Last updated August 11, 2026
Without an account, nothing you enter ever leaves your device. We have no copy of it. With an account, we store what is needed to sync your records between your own devices and to keep your receipt photos. We do not use any of it for advertising, we do not track you, and we do not sell or share it.
Children, expenses, funding sources, and receipt photos are held in your browser or, on the phone, in the app's own storage. None of it is transmitted to us. We cannot see it, recover it, or delete it for you, which is why the app asks you to keep backups.
On Chrome and Edge you can point the app at a folder on your computer, and it will keep your receipts there instead of inside the browser. That folder is ordinary storage on your own disk, the kind you can open in Finder or File Explorer. We never see it, we are never told where it is, and nothing written into it passes through us.
Alongside the photos, the app keeps two files in that folder up to date: expenses.csv, a plain spreadsheet of your expenses including children's names as you typed them, amounts, categories and notes, and receipts.json, which records which photo belongs to which expense. Both are written in the clear, so anyone who can reach that folder, or wherever you back it up, can read them. Choose a location you are comfortable with.
The browser gives the app access to the one folder you pick and nothing else on your computer, and it may ask you to confirm that again after you restart the browser. You can disconnect the folder at any time in Settings, which leaves every file in it exactly where it is.
Accounts live on the website. The phone apps, on iPhone and on Android, do not have them: neither one asks you to sign in, neither has a subscription, and nothing you enter into either is sent anywhere. Everything in this section describes using the site in a browser.
If you create an account, we store:
No advertising identifiers. No analytics or behavioural tracking. No location. No contacts. No third-party trackers of any kind. We do not sell or rent your information, and we do not share it with anyone except the infrastructure providers below.
Cloudflare hosts the service, the database, and receipt storage. Stripe processes payments. Both act on our instructions as service providers.
Expo delivers updates to the phone apps. When an app starts it asks Expo whether a newer version of the app itself exists, which tells Expo the kind of device asking and the network address it asked from. That is the only connection the app makes, and nothing you have entered is any part of it. Nobody else receives your data.
The app is used by parents and guardians, not by children. The only information about a child is what you choose to type. Most people use a first name or a nickname, and you are welcome to use initials. We do not knowingly collect information directly from children.
Without an account, use Settings → Reset all data, or clear your browser data.
If you have connected a folder, those files are yours and we leave them alone. Resetting the app does not delete them, and neither does disconnecting the folder. That is deliberate: once a receipt is in your folder it may be the only copy you have. Delete the folder yourself when you want it gone.
With an account, email support@cerrituslearning.com and we will delete your account and everything stored with it. You can export a full backup first.
If this policy changes in a way that affects what we collect, we will update the date above and say so in the app.
support@cerrituslearning.com