Plain Apps

Privacy policy: Warranty Wallet [NAME]

Android and iPhone app · Last updated:

1. In short

The app itself does not collect, transmit or share personal data. Your receipts, dates and settings stay on your phone. The app has no account, no ads, no analytics and no crash reporting. The Android app has no internet permission.

One exception to know about: on Android, the “Scan receipt” button opens Google's document scanner, which is part of Google Play services and not of this app. Google states that the scan itself runs on the device and that its ML Kit features may send technical diagnostics to Google. See “Reading receipts” below.

2. Who is responsible

Provider of the app and controller within the meaning of the GDPR: Plain Apps, Residenzstr. 5, 80333 Munich, Germany, plainapps@tuta.com

Contact for privacy questions: plainapps@tuta.com

The full provider details are in the .

The data the app keeps on your phone is not sent to us. We do not receive it.

3. What the app stores on your phone

Your items (title, shop, dates, price, serial and order numbers, notes), their deadlines, the photos and PDFs of receipts you add, the text the app read from them (for search) and your settings, in the app's own storage on your phone. The app does not read card numbers or bank details; prices and amounts are only what you type or what is printed on a receipt you add.

Deleting an item deletes its files. “Delete all data” in Settings removes everything, including the app's temporary files.

4. Reading receipts

  • iPhone: the receipt is read with Apple's text recognition (Vision) on the device; the camera scan uses Apple's document camera (VisionKit).
  • Android: the app contains Google's ML Kit text-recognition model and reads on the device, also offline.
  • Android, “Scan receipt”: opens Google's document scanner, which is part of Google Play services, not of this app. Google states that “the entire document scanner flow operates on-device” and that its ML Kit features may send technical diagnostics to Google: device information (such as manufacturer, model and OS version), app information (package name and version), per-installation identifiers, performance metrics and error codes, encrypted in transit and, according to Google, not passed on to third parties. That is Google's processing under Google's privacy policy; we do not receive it.
  • “Photo or screenshot” and “PDF” do not use Google's scanner.

5. Permissions

  • Camera: to scan receipts, when you tap “Scan receipt” (on Android also as a fallback when Google's scanner is not available).
  • Photos: you choose photos in the system picker; the app cannot see your other photos.
  • Notifications: for reminders, asked once after you save your first deadline.
  • Face ID, fingerprint or passcode: only if you switch the app lock on; your phone checks, and the app never sees your face, finger or passcode.
  • Start on boot / background processing: Android lets the app re-arm its reminders after a restart; iPhone lets it re-plan its local reminders in the background.

The app does not use your location, contacts or microphone.

6. Reminders

Reminders are scheduled with your phone's own notification system. Nothing is sent to a server.

7. Files you share

“Share proof of purchase”, “Copy details”, “Create backup file” and “Export CSV” pass a file or text to the app or place you choose; after that, that app or provider's rules apply. A backup file is encrypted with AES-256-GCM using a key derived from your password; if you forget the password, nobody can open it. A CSV file is not encrypted.

8. Links

The links under “Your rights” in the app open official sources (gesetze-im-internet.de, EUR-Lex, europa.eu, Verbraucherzentrale) in your phone's browser view. Those sites follow their own privacy rules; the app sends nothing to them.

9. Phone backups

iPhone: if iCloud Backup is on, it includes this app's data; Apple stores it. Android: the app is excluded from Google's cloud backup; moving to a new phone by cable or Quick Share during setup (Android 12 and newer) can copy it.

10. Not legal advice

The deadlines are suggestions calculated from the dates you confirm, with the sources named in the app. They are information, not legal advice. The shop or manufacturer decides how a request is handled; a consumer advice centre can check your situation.

11. Third-party code and services

The app is built with Expo and React Native and their open-source libraries, which run inside the app. None of them collects or sends data; the app contains no advertising, analytics, crash-reporting or login code. The Android app has no internet permission.

The only third-party components that touch your receipts are Apple's text recognition and document camera (iPhone) and Google's ML Kit and document scanner (Android), described under “Reading receipts”.

12. No tracking, ads or analytics

The app has no account, no advertising, no analytics, no crash reporting and no tracking. It does not use an advertising ID. We do not build profiles and make no automated decisions about you.

13. Legal basis

Nearly everything the app does happens on your phone, and we never receive it. Where that is processing of personal data for which we are responsible, the legal basis is:

  • Art. 6(1)(b) GDPR: the app functions you ask for (the app is used under the terms of the store you got it from).
  • Art. 6(1)(a) GDPR: your consent, for optional features that are off until you switch them on and for which your phone asks your permission. You can withdraw consent at any time by switching the feature or the permission off in the app or in your phone's settings. Processing that already happened stays lawful.

14. How long data is kept, and how to delete it

The data stays on your phone until you delete it. We keep no copy. Delete a single item to remove it and its files. “Delete all data” in Settings removes everything, including the app's temporary files. Uninstalling the app removes its data from your phone. If you made a backup file or CSV and shared it somewhere, you delete that file there.

15. Children

The app is not directed at children and collects no data from anyone, including children.

16. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • information about and access to your data (Art. 15),
  • correction (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • notification of recipients about corrections, erasure or restriction (Art. 19),
  • receive your data in a common format and pass it on (data portability, Art. 20),
  • object to processing (Art. 21), and
  • withdraw a consent you gave (Art. 7(3)).

You also have the right to complain to a data protection supervisory authority (Art. 77), for example the one where you live. The app makes no decision about you based only on automated processing (Art. 22).

We receive no personal data through the app, so we normally hold nothing about you that we could give out, correct or delete. You can delete items or everything yourself in the app; uninstalling removes the app's data from your phone. Diagnostics that Google's components may send on Android are Google's data processing; ask Google about those.

If you still want to use one of these rights or have a question, write to the contact address in section 2. We answer within one month (Art. 12(3) GDPR).

17. App stores

If you install the app through Google Play or the App Store, the store processes your download and account under its own privacy policy. We receive only aggregated statistics from the store, no personal data.

18. Changes

If this policy changes, the new version is published at this address with a new date. If a future version of the app starts to access more than described here, this policy is updated before that version is released.

19. Contact

plainapps@tuta.com
Provider details: