Security & Data Practices at Taxr

Taxr handles your business expenses, so you should know exactly how your data is treated, in plain language rather than legal fog. This page is the short version. The formal documents are the Privacy Policy and Deletion Policy.

The short version

• Your data travels encrypted, receipt images are stored encrypted, and your data is never sold.
• Receipt images are processed by an AI model under API terms that do not use your data for model training.
• We never ask for your bank login. Ever.
• Your expense records export to Excel or PDF at any time. Your records are yours.
• Deleting your account deletes your data.

How your data flows

Capture. You photograph a receipt, choose a photo from your gallery or import a PDF. The image travels to our servers over an encrypted connection (HTTPS/TLS).

Extraction. The image is read by a third-party AI service to extract the vendor, date, total, and tax. Under that provider's terms, your receipts are not used to train its models. The result appears on a review screen in your app, where you see and can correct what the AI read before it becomes a record.

Storage. Receipt images are stored encrypted, and your records are kept in our application database. Access is restricted to your signed-in account and to an accountant linked to your account through the accountant portal.

Export. Your categorized expenses export to Excel or PDF whenever you want, so a copy of your records can live outside Taxr. The PDF lists your receipts by category with their details. The Excel file also has a link to each receipt image, and those links expire 48 hours after the export, so download any images you want to keep.

What we never do

• No bank logins. Taxr works from receipts you choose to scan. We never ask you to connect a bank account, and we never see your banking credentials.
• No selling data. Your expense data is not sold, rented, or shared with advertisers. Our revenue is subscriptions: you are the customer, not the product.
• No payment card handling. Subscriptions are processed entirely by Apple's App Store and Google Play. Your card details never touch our servers.
• No silent sharing with accountants. An accountant sees your records only when they are linked to your account. We email you when an accountant invites you, the link shows in the app's Settings, and you can disconnect from them there at any time.

Account deletion

Deleting your account removes your receipts, records, and personal data from our systems, as described in the Deletion Policy. Export your records first if you want to keep them. Deletion is permanent, not a soft-hide.

Data retention and tax rules

Tax authorities generally require you to keep business records for several years (five years in Australia and the UK; at least three in the US). Taxr keeps your records for as long as your account exists, which makes those periods easier to meet. If you leave, export your records and download any receipt images you need first.

Questions or reports

Found a security issue, or want more detail before trusting us with your records? We'd genuinely rather you ask. Reach us through the contact page. Security reports get priority attention.

Last reviewed: October 2026. This page describes our practices in plain language; where it differs from the Privacy Policy, the Privacy Policy governs.