Privacy Policy

Receipts and their line items, spending, budgets, income, fixed payments, subscriptions, instalments and savings goals are kept only in the app's storage on your phone. They are not sent to our servers and we cannot access them. Bill and subscription reminders are also scheduled on your phone; we don't use a notification server.

• Your email address and password — to create your account and sign you in. Your password is stored in a form that can't be reversed (hashed); we can't see it either.
• Scan counter — to enforce the limit of 50 scans per day, each scan creates a record linked to your account: its time, its type (receipt, statement or order) and the size of the request. The document's content is not written to this record.
• Technical logs — our infrastructure provider keeps sign-in and request logs (e.g. IP address, time) for a limited period for security and debugging.

When you scan a receipt, a credit card statement or an order screenshot, the image is sent through our server to Google Gemini, which reads the items, amounts and dates in it. The result comes back to your phone, and you confirm it before anything is saved.

We don't store the document on our server.

Important: we currently use Gemini on Google's free API tier. Under Google's Gemini API terms, documents sent on this tier and the results read from them may be used to improve Google's products, and may be read by human reviewers at Google after being disconnected from your account. The terms don't say how long Google keeps this data.

For that reason we suggest keeping personal details you don't need (such as your national ID number or address) out of the documents you scan. Scanning is optional: you can also enter spending by hand, and what you enter by hand never leaves your phone.

Only with the services that run the app and support, and only as much as needed:

• Supabase — accounts, the scan counter and our server (Frankfurt, EU).
• Google Gemini — reading scanned documents (free tier; see the note above).
• Resend — sending verification-code and password-reset emails (your email address).
• Cloudflare — hosting this website and forwarding emails you send to destek@getbanknote.com to us.

Some of these services' servers are outside Türkiye, so your data is transferred abroad. We don't share it with, or sell it to, anyone else.

We don't collect location, contacts, advertising identifiers or similar data. The app contains no ad networks, analytics or tracking tools. This website doesn't use cookies.

In the app, Ayarlar → Hesabı sil (Settings → Delete account) immediately deletes your account, your scan counter and all your data on the phone. If you can't access your phone, you can request deletion by email by following the steps on the account deletion page. We keep your account until you delete it.

Before deleting, you can export your data with Ayarlar → CSV olarak dışa aktar (Settings → Export as CSV). Deleting the app also deletes the data on your phone, but it doesn't delete your account.

Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), you have the right to learn whether your data is processed, to request information about it, to ask for it to be corrected or deleted, and to object. Write to us at the address below; we reply within 30 days at the latest.

• If iCloud or Google backup is on for your phone, the app's on-device data may be included in your backup. That backup belongs to your account; we have no access to it.
• If you email us, we keep the conversation until your request is resolved and afterwards until you ask us to delete it.
• The app is not directed at children under 13.
• If this policy changes, the new version is published on this page and the date is updated.

Data controller: Bilal Oğuz Erdoğdu
destek@getbanknote.com