Tabii Privacy Policy

Last updated: August 29, 2026

Tabii ("the app") is developed by TL Dynamics Ltd. ("we", "us"). This policy explains what data Tabii collects, how it's used, and your choices.

Data stored on your device

Receipt data you capture or import (photos, extracted amounts, dates, vendors, categories) is stored locally on your device in a local database and file storage. This data is not uploaded to our servers except as described below.

Camera

Tabii uses your device camera to photograph paper receipts. Photos are processed to extract receipt details and stored locally on your device.

Gmail access (optional)

If you choose to connect your Gmail account, Tabii requests access to your email via Google's OAuth sign-in, in order to find and import receipts sent to your inbox. In addition to reading messages, Tabii creates a "Receipts" label in your Gmail account and applies it to emails it identifies as receipts, so they're also easy to find directly in Gmail. Tabii never removes labels, marks messages read/unread, deletes messages, or sends/drafts email. We do not store your Gmail password — authentication is handled entirely by Google. You can revoke this access at any time in your Google Account settings.

Google Drive backup (optional)

If you enable receipt backup, Tabii can save a backup of your receipt data — including your receipt database, receipt images, and receipt PDFs — to a "Tabii Receipts" folder in your own Google Drive, using a Google-provided permission that only allows Tabii to access files it created itself — Tabii cannot browse or access any other files in your Drive.

AI receipt processing

To extract structured data (amount, date, vendor, items) from a receipt photo or email, the receipt content is sent to a third-party AI service via our processing server. This content is used only to extract receipt details and is not used to train AI models by us.

Notifications

Tabii may send local notifications (e.g., reminders to log a receipt). These are generated on your device and do not require sending data to us.

Data we do not collect

We do not sell your data. We do not collect data for advertising purposes. We do not have access to your locally stored receipt database.

Data protection

Encryption. All data sent between your device and our services is encrypted in transit using HTTPS/TLS. Receipt data stored on your device is protected by your device's built-in storage encryption (Android File-Based Encryption on Android, or iOS Data Protection on iPhone). Google account credentials (OAuth tokens) receive stronger protection — they are encrypted using your device's secure hardware-backed keystore (Android Keystore or iOS Keychain) via expo-secure-store, separate from general app storage.

Access controls. Your receipt database lives only on your device; we have no server-side access to it. Gmail and Drive access is granted by you through Google OAuth, scoped to what each feature needs — reading receipt emails and applying a single "Receipts" label to support the label-based inbox view, and writing only to an app-created "Tabii Receipts" Drive folder for optional backup. Our processing server is authenticated and rate-limited, and our third-party AI service receives receipt content solely to extract structured data — never for training. Tabii also offers an optional biometric or PIN app-lock to protect sensitive data on your device.

Retention. Receipt data stays on your device until you delete it or uninstall the app. OAuth tokens remain until you revoke access in your Google Account settings. AI providers process receipt content per their API terms and do not retain it beyond their standard processing.

Data deletion

You can delete your receipt data at any time by uninstalling the app, which removes the local database and files. To revoke Gmail access, remove Tabii from your Google Account's third-party app permissions.

Contact

Questions about this policy? Contact us at info@tldynamics.ca.