Privacy Policy

Effective date: 1 January 2026 · Last updated: 1 January 2026

1. Who we are

Traceipt (“Traceipt”, “we”, “us”) provides an NFC tap-to-receipt platform for merchants and a personal finance application for individuals in Singapore. This policy explains what personal data we collect, how we use it, and the choices you have. For any privacy question, contact our Data Protection Officer at kabir@traceipt.co.

2. Information we collect

Information you give us

Account details such as your name, email address and phone number.
Receipts and transactions you save, including merchant, items, amounts and timestamps.
Budgets, categories and notes you create in the app.
Messages you send us for support.

Information collected automatically

Device and app information (device type, operating system, app version).
Usage and diagnostic data that helps us keep the service reliable.

Linked financial information (optional)

If you choose to connect a bank account, CPF or investments, that connection is made through Singpass and SGFinDex. We receive the financial data you authorise; we never see or store your banking credentials.

3. How we use your information

To provide and operate Traceipt — saving receipts, tracking spending and budgets, and showing your dashboard.
To maintain security, prevent fraud and abuse, and troubleshoot problems.
To improve our products and develop new features.
To communicate with you about your account, updates and support.
To comply with legal obligations.

4. Aggregated and anonymised data

We may create aggregated and anonymised insights from usage and spending data — for example, trends across categories, merchants or regions. This information is stripped of identifiers and cannot reasonably be used to identify you. We may use, publish, share or license these aggregated, anonymised insights, including with commercial partners. Aggregated, anonymised data is no longer personal data under the PDPA.

5. When we share information

Service providers who host and operate Traceipt on our behalf, under confidentiality obligations.
Singpass & SGFinDex when you choose to link financial accounts.
Legal and safety reasons, where required by law or to protect rights and safety.
Business transfers, if Traceipt is involved in a merger, acquisition or sale of assets.

We do not sell data that identifies you personally.

6. Security

Your data is encrypted in transit and at rest, on infrastructure hosted in Singapore. We apply access controls and monitoring, and review our practices regularly. No method of transmission or storage is perfectly secure, but we work hard to protect your information.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service, and thereafter only as required for legal, accounting or legitimate business purposes. You can delete your data at any time (see below).

8. Your rights under the PDPA

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Withdraw consent for processing, where applicable.
Delete your account and associated personal data.

To exercise any of these, email kabir@traceipt.co. We will respond within the timeframes required by the PDPA.

9. Children

Traceipt is not directed to children under 13, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above; significant changes will be communicated in-app or by email.

Questions about your privacy? Contact our DPO at kabir@traceipt.co. See also our Terms of Service.