Privacy Policy

Privacy Policy

Effective date: June 7, 2026 · Last updated: June 11, 2026

ReturnScribe is a native iOS app that helps you track purchases — return windows and subscription renewals — by scanning purchase confirmation emails. This policy describes exactly what data we collect, what we don't, how it's processed, and the rights you have over it. It is written specifically for ReturnScribe and is not a generic template.

1. Who this policy applies to

This policy applies to the ReturnScribe iOS app (the "App") and the returnscribe.com website. The App is operated from the Commonwealth of Virginia, United States.

2. Data we collect

3. Data we do not collect

4. How data is processed

5. Third-party services we use

We do not sell, rent, or share your personal data with any third party for advertising, marketing, profiling, or any other purpose outside the operational scope above.

6. Limited Use disclosure (Google API user data)

ReturnScribe's use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

7. Your rights

8. Data retention

When you delete your account, we mark your account data for deletion and begin purging it from production systems immediately. A scheduled purge job runs daily to remove soft-deleted records from production, and database backups containing them expire on their own retention schedule within the same 30-day window. As a result, your account data — including OAuth tokens, parsed purchase records, and any synced data — will be removed from our active production systems and from any backups in which it appears no later than 30 days after the deletion request.

Account deletion does NOT cancel App Store subscriptions; you must manage those in your Apple ID settings.

9. Children's privacy

ReturnScribe is a general-audience product directed to adults. It is not designed for, marketed to, or directed at children. We do not knowingly collect personal information from any individual under the age of 13 in the United States, or under the minimum age of digital consent in their country of residence (16 in many EEA member states unless that state has set a lower age between 13 and 16). Per our Terms of Use, you must be at least 13 to use ReturnScribe, and if you are between 13 and the age of majority in your jurisdiction, you may use ReturnScribe only with the consent and supervision of a parent or legal guardian. If we learn we have collected personal information from a child under 13 (or under the applicable minimum age in their country), we will delete it promptly. Parents or guardians who believe their child has provided personal information may contact privacy@returnscribe.com.

10. International users

ReturnScribe is operated from the United States. If you use the App from outside the United States, you understand that any data synced to our servers is processed and stored in the US. See §13 for region-specific disclosures (California, EEA/UK, Canada, Australia, New Zealand).

11. Security

ReturnScribe is designed so that your raw email content is not stored on our servers. The on-device prefilter never transmits email content off your device — email that is not identified as a receipt never leaves it. When a receipt email is parsed, redacted receipt content transits our Edge Function over TLS to OpenAI's API; in normal operation the Edge Function returns only the parsed fields and does not retain the content. The only email-derived content that may briefly reside on our servers is redacted receipt content held in a retry queue when a parse fails transiently, which is deleted automatically once the retry completes or by a scheduled cleanup job. Accordingly, a compromise of our database or storage would not expose stored raw email content.

We implement reasonable security measures: read-only OAuth scopes, Keychain-stored tokens with device-only accessibility, encrypted on-device storage with the strongest iOS file protection class, TLS for all network transit, row-level security on the backend, and per-user data isolation (row-level security keyed to your account) so no user's data can collide with another's. However, no system is perfectly secure: an attacker who actively intercepted traffic to, or compromised, the Edge Function itself in real time could in principle observe in-transit or briefly-queued content before it is discarded, and you should not treat any cloud-based service as a substitute for end-to-end encryption.

Breach notification. If we become aware of a personal-data breach (as defined by applicable law in your jurisdiction) that affects your account, we will notify you and any regulator to which we are obligated to report, in each case as and when required by applicable law (for example, state breach-notification statutes in the United States, PIPEDA's "real risk of significant harm" standard in Canada, the Notifiable Data Breaches scheme in Australia, the Privacy Act 2020 in New Zealand, and, when EEA/UK service launches, GDPR/UK GDPR Articles 33–34).

12. Changes to this policy

If we make material changes to this policy, we will provide notice in-app or by email to active users at least 14 days before the change takes effect. Non-material changes (typo fixes, clarifications) may be made without notice. The effective date at the top of this page reflects the most recent version.

13. Regional rights

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion of personal information, request correction of inaccurate personal information, and opt out of any "sale" or "sharing" of personal information as those terms are defined under California law.

Sensitive Personal Information. California Civil Code § 1798.140(ae)(4) defines the contents of mail, email, and text messages (where the business is not the intended recipient) as "sensitive personal information." We treat the contents of the receipt emails we read on your behalf as sensitive personal information. We do not use that information for any purpose other than (i) providing the receipt-tracking, return-window, and renewal-reminder features you signed up for, (ii) the limited internal-operations purposes permitted by California regulations (such as security, debugging, and short-term transient use to deliver the service), and (iii) AI-based parsing of receipt emails as described in §2, which is how the service's core feature is provided. Because our use of sensitive personal information is already limited to these statutorily permitted purposes, the CCPA does not require us to offer a separate "Limit the Use of My Sensitive Personal Information" link.

Do Not Sell or Share. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined in the CCPA/CPRA. We therefore are not required to display a "Do Not Sell or Share My Personal Information" link, but if our practices change, we will provide that mechanism before the change takes effect. We also recognize Global Privacy Control (GPC) browser signals on returnscribe.com as a valid opt-out signal if we ever process personal information in a manner that constitutes "sale" or "sharing" under the CCPA.

Notice at Collection. The categories of personal information we collect, the purposes for collection, the categories of recipients (sub-processors), and the retention periods are described in §§2, 4, 5, and 8 of this Policy, which together constitute our Notice at Collection under California Civil Code § 1798.100(a).

Non-Discrimination. We will not deny you the service, charge you different prices, or provide a different level or quality of service because you exercised any CCPA rights.

Response Timeframe. We will confirm receipt of a verifiable consumer request within 10 business days and respond substantively within 45 calendar days, with one 45-day extension where reasonably necessary and with notice to you.

To exercise any California right, contact privacy@returnscribe.com.

EEA, UK, and Switzerland users (GDPR / UK GDPR)

Note: ReturnScribe is initially available in the United States, Canada, Australia, and New Zealand App Stores. The EEA, UK, and Switzerland are planned for a future release. The following describes how we will handle your data when service launches in those regions. We will finalize our EEA/UK legal-basis analysis and any required consent mechanics before making ReturnScribe available in those regions.

Data Controller and Contact. For users in the EEA, UK, and Switzerland, the data controller of personal data processed by ReturnScribe is the operator of ReturnScribe, reachable at privacy@returnscribe.com. EU/UK Representative under Article 27. When ReturnScribe launches in the EEA and the UK, we will appoint and identify here a representative established in the EU under GDPR Article 27 and a representative established in the UK under UK GDPR Article 27. Until that appointment is made and disclosed, ReturnScribe is not offered in the EEA or the UK, and we do not intend to target users in those regions.

Legal Bases. We process your personal data on the following bases: (a) performance of a contract (Art. 6(1)(b)) to provide the receipt-tracking service, including the AI parsing of receipt emails that is integral to it; (b) your consent (Art. 6(1)(a)) for optional communications such as launch announcements, which you may withdraw at any time without affecting the lawfulness of prior processing; and (c) our legitimate interests (Art. 6(1)(f)) in operating, securing, and improving the service. Where we read the contents of receipt emails, this may constitute processing of "special categories of personal data" (Art. 9) only in unusual cases (e.g., a receipt revealing health-related purchases); we rely on your explicit consent under Art. 9(2)(a) for such incidental processing.

International Transfers. Personal data is stored and processed in the United States. The United States does not currently benefit from a general European Commission adequacy decision, although an "EU–U.S. Data Privacy Framework" decision is in place for certified U.S. recipients. When we serve EEA/UK users, we will rely on the Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914 and the UK ICO International Data Transfer Addendum) with our U.S. sub-processors, supplemented as required.

Your Rights. You have the rights of access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions producing legal or similarly significant effects. You may lodge a complaint with a supervisory authority in your member state of residence, place of work, or place of the alleged infringement, or with the UK Information Commissioner's Office at ico.org.uk. Contact privacy@returnscribe.com to exercise any right.

Canada (PIPEDA)

Our Privacy Officer for purposes of PIPEDA is reachable at privacy@returnscribe.com. We will respond to access and correction requests within 30 days as required by PIPEDA. Personal information of Canadian users is stored and processed in the United States; we use contractual safeguards with our U.S. service providers to provide a comparable level of protection. If a breach of security safeguards creates a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected users.

Australia (Privacy Act 1988 / Australian Privacy Principles)

We are likely to disclose personal information to overseas recipients, primarily in the United States. You may complain to us at privacy@returnscribe.com; if you are not satisfied, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au). Where required, we will notify affected individuals and the Commissioner under the Notifiable Data Breaches scheme.

New Zealand (Privacy Act 2020)

Personal information of New Zealand users is sent overseas to the United States for storage and processing by our service providers acting as our agents. We will notify the Office of the Privacy Commissioner and affected individuals of any notifiable privacy breach.

14. Account deletion

You can delete your ReturnScribe account from within the app at Settings → Security → Delete Account. Account deletion permanently removes:

Account deletion completes no later than 30 days after the request (see §8). Once deleted, your data cannot be recovered.

Important: Deleting your ReturnScribe account does not cancel any active App Store subscriptions. To manage or cancel App Store subscriptions, visit Settings → Apple ID → Subscriptions on your iOS device, or follow Apple's instructions at support.apple.com/billing.

15. Contact

Privacy questions or requests: privacy@returnscribe.com
General contact: info@returnscribe.com
Postal correspondence available on request.
In-app access: A link to this Privacy Policy is available within the App at Settings → Privacy & Data → Privacy Policy.

← Back to home