Privacy Policy

Last updated 21 July 2026

Operating entity: Donovan Price trading as Zippl · ABN 63 420 101 424

1. About us and this policy

Zippl is operated by Donovan Price trading as Zippl (ABN 63 420 101 424) ("we", "us", or "our"). We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy outlines how we collect, use, store, process, and disclose your personal information when you use our mobile application and related services ("Zippl").

2. What data we collect and why

To provide receipt parsing, bill splitting, and multi-device synchronization, we collect and process the following categories of data:

• Receipt photos & extracted details: When you capture or upload a receipt, the image is processed to extract merchant details, transaction date, line items, tax (GST), tips, and total amounts.
• Account identifiers: Your Apple ID identifier (when using Apple CloudKit) or Supabase account credentials (for subscribed users) to authenticate you and manage your data tier.
• Split & participant metadata: Participant names or labels, item allocations, and shared split links required to enable bill splitting functionality.
• Device & usage metrics: Basic diagnostic logs and notification tokens (Apple Push Notification service) to deliver processing alerts and split update notifications.

3. How we process receipt photos (AI extraction)

When you scan a receipt, the photo is transmitted via secure API to Anthropic's Claude API for optical character recognition (OCR) and structured data extraction. Anthropic processes the image strictly to return extracted text data to Zippl. See Anthropic's privacy policy for how they handle data sent to their API.

No AI model training: Neither Zippl nor Anthropic uses your uploaded receipt content or images to train public artificial intelligence or machine learning models.

4. Storage architecture & backend providers

Zippl manages and stores data based on your user tier:

• Free Plan: Your receipts and splits are stored locally on your device and in your personal iCloud container via Apple's CloudKit. This data is associated with your Apple ID, governed by Apple's privacy policies, and is not accessible to us.
• Subscribed Plan (Zippl Plus): Your account metadata, receipt extraction details, and shared split records are hosted with Supabase (a managed cloud database provider) to support cross-device synchronization and web-based sharing (via QR code or link) with users outside your iCloud network.

5. Data location and cross-border transfers (APP 8)

We process and store information using infrastructure located in Australia, Japan, and the United States:

• Application & API hosting (Australia): Our backend application and API run on cloud infrastructure located in Australia (Sydney), which processes your data in transit to deliver the service.
• Cloud database — Supabase (Japan): For subscribed users, account identifiers, structured receipt data, and shared split records are stored on Supabase cloud infrastructure located in Japan.
• AI extraction — Anthropic (United States): Receipt images uploaded for automated extraction are processed via Anthropic's API infrastructure, primarily in the United States.

Where data is processed or stored internationally, we take reasonable steps to ensure that overseas recipients handle your personal information securely and in accordance with standards substantially similar to the Australian Privacy Principles.

6. Sharing bill splits

When you share a split via a QR code or link, anyone who holds that link can view the line items on that specific receipt and claim their respective portions. Access is strictly scoped to that individual split and does not grant access to your broader receipt history or personal account details. Shared split links expire automatically after a limited duration.

7. Push notifications

If you grant notification permissions, we use Apple Push Notification service (APNs) exclusively to alert you when a receipt finished processing or when a participant updates item allocations on a shared split. We do not send marketing or promotional push notifications.

8. Your rights: access, correction, and data erasure

You can view, edit, or delete individual receipts and split records directly within the Zippl app at any time. Deleting your account removes your stored records from our active database (CloudKit or Supabase), subject to standard backup retention windows.

Under the Australian Privacy Principles, you have the right to request formal access to or correction of personal information held by us. To lodge an access or correction request, please contact us at privacy@zippl.au.

9. Exporting and external backups

Zippl provides export tools allowing you to download a backup copy of your receipt data and original images to your local device or iCloud Drive. Once exported, these files reside outside Zippl's system under your direct control, and maintaining backup security is your responsibility.

10. Privacy complaints & OAIC escalation

If you have a query or complaint regarding how your personal information has been handled, please contact us at privacy@zippl.au. We will investigate your concern and respond in writing within 30 days.

If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

11. Contact us

Privacy Officer — Zippl
Donovan Price trading as Zippl (ABN 63 420 101 424)
Email: privacy@zippl.au
Web: https://zippl.au