Privacy Policy

Last updated: May 2025

Data Controller

Poupy is operated from Portugal. For privacy inquiries, contact us at umiarka@gmail.com.

What We Collect

  • Name and email address (required for your account)
  • Expenses you enter manually
  • Receipt images you upload (optional)
  • Telegram handle (optional, only if you link the bot)
  • Group membership (if you join or create a group)

How We Use Your Data

  • To provide the expense tracking service
  • To parse receipts using Google Gemini AI
  • To send authentication emails via Resend
  • To improve the product using PostHog analytics

Third-Party Services

  • Vercel (hosting)
  • Google Gemini (receipt parsing)
  • PostHog (analytics)
  • Resend (email delivery)
  • Google OAuth (authentication)

Your Rights

Under GDPR, you have the right to access, correct, delete, or export your data. You may also object to processing or lodge a complaint with the CNPD (cnpd.pt). Contact us at umiarka@gmail.com to exercise any of these rights.

Data Retention

We keep your data for as long as your account is active. You may request deletion at any time.