Privacy Policy

Last updated: 11 June 2026

SpillSnap ("we", "us") respects your privacy. This policy explains what personal data we collect, how we use it, and the choices you have. It is written with Malaysia's Personal Data Protection Act 2010 (PDPA) in mind. By using SpillSnap you agree to the practices described here.

1. Data we collect

Account details - your name, email address and, if you choose to provide it, your phone number.
Receipt data - the images you upload and the merchant, items, totals, tax and dates we extract from them.
Usage data - basic information about how you use the Service, such as device type and activity, to keep it working and secure.

2. How we use your data

We use your data to provide and improve the Service: to read and organise your receipts, run your account, process subscriptions, give support, and keep SpillSnap secure. We may use aggregated, de-identified figures (for example, total receipts processed) for product and marketing statistics - these cannot identify you.

3. Automated processing

Receipts are processed using optical character recognition and AI models to extract their details. Images may be sent to our processing providers solely to perform this extraction. We do not sell your receipt data.

4. Sharing your data

We share data only with service providers that help us run SpillSnap - for example authentication, hosting, payment and AI processing partners - under agreements that protect your data. We may also disclose data where required by law or to protect our rights and users.

5. Data retention

We keep your data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymise your personal data and associated receipts, except where we must retain certain records to meet legal obligations.

6. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to safeguard your information and to respond promptly to any incident.

7. Your rights

Under the PDPA you may access and correct your personal data, limit how it is processed, and withdraw consent. You can manage much of this in the app, or contact us to make a request. We will respond within a reasonable time.

8. International transfers

Some of our providers may process data outside Malaysia. Where that happens, we take steps to ensure your data continues to receive an appropriate level of protection.

9. Children

SpillSnap is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you are under the age of majority in your jurisdiction, please use SpillSnap only with the consent and involvement of a parent or guardian. If you believe a child under 13 has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will give reasonable notice. The "last updated" date above shows when this policy was last revised.

11. Contact

For privacy questions or to exercise your rights, email us at [email protected].

This policy works alongside our Terms of Service.