Last updated: November 2026
Your account email, receipts you scan or enter manually, purchased items, amounts, store names, purchase dates, custom categories and pantry stock.
Only to show you your spending, charts, store reports and reorder alerts. Your data is never used for advertising or sold to anyone.
The receipt photo is sent to an AI service to read the text and translate the items. The result is saved in your account and the photo stays in your account's private storage.
Connections are encrypted and database security rules let each user see only their own rows. No other user can access your data.
At any time, on the Settings page, you can export all your data to Excel, delete items, or permanently erase your account and all data.
Data controller: Mehdi Shamoli Salahchini, 5 rue de la Zorn, 67300 Schiltigheim, France. Email: torneh.persian@gmail.com. Payments are processed by Paddle.
Last updated: October 29, 2026
Controller: Mehdi Shamoli Salahchini, trading as "Maliqo", 5 rue de la Zorn, 67300 Schiltigheim, France, is the data controller for personal data processed through Maliqo. Contact: torneh.persian@gmail.com.
Data we collect and why: (a) account data — email and login credentials — to create and secure your account (contract); (b) your content — receipts and receipt photos, purchased items, amounts, store names, purchase dates, categories, pantry stock, budgets and shopping locations — to provide the Service (contract); (c) support and feedback messages — to answer you (contract / legitimate interest); (d) usage and device data — pages visited, app version, device model, country and IP address — for security, fraud prevention and product improvement (legitimate interest). Your data is never sold or used for advertising.
Receipt photos: a receipt photo is sent to an AI service to read its text and translate items into your language; the photo stays in your private storage.
Sharing: we share data only with (1) service providers that host and run the Service (cloud hosting, database, AI text recognition); (2) Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing, and Google Play for in-app purchases; (3) professional advisers (legal, accounting) where needed; (4) authorities where required by law.
International transfers: some providers may process data outside the EEA; in that case transfers rely on adequacy decisions or Standard Contractual Clauses.
Retention: we keep your data while your account is active. When you delete your account, your data is permanently deleted; usage logs are deleted or anonymised when no longer needed. Records required by law (e.g. tax) are kept by the payment provider for the legally required period.
Your rights (GDPR): access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can export or delete your data in Settings or email us; we reply within one month. You may also complain to the CNIL (cnil.fr) or your local supervisory authority.
Security: encrypted connections, access controls ensuring each user can only access their own data, and private file storage.
Cookies: we use only essential storage needed to keep you signed in and remember settings. We do not use advertising cookies.