Privacy Policy

The data controller is Romanyuk Dmytro. If you have any questions about your data, write to dm.romaniuk2323@gmail.com.

• Your Google account: name, email address and profile photo — so you can sign in.
• What you add: receipts, receipt photos, products, prices, expenses, shopping lists, splits, ratings and reviews.
• Settings: language, country, currencies and notification preferences.
• Technical data: sign-in sessions (device and browser), push notification subscriptions, in-app error reports with a pseudonymised IP address, abuse-protection counters, and a log of recognitions used (time only), and app visits (when, how many actions and the device type — no page addresses or content). We don’t store Google access tokens or IP addresses in sessions.
• Your email address on the Pro waitlist, if you left it.

• To provide the service: storing and showing your receipts, prices, lists and splits — performance of a contract (Art. 6(1)(b) GDPR).
• Security, abuse prevention and fixing bugs — legitimate interests (Art. 6(1)(f) GDPR).
• An email about the Pro launch — your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time.
• Recording your acceptance of these terms — to be able to show that you agreed to them.

We work with trusted providers who process data only on our instructions:

• Vercel — app hosting and photo storage (servers in Frankfurt).
• Neon — database (Frankfurt).
• Google — signing in with your Google account.
• Mistral AI (France) — reading the text on receipt photos.
• Your browser’s push notification providers (Apple, Google, Mozilla) — only to deliver notifications.

If a provider transfers data outside the EU, this is done on the basis of Standard Contractual Clauses or the EU–US Data Privacy Framework.

• Prices from your receipts and price tags (product, shop, day, price) are visible to other people on Ceniq — anonymously: without your name, the time of purchase or the receipt itself. You can turn this off in your profile or for a single receipt.
• Product ratings are visible to everyone — with your first name, without surname or photo.
• Members of your circle see your name, shared lists and splits.
• Someone you send a link to a list or split sees only that list or split.
• Only you see your receipts, photos and expenses. The service administrator sees technical data (recognition status, number of records), but not the contents of receipts.

• For as long as your account exists. When you delete a receipt, its photo and prices are deleted with it.
• Error reports — 30 days.
• Abuse-protection counters (including the IP address at sign-in) — up to 2 days.
• Recognition log — 90 days; expired sessions are deleted daily.
• When you delete your account, your data is erased from our database immediately, and from our providers’ backups within their retention cycle.

• Get a copy of your data (export receipts to CSV in your profile) and take it elsewhere (data portability).
• Correct your data or have it erased (right to erasure); you can delete your account in your profile with a single tap.
• Restrict or object to processing, and withdraw your consent.
• Lodge a complaint with a supervisory authority — in Poland, this is the President of the Personal Data Protection Office (UODO).

Ceniq only uses essential cookies that the app can’t work without, so no separate consent is needed for them:

• better-auth.session_token — your sign-in session.
• ceniq_locale — your chosen language.
• ceniq_invite, ceniq_list_invite — temporary, to accept an invitation to a circle or a list.
• ceniq_terms — records that you agreed to the terms.

Your browser’s storage keeps drafts for offline use and notes about which tips you’ve already seen. There are no analytics or advertising cookies.

Ceniq is not intended for anyone under 16.

If we make significant changes to this policy, we’ll let you know in the app in advance.