Privacy Policy

Last updated October 5, 2026 · Applies to the Parchi Books app for iPhone, iPad and Android

1. Who we are

Parchi Books is made by Saada Labs LLC, a Texas limited liability company (“we”, “us”). This policy explains what happens to your information when you use the Parchi Books mobile app. Our company website is saada.tech.

2. Data on your device

Everything you keep in Parchi Books stays in a database on your phone or tablet:

• receipts and their line items: store names, item names, prices, categories, dates and payment-card last four digits if printed on the receipt;
• compressed copies of your receipt photos;
• what you enter yourself: income, fixed costs, budgets, mileage trips, notes, tax settings and a display name;
• bank or card statement files (CSV) you choose to import. These are read on your device and are never uploaded.

The whole database is encrypted with AES-256 (SQLCipher). The key is kept in your device’s secure storage (the iOS Keychain or Android Keystore). We have no copy of this data and no way to access it. If you delete the app, it is gone unless you made a backup (section 6).

3. Scanning a receipt

When you scan, import or share a receipt into the app, Parchi Books sends the image or PDF over an encrypted connection (HTTPS) to our scan service. The service passes it to Google’s Gemini API, which reads the store, items, prices and totals and sends them back to your device for you to review.

• We don’t store your receipt. Our scan service handles it in memory only to complete the request. It is not saved to disk and its contents are not logged. Our logs record only technical details such as file size, processing time and which AI model was used.
• Google processes it for us. We use Google’s paid Gemini API service. Under Google’s terms for that service, Google does not use your receipts to improve its products. Google may keep requests for a limited period only to detect abuse and to meet legal obligations.
• Only the receipt you chose to scan is sent. The rest of your data never leaves your device during a scan.

4. Scan limits and abuse prevention

Each plan includes a monthly number of scans. To enforce that and to stop our scan service from being misused, each scan request also carries:

• a random install ID created by the app. It isn’t linked to your name, email or device hardware, and it changes if you reinstall the app;
• an anonymous purchase ID from RevenueCat (section 5), used only to check whether you have a paid plan;
• your IP address, which every internet request includes, used for short-term rate limiting.

We store scan counts against these identifiers. Rate-limit records expire within a day, monthly scan counts within 70 days, and your cached plan status shortly after your subscription ends. We do not use them to identify you, build a profile or follow you across other apps or websites.

5. Subscriptions and purchases

Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your name, payment card or billing address. We use RevenueCat to manage subscriptions. When you buy or restore a purchase, RevenueCat receives the store’s purchase record, an anonymous app user ID it creates, and basic technical details such as app version, device model and country. It uses these to tell the app which features you’ve unlocked.

6. Cloud backup (optional)

Backup is off until you turn it on. When it’s on, a copy of your database goes to storage that belongs to you, not to us:

• iPhone and iPad: your private iCloud database, under your Apple ID;
• Android: a hidden app folder in your Google Drive, which other apps can’t see.

The backup is encrypted on your device before upload. The key is locked with a backup passphrase you choose and a recovery key you keep. Neither is ever stored by us or sent anywhere, so nobody can read your backup without one of them, including us, Apple and Google. If you lose both, the backup cannot be recovered.

Receipt photos are included only if you turn on “Back Up Receipt Photos”, and they are encrypted the same way. Each backup also stores a small amount of unencrypted information: your device’s name, the number of items and photos, the app’s data version and when the backup was made. The app uses these to warn you before one device overwrites another’s backup.

Data in iCloud or Google Drive is also covered by Apple’s or Google’s own privacy policies.

7. Google user data (Android backup)

On Android, backup asks you to connect Google Drive. Parchi Books requests only the drive.appdata permission, which lets it read and write its own hidden backup folder. It cannot see any other file in your Drive. Google also shares your Google account’s email address with the app, which is shown on the Backup screen so you know which account is connected. It stays on your device and is not used for anything else.

Parchi Books’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Google user data for advertising, we don’t sell it, we don’t transfer it to anyone else, and no person at Saada Labs reads it.

You can disconnect at any time in the app (Settings → Backup, tap the connected account, then Disconnect) or at myaccount.google.com/permissions.

8. Device permissions

Parchi Books does not access your location, contacts, microphone or other apps’ data.

9. App updates

The app can download small updates directly, without a full app store update, using Expo’s update service. When it checks, your device makes a standard request to Expo’s servers that includes your IP address, the app version and the platform. No receipt data is involved.

10. What we don’t do

• We don’t show ads or include advertising or analytics SDKs.
• We don’t track you across other companies’ apps or websites.
• We don’t sell or “share” personal information, as California law defines those terms.
• We don’t use your receipts to train AI models, and our AI provider doesn’t either (section 3).

11. Service providers

We use these companies to run the app. Each processes data only to provide its service to us.

We may also disclose information if the law requires it, or to a successor if Saada Labs is reorganised or sold. Any successor would remain bound by this policy for data collected under it.

12. How long data is kept

13. Your choices and rights

• Export: Settings → Backup saves your records as a spreadsheet, and Settings → Your Data exports a Schedule C package and your receipt photos as a ZIP file.
• Delete: Settings → Your Data → Wipe All Local Data erases everything on the device. How to delete all your data also covers backups and purchase records.
• Turn things off: backup, photo backup, reminders and App Lock each have their own switch.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to object to certain processing. Because your data lives on your device, you can do most of this yourself in the app. For anything else, email us (section 17). We will respond within the time the law requires, and we won’t treat you differently for using these rights.

14. Security

Your data is encrypted on your device and in backups, and is sent over HTTPS. App Lock can keep the app closed behind your device’s biometrics or passcode. No system is perfectly secure, but the safest data is data we never hold, and we hold very little.

15. Children

Parchi Books is meant for adults managing their own expenses. It is not directed to children under 13, and we do not knowingly collect personal information from them.

16. Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If a change materially affects how your data is handled, we’ll also tell you in the app before it takes effect.

17. Contact us

Questions or requests about privacy:
support@parchibooks.app
Saada Labs LLC, Texas, United States