1. What this covers
This Privacy Policy describes how TurtleSave ("we", "us") handles information across the TurtleSave web dashboard and the TurtleSave mobile app (iOS and Android). The two have different data flows, described separately below.
2. Account information
When you create a TurtleSave account, we collect your name, email address, and a password (stored as a one-way cryptographic hash — we cannot read it back). If you subscribe to a paid plan, billing is handled directly by our payment processor, Stripe; we do not store your full card details ourselves.
3. The web dashboard: your own cloud storage
On the web dashboard, you forward documents by email to a TurtleSave address, and we route each one into a cloud storage account you connect yourself — Dropbox, Microsoft OneDrive, or Box. Those files are transferred to, and reside in, your own connected storage account; TurtleSave does not keep a separate stored copy of them. We keep a log entry for each document processed (filename, sender, the folder it was filed to, and a short snippet of the email body) so you have a history of what was filed and where.
4. The mobile app: TurtleSave-hosted storage
The mobile app works differently: it does not require connecting Dropbox, OneDrive, or Box. Instead, receipts you scan or that arrive by email are stored directly by TurtleSave, using our own cloud storage infrastructure. This is so you don't need to set up a separate storage account on your phone.
Specifically, the mobile app collects and stores:
- Camera access and scanned images. With your permission, the app uses your phone's camera to scan receipts. Scanning uses your phone's own built-in document scanner (Apple VisionKit on iOS, Google ML Kit on Android) — we don't process your camera feed ourselves, only the final scanned image or PDF you choose to file.
- Receipt images and PDFs. Each scanned or emailed receipt is stored in our own cloud storage, organized into folders (by default, Year/Month/Vendor, though you can create, rename, and reorganize folders yourself).
- Extracted data. To automatically detect the vendor name and date on a receipt, we send the image or PDF to a third-party document-processing service, acting as our data processor, which returns the extracted text. We do not use this for any purpose beyond filing your receipt correctly.
- Email credentials and inbox access (optional). If you choose to connect an email account, you provide an email address and an app-specific password — a password generated by your email provider specifically for TurtleSave, separate from your email account's main login password. This app password is encrypted at rest (AES-256-GCM) and is never stored in plain text. We use it only to periodically check your inbox, via the standard IMAP protocol, for new attachments that look like a receipt (a PDF, or a photo that isn't a signature or footer logo embedded in the email itself). We do not read, store, or otherwise process the text of your emails beyond what's needed to identify and download a qualifying attachment. You can disconnect email access at any time from the app, which deletes the stored app password and stops any further inbox access immediately.
5. Who we share information with
We don't sell your data, and we don't share it for advertising. The only sharing is with the infrastructure providers needed to run the service, each acting as our data processor:
- Cloud storage infrastructure — stores receipt files uploaded through the mobile app.
- A document-processing service — extracts vendor/date data from a receipt image at the moment you file it.
- Our hosting provider — hosts our application servers and database.
- Stripe — processes payments for paid plans.
- Your own cloud storage or email provider — only if and when you connect one yourself (Dropbox/OneDrive/Box on the web dashboard, or an email account on the mobile app), and only to perform the filing/scanning you've asked for.
We use well-established, industry-standard infrastructure providers for hosting, storage, and document processing. We don't name them individually here; details are available on request.
6. Data retention and deletion
You can delete your account at any time from the web dashboard's Settings page. We're actively working on making mobile-app data (scanned receipts, connected email credentials) delete automatically as part of that same flow; until that's finished, email cservice@turtlesave.com to request deletion of mobile-app data specifically, and we'll remove it promptly by hand.
7. Security
Email app passwords are encrypted at rest. Account passwords are never stored in a recoverable form. Our infrastructure providers (see Section 5) maintain their own security practices and certifications. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
8. Children's privacy
TurtleSave is not directed at, and we do not knowingly collect information from, children under 13.
9. Your choices
You can review and delete what's been filed at any time from the app or dashboard, disconnect a connected email or storage account whenever you like, and request a copy or deletion of your data by contacting us.
10. Changes to this policy
We may update this Privacy Policy from time to time. We'll update the date at the top of this page when we do.
11. Contact
Questions about this policy, or requests regarding your data, can be sent to cservice@turtlesave.com.