Privacy Policy / 隐私政策
What we process / 我们处理的数据
Receipt fields, categories, preferences, and images you choose to keep are stored in the app sandbox on your device. When you explicitly start cloud recognition, up to three selected receipt pages are encrypted in transit and sent to Receipt2CSV, then to a third-party AI processing service that uses DeepSeek models. The service extracts merchant, date, amounts, and items. Names, addresses, payment information, and other visible receipt content are also sent. Uploaded images on Receipt2CSV servers are removed after processing. Recognition results are retained for up to 24 hours from task creation for recovery, then cleared. Task identifiers, status, timestamps, and quota charge/refund records are retained until account deletion.
小票字段、分类、偏好和你选择保留的图片默认存储在设备应用沙盒中。只有你主动开始云端识别时，最多三页所选票据才会加密传输至 Receipt2CSV，并发送给使用 DeepSeek 系列模型的第三方 AI 处理服务，用于识别商户、日期、金额和商品明细。图片中可见的姓名、地址、付款信息等也会一同发送。Receipt2CSV 服务器收到的上传图片在处理结束后删除；识别结果自任务创建起暂存最多 24 小时用于任务恢复，随后清理。任务标识、状态、时间和额度扣退记录保留至删除账号。
AI service and data use / AI 服务与数据用途
For accounts signed in with Apple or Google, receipts pass through our Tomato authentication and model gateway (api.cyberbrain-ai.com) to a service running DeepSeek models. For dedicated store review accounts, Receipt2CSV sends receipts directly to DMXAPI (www.dmxapi.cn), which uses DeepSeek models to read the images and organize the fields. These processors receive the selected images, their visible text, and recognition instructions. We send only the images and instructions needed for recognition and do not separately send sign-in email, display name, or store transaction history; information visible in the images is still included. Receipt2CSV does not use receipt images or results for model training or retain them for that purpose. Processing and retention by third-party providers are governed by their respective service rules and privacy policies. Our server deletion periods do not describe provider retention.
普通 Apple 或 Google 登录账号的小票，经我们的 Tomato 认证与模型网关（api.cyberbrain-ai.com）发送给 DeepSeek 模型处理服务。专用商店审核账号的小票由 Receipt2CSV 直接发送给 DMXAPI（www.dmxapi.cn），使用 DeepSeek 模型识别图片并整理字段。上述处理方会收到所选图片、图片中的文字及识别指令。我们仅发送识别所需的图片和指令，不另外发送登录邮箱、昵称或商店交易记录；图片本身包含的信息除外。Receipt2CSV 不将小票图片和识别结果用于模型训练，也不为训练目的保留内容。第三方服务商的数据处理和留存适用其各自的服务规则与隐私政策；我们服务器的删除期限不代表服务商的留存期限。
DeepSeek Privacy Policy · DeepSeek 隐私政策 · DMXAPI Privacy Policy / 隐私政策
Pending uploads are held in private worker storage. The short-lived authorization token required by the worker is encrypted in Redis; uploads and encrypted task payloads are deleted after completion, cancellation, or expiry.
排队中的图片存放在受控的工作存储中，Worker 所需的短期授权令牌加密保存在 Redis；图片和加密任务载荷在完成、取消或过期后删除。
Account and purchase data / 账号与购买数据
Apple or Google supplies a verified account identifier and may supply your email, name, or profile image. We use it for sign-in, abuse prevention, quota management, and purchase restoration. The app does not sell personal data and contains no advertising SDK.
Apple 或 Google 会提供经验证的账号标识，并可能提供邮箱、姓名或头像。我们将其用于登录、防止滥用、额度管理和恢复购买。应用不出售个人数据，也不包含广告 SDK。
Your choices / 你的选择
Before the first upload, we ask for explicit consent. You may decline cloud recognition and enter receipt data manually. To avoid further uploads, stop using automatic recognition and use manual entry instead. In Settings, you can delete local receipts and delete your Receipt2CSV account data. Deleting an account does not cancel an active App Store or Google Play subscription; manage subscriptions in the relevant store.
首次上传前会单独征求同意。你可以拒绝并手工录入。如不希望继续上传，可停止使用自动识别，改用手工录入。在“设置”中可以删除本地小票，并删除 Receipt2CSV 账号数据。删除账号不会自动取消 App Store 或 Google Play 的有效订阅，请在对应商店管理订阅。
Retention and security / 保留与安全
We retain account and usage records while the account is active. Product account data is removed through the in-app deletion flow. After deletion, we retain for up to 730 days only a keyed, non-reversible account marker and the number of lifetime free credits already used, solely to prevent repeated promotional-credit abuse. This marker contains no email, name, receipt content, or reusable login identifier. Store transaction records may remain with Apple, Google, or our billing service where required for purchase restoration, fraud prevention, tax, or legal compliance. We use encrypted transport and access controls, but no system can guarantee absolute security.
我们会在账号有效期间保留账号及使用记录。通过 App 内注销流程可删除本产品的账号数据。注销后，我们仅为防止重复领取免费推广额度，保留最长 730 天的加密不可逆账号标记和已使用的终身免费次数；其中不包含邮箱、姓名、小票内容或可用于登录的账号标识。为恢复购买、防止欺诈、税务或法律合规所必需的商店交易记录，可能继续由 Apple、Google 或我们的计费服务保留。我们使用加密传输和访问控制，但任何系统都无法保证绝对安全。
Developer: Shenzhen Ipeaking Technology Development Co., Ltd.
Contact: ipeakinghuanghongbo@gmail.com