Privacy Policy

Heekap is built privacy-first. This policy explains what we collect and what we never do.

1. No bank linking, ever. Heekap never requests or can access your bank accounts or cards. The only data source is receipt photos you take yourself.

2. What we collect. Receipt photos, data extracted from them (merchant, date, items, prices), your account email, and preferences (language, country, budget).

3. AI processing. Your receipt photos are processed by an AI provider solely to extract data — never used to train general models, never shared with marketers.

4. Storage and security. Receipt photos live in private storage only you can access, served only via short-lived signed links. Data is encrypted in transit and at rest.

5. We never sell your data. Your purchase history is never sold or shared with third parties for marketing or commercial purposes.

6. Your rights. Export your data (CSV) or delete your account entirely from Settings at any time — deletion is immediate and permanent.

7. Subscriptions. Payments are handled entirely by the Apple App Store or Google Play — we never see or store your card details.

Last updated: 2026-08-18.