Family Receipts
Login v0.110

Privacy policy

Last updated: October 20, 2026

YFL Expense Tracker is a beta app run by one person, Mark Levison. This policy says what the app stores, who can see it, where it goes, and how to get it back or deleted.

1. Your data belongs to you

  • Your receipts, expenses and transactions are yours. We use them only to run the app for you.
  • We never sell your data. We never use it for advertising.
  • We never use it to train AI models, and neither does any company we send it to.

2. What we store

  • Your name and email address, plus up to five more email addresses you add to your profile.
  • Receipt images and PDFs that you upload or email to the app.
  • What we read from each receipt: date, merchant, total, tax, currency, and the card name and last four digits if they are printed on it.
  • The Categories, notes and splits you add to your receipts.
  • Bank and credit card transactions that you import from CSV files.
  • Your merchant rules and your Family’s settings.

Receipts stay in the app until you delete them, so you can keep them for tax filing.

3. Who can see your data

  • Your Family. Data in the app belongs to a Family, not to one person. Every member of your Family can see and change all of your Family’s receipts, expenses and transactions. Invite only people you want to share that with.
  • Other users cannot see it. Database access rules keep each Family’s data separate from every other Family’s data.
  • The operator. Mark Levison is the only person with administrative access. He can technically read stored data. He does not browse it. He looks at your data only when you ask, for example to fix a problem you report. We will update this policy before anyone else gets access.
  • Your data is encrypted in transit and at rest.

4. Companies that process your data

We use these companies to run the app. Each one gets only what it needs.

  • Supabase stores the database, the receipt files and your login. It runs on Amazon Web Services in Canada (Montréal, ca-central-1).

  • Mistral AI (France) reads each receipt to fill in the date, merchant and amounts. This happens automatically for every receipt you upload or email. Mistral receives:

    • a link to the receipt image or PDF, which stops working after a few minutes;
    • for an emailed receipt with no attachment, the text of the email. That text can include the sender’s name and email signature.

    Mistral does not get your account details. Mistral does not keep what it reads after processing, and it does not use it to train models. Mistral can use its own sub-processors, including in other countries, under contract safeguards.

  • Resend (United States) receives the emails you send to your Family’s receipt address, including attachments. It also sends the app’s notification emails, so it has the email addresses of the people it writes to.

  • Vercel (United States) hosts the app. It handles the requests that send receipts to Mistral, so it briefly sees the receipt link and what Mistral reads from it.

Some of these companies are outside Canada. Data they process may be subject to the laws of the country where it is processed.

We will update this list before we add a new company.

5. Backups

  • Supabase keeps daily database backups for 7 days.
  • Each week, the operator copies the whole database and all receipt files to his own computer. The copy is on an encrypted disk, outside any cloud-sync folder. No other copy exists.
  • We keep these copies for [N weeks]. After that, we delete them.

6. Getting your data, and deleting it

  • Export. You can export all of your Family’s data at any time, including every receipt image, from inside the app.
  • Correct. You can change your data in the app. Email us for anything you cannot change.
  • Delete. You can delete your data in the app at any time. Deletion happens at once.
    • A receipt: the receipt and its image are deleted.
    • Your account: your login and profile are deleted. The receipts you entered stay with your Family, because they belong to the Family.
    • Your Family: everything goes — every receipt, image, expense, transaction, Category and rule.
    • Deleted data can remain in backups until those backups expire (section 5).

7. Logs

Supabase and Vercel keep technical logs of requests. Logs record when the app was used and whether requests worked. They do not hold your receipt images. Supabase deletes its logs after 7 days. Vercel deletes its logs after at most 1 day.

8. AI tools used to build the app

We use AI tools to help write and test the software. The tools work with test data that we make up. They do not read your receipts or expenses.

9. If something goes wrong

If a breach of security puts your data at risk, we will tell you as soon as we can. We will say what happened, what data was involved and what you can do. We will also report it to the Office of the Privacy Commissioner of Canada when the law requires. We keep a record of every breach.

10. Contact

Mark Levison is responsible for privacy in this app.

We will tell you before this policy changes in a way that affects you.