Last updated: 29 August 2026 · In force from 12 September 2026
poupy is operated from Portugal. For anything about your data, write to hey.poupy@gmail.com.
The receipt file itself. A PDF or a photo is read when you send it and is not stored afterwards — what remains is the expenses it produced. Card and bank details never reach us at all: they are entered on the payment provider's own page.
A receipt from a shop whose layout we have already learned is read by poupy alone, with no third party involved. Otherwise the document is sent to Google (Gemini) to be read, together with a list of shop names and tax numbers — a business register, not personal data — so that it can tell us which shop it is.
What comes back is the shop, the date, the total and the items. The document may contain whatever is printed on your receipt, including a tax number if you gave one at the till. Google processes it to answer the request and, under the terms that apply to this API, does not use it to train their models. If you would rather nothing left poupy, do not send receipts: everything else works without them.
We use PostHog to see which parts of poupy are used and where they break. It records events such as a page opened or a receipt sent, tied to your account id. It sets cookies, so it does not start until you allow it: the bar at the bottom of the page asks once, nothing is stored before you answer, and saying no is a real no rather than a smaller yes. Settings also has a switch that stops your account being tracked at all, whatever the answer was.
A group shows its members the expenses each of them enters. That is the point of it, and it is the one place your entries are visible to somebody else. Receipts, wallets, shortcuts and settings are never shared.
poupy is for people aged 18 and over, and we do not knowingly hold anything about anybody younger. We never ask for a date of birth, so nothing we store can tell us how old somebody is: what stands between us and a child's data is the line agreed to at sign-up. If you are a parent or guardian and an account here is your child's, write to hey.poupy@gmail.com and it is deleted with everything in it.
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, object to it being processed, and complain to the Portuguese supervisory authority, CNPD.
A copy you can take yourself: Settings → Data exports everything as JSON, or one table at a time as CSV. For deletion, write to hey.poupy@gmail.com — the button in Settings only tells us you asked, and a person still does the deleting.
We keep your data while your account exists, and delete it when you ask. Payment records are kept longer where accounting law requires it. The demo account is emptied every night.