This notice explains how Money Tracker, operated by Arizu Studio ("we", "us", "our"), uses artificial intelligence ("AI") when you scan a receipt, what data is involved, who processes it, and the choices you have. It supplements our Privacy Policy and Terms and Conditions.
1. What the Feature Does
Receipt scanning lets you photograph or upload a receipt so that the app can propose a transaction for you. The AI reads the image and suggests the merchant name, the date, the individual items and the totals. The suggestion is only a draft: nothing is saved as a transaction until you have reviewed it and confirmed it.
Scanning is optional. Every feature of Money Tracker can be used by typing transactions manually, and you lose nothing by not scanning.
2. How a Scan Works
- Eligibility check. We check your plan, your daily scan allowance and, where required, whether your email address is verified. The daily allowance is 5 scans on the Free plan (each unlocked by watching a rewarded video advertisement), 10 on Lite and 100 on Pro.
- Upload and validation. The image you submit is checked to make sure it is a valid image file of an accepted type and size. Files that fail the checks are rejected.
- Cleaning. We re-encode the image, which removes embedded metadata such as EXIF data, including camera details and GPS location.
- Private storage. The cleaned image is stored on our server under a randomly generated name, in a private location that cannot be reached directly from the internet.
- AI extraction. The image is sent over an encrypted connection to the AI provider we have selected, together with our instructions asking it to return the receipt details in a structured form. We do not send your name, email address, account identifier or other account details to the provider.
- Response. The provider returns the extracted details. We store the response in encrypted form and show it to you.
- Your review. You check, correct or discard the suggestion. Only when you confirm is a transaction created, and you can edit it afterwards like any other transaction.
3. Who Processes the Data
We may configure different AI providers, such as Anthropic, Google, DeepSeek, xAI or OpenAI, and change them over time to improve quality, cost or availability. Only the provider that is active at the time of your scan receives your image. Providers act as independent service providers under their own terms and privacy policies, which we do not control. Please review them if you want to know how a provider handles the data it receives.
Providers may operate servers outside Indonesia. We therefore treat each scan as a cross-border transfer and only use providers that we have reasonably assessed as offering adequate protection, in line with the safeguards required by Law No. 27 of 2022 on Personal Data Protection ("UU PDP"), as described in our Privacy Policy. By choosing to scan a receipt, you ask us to send the image to the provider for this purpose.
4. Data We Hold About Scans
| Item | Where it is held | Notes |
|---|---|---|
| Cleaned receipt image | Private storage on our server | Metadata removed. Not accessible from the public internet |
| Scan record linked to your account | Our database | Status, time, and the encrypted extraction result |
| AI usage log | Our database | Time, model, outcome, duration, error details and the encrypted AI response. Kept for support, quality and abuse investigation |
| Confirmed transaction | Your account | The data you confirmed, which you can edit or delete at any time |
| Merchant (brand) name | Shared merchant list | May be added so others can pick the same merchant. Contains no personal data and is not linked to you |
5. Retention
- Your receipt images and scan records are kept while your account is open and are removed when you close your account.
- AI usage logs, including the encrypted AI response, are kept for up to 400 days and are then deleted automatically. On account closure, they are separated from your account and remain only until that period ends.
- A transaction that you confirmed is part of your transaction records, which remain until you delete them or close your account.
- Backups of our database may contain this data until they rotate out, which currently takes about two weeks.
More detail is available in the Data Retention Policy.
6. Who Can See Scan Results
Our staff cannot see your transactions, balances, budgets or reports. The stored AI response of a receipt scan is the only content derived from information you submitted that authorised staff may view, and only for support, quality assurance and the investigation of abuse or security incidents. It is stored encrypted, and every access by staff is recorded in an audit log. We do not otherwise browse scan results.
7. Accuracy and Your Responsibility
AI can make mistakes. It may misread blurred, folded, faded, handwritten or unusual receipts, confuse similar characters, miss items, misread amounts or dates, pick the wrong merchant or category, or add details that are not on the receipt. We do not guarantee that any extraction is correct or complete. You must review each suggestion and correct it before you confirm it. You remain responsible for the accuracy of your records. Money Tracker is a personal record-keeping tool and the output is not financial, tax or legal advice.
Tips for better results: place the receipt on a flat, plain surface; make sure the whole receipt is in view; use good light; avoid glare and shadows; and keep the camera steady.
8. No Automated Decisions With Legal Effect
The AI only proposes data for you. It does not make decisions about you, your eligibility for anything, your account standing or your payments. We do not use scan results to take decisions that have legal or similarly significant effects on you. Our quotas and anti-abuse controls rely on counts and technical signals, and a person can review any action taken on your account.
9. No Training on Your Data by Us
We do not use your receipt images, scan results or other personal data to train or fine-tune AI models. What an AI provider does with the data it receives is governed by that provider's terms, which are outside our control. For that reason, please do not scan receipts that show sensitive personal data of other people, such as full payment card numbers, identity numbers, medical or other particularly sensitive information. If a receipt includes such data, cover or crop it, or enter the transaction manually.
10. Optional Notification Capture
If you enable automatic transaction capture, the amount, the type of transaction and the source name are recognised from payment notifications on your device. The app does not upload the raw notification text to an AI provider; the resulting transaction is saved to your account and its note contains the notification title and text, shortened to 255 characters. You can turn this feature off at any time by revoking notification access in your Android settings. See the Privacy Policy for details.
11. Your Choices
- Do not scan. You may enter every transaction manually. No feature requires scanning, and not scanning means no image is sent to an AI provider.
- Review, edit or discard. You may change or discard any suggestion before you confirm it.
- Request deletion of scan data. You may ask us to delete your stored receipt images, scan records and, where it can still be linked to you, the logged AI response, by emailing arizu.team@gmail.com from your registered address. We will respond within 14 days. We will not delete a transaction you confirmed unless you ask; you can do so yourself in the app. Data held by an AI provider is subject to the provider's own terms, and we can pass on your request where its terms permit.
- Withdraw consent. You may stop scanning at any time without affecting processing that has already taken place. Closing your account removes your scan data from our live systems as described in the Close Account Policy.
- Other rights. You may also exercise the rights of access, rectification, restriction, objection, portability and complaint described in the Privacy Policy.
12. Misuse of the Feature
Scanning is for genuine receipts. Abuse of the feature, such as uploading unrelated or unlawful images, automated or bulk submissions, or attempts to manipulate the AI, is prohibited under the Acceptable Use Policy and may lead to limits or suspension.
13. Changes and Contact
We may update this notice if we change the AI providers we use, the data we send, or how the feature works, and we will tell you of material changes in the app or by email. For questions or requests about AI processing, contact arizu.team@gmail.com. For general support, contact arizu.team@gmail.com. Our address is Arizu Studio, Grand Depok City, Cluster Gardenia, Kota Depok, Jawa Barat, 16412, Indonesia..