Privacy
Last updated 16 August 2026
Timbre reads the receipts you hand it and turns them into records you can file. This page describes exactly what that means for your data — what we hold, who else touches it, and how you get rid of all of it.
What we hold
| What | Why |
|---|---|
| Your email address and a password | So the account is yours and nobody else can open it. |
| The receipt images and files you capture, upload, or pick | They are the record. You can view, download, or delete any of them. |
| What we read off them — vendor, date, total, tax, payment method, category, line items | This is the product. |
| Business details you choose to enter — your name, business name, currency, business type | To label exports and totals. All optional. |
| An accountant's email address, if you enter one | Only to pre-fill the "send it to" field when you export. |
That is the whole list. There is no analytics package in the app, no advertising SDK, and no tracking of you across other apps or websites. We do not build a profile of you, and we do not sell or rent your data to anyone, ever.
Who else touches it
Three companies, each doing one job:
- Supabase stores your account, your records, and your receipt images. Images live in a private bucket; database rules tie every row and every file to your account, so one account cannot read another's.
- Railway runs the service that processes a receipt after you capture it.
- Anthropic receives the page images of a receipt so its Claude model can read the fields off them. It receives the image and nothing else — not your name, not your email, not your other receipts. Under Anthropic's commercial terms, inputs sent through their API are not used to train their models by default, and we do not grant permission for it. Their handling is described in Anthropic's privacy documentation.
When paid subscriptions begin, Apple and our billing provider will handle the payment. Card details go to them, never to us — we only ever learn whether a subscription is active.
What we never do
- Read a mailbox, a bank account, or a card feed. Timbre only ever sees what you hand it.
- Use your receipts to train any model, ours or anyone else's.
- Share your records with an accountant, a bookkeeper, or anyone else unless you export them yourself.
- Show you advertising, or let anyone target you based on what you spend.
Exporting
Spreadsheets and PDF reports are generated on your own device and handed to whatever you pick from the share sheet — mail, files, cloud storage. The export does not pass through us, and we keep no copy of it.
Deleting
Any single capture can be discarded from its review screen; the file and its record go together.
To close the account entirely, use Delete my account under Settings in the app. It removes your receipt images, your records, your business details, and your sign-in. It happens immediately, we keep no copy, and it cannot be undone — so export anything you need for taxes first.
How long we keep things
For as long as you keep the account, because the point of the product is that last year's receipts are still there at tax time. When you delete the account, the data goes with it. Backups roll off on their own schedule shortly afterwards.
Children
Timbre is a tool for running a business and is not directed at children. We do not knowingly collect data from anyone under 13.
Changes
If this policy changes in a way that affects what we do with your data, we will say so in the app rather than quietly editing this page.
Asking us something
Questions about your data, or a request to see or correct what we hold: info@hellotimbre.com.