Privacy Policy Last updated: April 8, 2026 1. Who we are Return Policy is a return deadline calculator that helps you track return windows for purchases at 100+ retailers. This policy explains what data we collect, how we use it, and your rights. 2. What we collect Account data: - Email address and password (via Supabase Auth) Usage data: - Purchase dates, retailer selections, and calculated return dates you save to history - Active reminders and notification preferences Receipt and screenshot images: - Images you submit through the scan feature (not available on the free plan; requires an active 90-Day Pass or scan credits from a Credit Bundle) Payment data: - Stripe customer ID - Purchase history (pass or bundle, date of purchase) - We never see or store your card number — Stripe handles payment details directly Credit balance data: - scan_credits, history_credits, reminder_credits remaining in your account - pass_expires_at if you have an active 90-Day Pass 3. How we use your data - To provide return date calculations and saved history - To track and apply your purchased credits and pass access - To send reminder emails you have explicitly requested - To process and verify your one-time purchases via Stripe - We do not sell your data, use it for advertising, or share it with third parties except as described in section 5 4. Receipt and screenshot images When you use the scanning feature your image is: - Sent to Google Cloud Vision API to extract store name and purchase date. Google processes and discards the image per their Cloud data processing terms — they do not retain it - Stored in a private encrypted storage bucket accessible only to your account - Displayed back to you within your saved return history - Never shared with other users or third parties beyond the processing described above We store the full image as you photographed or uploaded it. This may include item names, prices, payment method, and other information visible in the image. We do not read, analyze, or use this information beyond displaying it back to you. Each successful scan consumes one scan credit from your account balance. 5. Third parties we use - Supabase — authentication, database hosting, and encrypted file storage for receipt images https://supabase.com/privacy - Google Cloud Vision — OCR processing for receipt and screenshot scanning. Images are sent for text extraction and discarded by Google per their Cloud data terms https://cloud.google.com/terms/data-processing - Stripe — one-time payment processing for the 90-Day Pass and Credit Bundle. We never see your card number. https://stripe.com/privacy - Resend — transactional email delivery for reminders https://resend.com/privacy - Novu — reminder notification scheduling and delivery https://novu.co/privacy - Vercel — application hosting https://vercel.com/legal/privacy-policy 6. Purchase records We retain records of your purchases (product type, date, Stripe customer ID) for accounting and support purposes. These records are retained for 7 years in compliance with standard financial record-keeping requirements even after account deletion. 7. Data retention All personal data other than purchase records is retained as long as your account exists. When you delete a history entry the associated receipt image is permanently deleted. When you delete your account all data including images, credits, and pass status is permanently deleted within 30 days. Purchase records are retained as described in section 6. 8. Your rights You can view, update, or delete your data at any time by managing your history in the app or deleting your account. For requests not covered by in-app controls contact us at support.returnpolicy@gmail.com. If you are in the European Union you have additional rights under GDPR including the right to access, correct, port, and erase your personal data. Contact us at support.returnpolicy@gmail.com to exercise these rights. If you are a California resident you have rights under CCPA including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. 9. Children Return Policy is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us data contact us at support.returnpolicy@gmail.com and we will delete it promptly. 10. Security We use industry-standard security measures including encrypted storage, access controls, and private storage buckets for receipt images. No method of transmission or storage is 100% secure. We cannot guarantee absolute security but take reasonable steps to protect your data. 11. Changes We may update this policy at any time. We will notify you of material changes via email at least 7 days before they take effect. 12. Contact support.returnpolicy@gmail.com Return Policy (ReturnCalc)