI services, you may choose not to upload receipts or connect your email. You may delete your account and all associated data at any time.

4. Other Third-Party Services

In addition to the AI providers listed above, we use the following third-party services:

  • Supabase: Cloud database and authentication. Your account data and purchase history are stored securely on Supabase infrastructure.
  • Google OAuth: If you sign in with Google or connect Gmail, authentication is handled through Google's OAuth 2.0 service. We request only the permissions necessary to read receipt emails.
  • Expo: Push notification delivery for mobile devices.
  • RevenueCat: Subscription management and in-app purchase processing. RevenueCat may collect anonymized purchase data for analytics.

5. Data Storage and Security

Your data is stored on Supabase's cloud infrastructure with encryption at rest and in transit. We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Cookies and Tracking

Purchy uses minimal cookies, limited to authentication and session management. We do not use third-party advertising cookies or cross-site tracking technologies.

8. Your Rights

All Users

  • Delete your account: You can delete your account and all associated data from the app settings or by contacting us.
  • Export your data: You can request a copy of your data by contacting us at services@purchy.app.
  • Disconnect Gmail: You can revoke Gmail access at any time from the app settings or your Google account.

Rights Under GDPR (EEA/UK Residents)

If you are in the European Economic Area or United Kingdom, you have additional rights including:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

Our legal basis for processing is your consent (which you may withdraw at any time) and the performance of our contract with you.

Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information — we do not sell your personal information
  • Non-discrimination for exercising your privacy rights

9. Children's Privacy

Purchy is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or sending you a notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Dynamic Dev Solutions LLC
Email: services@purchy.app