Bosca Expenses
Privacy Policy
Bosca Expenses ("Bosca", "we", "our") is a product of Red Rock Tower Ltd, a company registered in Ireland (CRO 815834). This page describes what data we collect when you use Bosca, where it is stored, and what your rights are. We aim to keep this short and plain-language; if anything here is unclear, email support@boscaexpenses.com.
What Bosca stores
- Account: if you sign in, your Google or Apple account email and unique user ID.
- Scan allowance: a count of the receipts you have scanned this month, and a one-way hash of your Google or Apple sign-in identifier that we use only to enforce the monthly allowance. The hash cannot be turned back into your account details.
- Receipts you scan: the photo and the structured data extracted from it (merchant, amount, date, line items, VAT).
- Where receipts are stored: on your device, and — if you enable backup — in your Google Drive, in a folder Bosca creates. Bosca does not keep a separate copy on our servers for Free or Pro users.
- Business tier only: receipts are additionally stored in our cloud database so they can be shared with your accountant. This applies only if you join a Business workspace via invite code.
- Diagnostic logs: if you opt in via the in-app setting, we receive crash and usage logs to fix bugs. These do not contain receipt contents.
How we scan receipts
When you scan a receipt, the image is sent to Google's Gemini AI service (operated by Google Cloud) for processing. Google processes the image to extract structured data and returns it to Bosca. Google does not retain the image for training. See Google's data processing terms for details.
So that a scan finishes even if you lock your phone, the receipt image is uploaded to Bosca's servers (Google Cloud, EU region) for the duration of the scan. The uploaded copy is deleted as soon as the result reaches your phone, and in any case within 7 days.
What we do not do
- We do not sell your data to third parties.
- We do not show ads.
- We do not track you across other apps or websites.
- We do not read your Drive beyond the Bosca folder we create.
Payments
Subscription payments are handled by Apple (App Store), Google (Play Store), or Stripe (web). We never see or store your card details.
Your rights
Under GDPR, you can request a copy of your data, ask us to delete it, or withdraw consent at any time. You can export your expense data from the Reports screen in the app at any time. To delete your account and all your data, open Settings → Account → Delete account in the app, or follow the steps on our account deletion page if you no longer have the app. After deletion we keep only the hashed sign-in identifier and this month's scan count, for up to two months, so that deleting and re-creating an account cannot be used to reset the free allowance. It is not linked to any other data and is then removed automatically.
Children
Bosca is not intended for users under 13. We do not knowingly collect data from children.
Contact
Red Rock Tower Ltd
CRO 815834, Ireland
support@boscaexpenses.com