Effective date: October 9, 2026
kakebou (the "App") values your privacy. This Privacy Policy describes the information the App collects, uses, and protects.
| Data Type | Purpose | Storage |
|---|---|---|
| Camera images (receipt photos) and OCR prompts | Text extraction via OCR | Sent only when you choose cloud OCR. Our Firebase Cloud Function (United States, us-central1) passes the compressed receipt image (JPEG, approximately 1280 pixels wide) and a prompt (receipt language and currency hints, and your category names) to external OCR services to extract text and returns the result to the App. Our server does not store the image. See Section 3 for processors and retention periods. |
| Expense data (amounts, dates, categories, store names) | Expense tracking features | Local on-device database (encrypted). Stays on your device, except for the receipt image and prompt you choose to send for cloud OCR (see above) and the purchase token and account hash sent to our server to verify a purchase. |
| Payment SMS (optional, Android only) | Only when you turn on "Auto-detect payment SMS" in Settings, the App reads incoming SMS and uses only messages in the card payment notification format, extracting the amount, merchant and date/time to create an expense candidate. Messages that are not card payment notifications (including verification-code messages) are discarded without being stored. Confirming it logs the expense; dismissing it deletes the candidate. | Only the extracted candidate is stored in the local on-device database. The SMS text itself is not stored, and SMS contents are never automatically sent to a server or shared with third parties. Only when you export your expenses yourself (CSV) are confirmed expense details included; the SMS text is never included. Incoming SMS are processed only while the App is running and this setting is on; you can turn it off in Settings at any time. |
| Crash reports | App stability improvement | Firebase Crashlytics (Google servers). Database error reports are sent with stored values such as amounts and merchants removed. |
| Advertising identifier | Personalized ad delivery | Google AdMob (Google servers) |
| In-app purchase information | Subscription management | Google Play billing system |
| Google account identifiers (Firebase user ID, email address) — only if you link a Google account when subscribing or restoring a purchase | Confirming the subscription owner (restoring a subscription after reinstalling or changing phones) | Firebase Authentication (Google servers). Subscription check records store only the user ID and its hash, not the email address. |
| Anonymous user ID (every user, created automatically on first launch) and monthly scan counts | Authenticating server OCR calls and managing the monthly scan limit | Firebase Authentication and Cloud Firestore (Google servers). Kept after uninstalling; delete it in App settings → Account → "Delete account". |
Collected information is used solely for the following purposes:
The App uses the following third-party services. Each service processes data according to its own privacy policy:
Receipt recognition uses Cloudflare Workers AI first, Azure AI Document Intelligence only if that fails, and Google Gemini API only if that also fails, so normally only Cloudflare receives the image.
For receipt text recognition, we send the receipt image to each processor at scan time from our Firebase Cloud Function (United States, us-central1) over an encrypted connection (HTTPS). Cloudflare and Google also receive the prompt described above; Azure receives only the image because its prebuilt receipt model needs no prompt. We do not attach your name, email address, or account ID as account information. Information visible in the image and your category names are included in the data sent.
| Recipient and Service | Processing Country or Region | Retention and Data Handling |
|---|---|---|
| Cloudflare, Inc. — Workers AI (Gemma 4) | Cloudflare's global network. The processing country or region is not fixed and is not limited to Japan. | Public documentation does not specify a uniform retention period for inputs and outputs. Content may be stored when storage services are used alongside Workers AI, and handling is subject to the provider's terms. Cloudflare states that it does not use inputs or outputs to train models or improve services without explicit consent (data handling, processing network). |
| Microsoft Corporation — Azure AI Document Intelligence (prebuilt receipt model) | Japan (Japan East). Processing and temporary storage take place in the same region as the resource we use. | Submitted documents and analysis results are temporarily stored encrypted and automatically deleted 24 hours after analysis completes. Customer data is not used to train or improve Microsoft's models (retention and region, training explanation). |
| Google LLC — Gemini API | Countries where Google or its agents maintain facilities, including the United States. Processing is not limited to Japan. | Google states that it retains prompts, contextual information, and outputs for 55 days for abuse monitoring. Other handling is subject to the applicable terms. Paid Services do not use inputs or outputs to improve products; Unpaid Services may use them to improve products and machine-learning technologies (abuse monitoring, terms of service). |
To refuse these transfers, including overseas processing, do not use receipt scanning and enter expenses manually instead. Manual expense tracking remains available.
Expense data is stored in a local on-device database. It is not sent to our server, apart from the receipt image and prompt you choose to send for cloud OCR and the purchase-verification data. Our server stores only the account identifiers needed to check subscriptions and monthly scan counts. Receipt images and prompts are sent via an encrypted connection (HTTPS) for OCR processing, and images are not stored by our server after processing. Our server uses external OCR services in the order described in Section 3. See Section 3 for retention and processing by these providers.
You may exercise the following rights:
The App does not knowingly collect personal information from children under the age of 16.
If this Privacy Policy is updated, we will notify you through an in-app notice or on this page.
For questions about our privacy practices, please contact us at:
Email: contact@s-hub.shop