Privacy Policy

Kvittun is a digital receipt management service.

We are committed to protecting our users’ personal data and ensuring that it is handled securely and used only as necessary to provide and operate Kvittun.

This Privacy Policy explains what personal data we process, why we process it and how we use it.

We process the information necessary to provide and operate Kvittun.

This may include:

• your name and account information;
• your Icelandic identification number (kennitala), where necessary for identity verification;
• your phone number;
• information contained in receipts;
• information relating to purchases and spending; and
• limited technical information about your device and use of the Service.

Receipt data may include information such as the merchant, transaction date, products or services purchased, prices, taxes, total amount and other information shown on the receipt.

When you scan a receipt, the receipt image is processed temporarily in order to extract the information displayed on it.

We use OpenAI to assist with this processing.

The information extracted from the receipt is stored within Kvittun so that you can access your receipt and view information and insights relating to your own spending.

The original receipt image is not stored by Kvittun once processing has been completed.

We use personal data to:

• create and maintain your account;
• verify your identity;
• extract and store receipt information;
• display your receipts;
• categorize and organize receipts;
• provide personalized spending summaries and insights;
• operate Kvittun+ and manage subscriptions;
• maintain the security, reliability and functionality of the Service; and
• provide customer support.

Your receipts, purchase history and spending information are for you.

We do not:

• sell your receipt data or purchase history;
• provide merchants with access to your receipt history;
• provide advertisers with information about your purchases;
• share your personal spending analysis with other businesses; or
• use your purchase history to create advertising or marketing profiles.

Merchants do not have access to your receipt history, spending analysis or other information stored in your Kvittun account.

Personal summaries and analysis within Kvittun are created solely for you.

We use a number of third-party service providers to operate Kvittun, including:

• Neon – for database infrastructure and data storage;
• OpenAI – to process and extract information from receipts; and
• Apple – for App Store distribution, in-app purchases and subscriptions.

These providers receive only the information necessary to provide their respective services.

Kvittun does not authorize these providers to use users’ receipts or purchase history for their own advertising or marketing purposes.

Some service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we take appropriate measures to ensure that such processing complies with applicable data protection laws.

We retain personal data only for as long as necessary to provide Kvittun or comply with applicable legal obligations.

Receipt information is generally retained for as long as it remains associated with your account or until you delete it.

The original receipt image is not stored by Kvittun after processing has been completed.

If you delete your account, we will delete or anonymize your personal data, unless we are required by law to retain certain information for a longer period.

Depending on applicable data protection law, you may have the right to:

• request access to personal data we hold about you;
• request the correction of inaccurate personal data;
• request the deletion of your personal data;
• request that the processing of your personal data be restricted;
• receive a copy of your personal data in a portable format, where applicable; and
• withdraw your consent at any time where processing is based on consent.

You can request the deletion of your Kvittun account directly through the Service.

If you believe that our processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).

We may update this Privacy Policy from time to time to reflect changes to Kvittun, our service providers or applicable laws.

If we make material changes, we will take appropriate steps to inform users.

If you have any questions about this Privacy Policy or how we handle personal data, you can contact us at:

Avenor ehf.

ID No.: 680726-1670

Email: hello@kvittun.app

Website: www.kvittun.app