Privacy policy

This document is binding for how we build Slipsby: our technical specification follows it. A public version for users will be published after legal review.

Principle

We couldn’t care less who you are. We don’t ask for your name, email, phone number, gender or age. Your identity is your Telegram account.

What we store

Data	What exactly
Identity	Your Telegram user ID and your Telegram display name, used to sign you in.
Account	Role, language, base currency and time zone. These are taken from your device when you open the Mini App or the dashboard; until then they are worked out from your receipts. You can set them by hand.
What you send	Photos, their captions, messages to the bot, and your conversation history with the assistant.
Purchases	Shop, time, line items, amounts and your edits.
Payments	The address you paid to, the transaction hash and the sender address (public blockchain data), and promo codes you activated.
Dashboard sign-in	Hashes of one-time links and sessions. We don’t store IP addresses.

What we don’t read or store in your purchases

We don’t read or save the following in your purchases, even if it is printed on the receipt:

• the buyer’s name and tax number (for example, on an Argentine “Factura A”: the name and CUIT; on receipts from Russian sole traders: the buyer’s INN);
• card digits and the cardholder’s name, and loyalty card numbers;
• delivery details: name, address, phone number.

Photos

• Receipts are stored: you may need them to prove a purchase.
• The background of the shot (a hand, a face, your flat, other papers nearby) is cut away: we don’t need it, it gets in the way, and it takes up disk space. We store only the receipt, the product or the label.
• Labels and product photos are product data, not user data. They are attached to a specific product; identical labels and photos of the products themselves are deleted from time to time. You need them only to identify a product and its ingredients.
• Metadata. Coordinates in the file’s metadata (EXIF, XMP) are removed when the photo is saved. The image itself is not changed.

Location

We don’t collect it now: Telegram doesn’t send it. In the mobile apps you will be able to turn it on or off in settings. If a photo is taken in the shop itself, the coordinates help identify the store. If it is taken at home, much later, the coordinates are not used and not stored. If the store’s address is on the receipt, coordinates aren’t needed.

Shared catalogue of shops and products

Shops, products, their ingredients and labels are shared by all users. Other users see the catalogue without any indication of who added what. The link between “my purchase” and a shop or product is visible only to the owner of that purchase.

Dataset for our own receipt reading

We collect receipt photos and the data read from them so that we can build our own recognition and don’t have to run a heavy model every time. The labels for this data are the purchases users have confirmed, and their edits.

Deleting your account

/delete destroys the links between the account and its data. The link cannot be restored.

• Deleted: the account, identities, personal ledger, conversation history, sessions and invitations. In a shared ledger, the user’s expenses and membership are deleted; other members’ data stays.
• Receipts are de-identified and remain in the dataset as random receipts with the information read from them, with no link to a person. De-identification covers more than the account: the ledger, the Telegram chat ID and message IDs, the photo caption and the author of edits are removed too.
• A receipt photo is deleted if it contains anything listed under “What we don’t read or store in your purchases”, or if it is a pharmacy receipt.
• Labels and observations about products stay in the catalogue with no author.

You can always export your data.

Who we share data with

• Receipt reading. Our own model on our own servers. Photos and texts are not passed to third parties.
• Telegram. The channel you use to talk to the bot; the Mini App loads Telegram’s script.
• An external AI you connected yourself (Claude, ChatGPT, Grok and so on, via MCP). It receives your data from your records when you ask it to. Receipt photos are not passed on. You can switch off its access at any time.
• The TRON blockchain. Payments are checked through a public API, using the address you paid to.

Not decided yet

• What happens to payment records when an account is deleted.
• How long the dataset is kept.
• Consent to using photos for training, in the terms of service: the wording and a legal review before publication.