Privacy Policy

GrabSet ("we", "us", or "our") is a mobile application designed with privacy as its foundation. GrabSet operates entirely on your device. We do not operate servers that receive, process, or store your personal data, receipt images, or financial information. This Privacy Policy explains what minimal information we may access, why, and your rights as a user. By downloading and using GrabSet, you agree to the practices described here.

GrabSet is built around a strict no-collection principle. We do not collect, transmit, or store: • Your name, email address, phone number, or any account credentials — GrabSet requires no account and has no sign-up flow. • Your receipt images or the data parsed from them (merchant name, amounts, dates, categories). • Your spending habits, financial history, or expense patterns. • Your device's precise location. • Any analytics or usage telemetry identifying you personally. • Any chat messages you send to the on-device AI assistant. All AI inference — including OCR parsing and conversational queries — runs locally on your device using on-device models. No receipt data is sent to any external API or server.

GrabSet stores all data locally on your device, under your full control: • Receipt images are saved to your device's photo library in a dedicated GrabSet album. • Parsed receipt data (merchant, amount, date, category, notes) is stored in a JSON sidecar file alongside each image in your gallery. • Your chosen AI model files are downloaded once and stored locally. No queries are sent externally. • App settings and preferences (model tier, category overrides) are stored in local app storage only. You can delete this data at any time by deleting individual receipts within the app, removing the GrabSet album from your gallery, or uninstalling the app entirely.

GrabSet uses anonymous device-based subscriptions managed entirely through Apple App Store (iOS) and Google Play Store (Android). Subscription purchases are processed by Apple or Google — not by GrabSet. • We do not receive or store your payment card details. • We do not receive your Apple ID or Google account information. • We do not link a purchase to any personal identity. • The only information we receive from Apple/Google is an anonymous subscription receipt token, used solely to verify your subscription status on-device. Your purchase history is governed by Apple's Privacy Policy (iOS) or Google's Privacy Policy (Android).

GrabSet offers multiple AI model tiers (Basic through Max). When you select a model, it is downloaded from a model distribution server and stored locally on your device. During download, standard network metadata (your IP address, device OS, and model identifier requested) may be temporarily logged by our CDN provider for operational purposes such as abuse prevention. These logs are not linked to your identity and are purged within 30 days. Once downloaded, all AI inference — including receipt parsing and conversational queries — runs entirely offline. Your receipt content and chat queries are never transmitted during inference.

On Android, GrabSet can monitor your GrabSet photo album in the background and display notifications when new receipts are detected. This is a fully local operation: • Image detection and parsing happen on-device. • Notification content (merchant name, amount) is generated locally and displayed by your device's OS. • No receipt data is transmitted to our servers to generate or deliver notifications. You can disable background monitoring and notifications at any time in your device's app settings.

To improve stability, GrabSet may collect anonymous crash reports. These reports contain: • The type and location of the crash within the app's code. • Your device model and OS version. • App version number. Crash reports do NOT contain receipt images, parsed data, AI chat content, or any information that could identify you. If crash reporting is included in your version of GrabSet, it is disclosed in the App Store / Play Store listing for that release.

GrabSet is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect any information from children. If you believe a child has used GrabSet in a way that raises privacy concerns, please contact us and we will address it promptly.

Because GrabSet stores all your data on your device, your data resides in whatever jurisdiction your device is physically located. We do not transfer personal data across borders. The only cross-border data flow is the anonymous model download described in Section 5, and anonymous crash reports if applicable.

Because we hold no personal data about you, most traditional data subject rights (access, rectification, erasure, portability) are exercised by you directly on your device: • Access & export: All your data is in your photo library as images and JSON files. You own it. • Erasure: Delete receipts in-app, remove the GrabSet album, or uninstall the app. • Portability: Your JSON sidecars are standard files you can copy, share, or import into other tools. If you have questions about crash data or model download logs, contact us using the details in Section 13 and we will respond within 30 days.

GrabSet may display links to third-party websites (for example, links to Apple App Store or Google Play Store documentation). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information to them.

We may update this Privacy Policy from time to time. Changes will be posted at grabset.com/privacy and reflected with an updated effective date. For significant changes, we will provide notice within the app. Your continued use of GrabSet after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or GrabSet's data practices, please contact us at: GrabSet privacy@grabset.com grabset.com