Scan an invoice

Legal · Updated 30 September 2026

Privacy policy

What we collect when you sign in and scan an invoice, why we need it, who helps us handle it, and how to ask for it back or deleted.

01Who we are

Scan Invoice (“we”, “us”) runs this website and app and decides how your information is used. You can reach us about anything in this policy through the Help center.

02What we collect

When you sign in

  • Your wallet address, and the signature that proves you control it.
  • Your username (needed before your first scan), and anything else you add to your profile: a display name, an email address, a profile picture, and your X handle and X account ID if you connect X.
  • Who invited you, if you arrived through someone’s invite link.

When you scan an invoice

  • The photo you take in the app.
  • Where you scanned it, only if you allow it: your device’s location (latitude and longitude, and how precise that reading is) at the moment you send the photo. The app asks the first time you scan. You can say no, and turn it on or off on the camera screen at any time; scanning works the same without it, unless we require location for scanning, which the camera screen says before you take the photo. While it is on, the camera shows you the street address and a map of that point.
  • What we read from it: the store, its address, the date and time, the items, the total and currency, the invoice number, and other printed details such as the cashier’s name or the last digits of a payment card.
  • A fingerprint of the photo and of the purchase, so the same invoice can’t be claimed twice.
  • The result: accepted or refused, why, and any reward.

Other things

  • Rewards and holdings: your tier, your rewards, and your $INVOICE balance, which we read from the public blockchain, plus any payout wallet you link.
  • Support requests: what you write to us, your email if you give it, and our replies.
  • A notification subscription, only if you turn on notifications: the address your browser gives us for sending them to this device, stored with your wallet so we can tell you when an invoice in review is approved.
  • Technical details: your IP address and browser type, which our servers log. We use the IP address for rate limits and to spot many accounts run from one network.
  • A photo taken before you signed in is stored with a random ID for this browser until you sign in and claim it.

What we don’t collect

We don’t ask for your contacts or photo library, and the app can’t pick photos from your gallery. We don’t track your location: it is read only while the camera is open for a scan, and only if you allowed it. We never ask for or store your wallet’s recovery phrase or private key, and we don’t use passwords.

03How we use it

  • To sign you in and run your account.
  • To check that each invoice is real and hasn’t been claimed before (the location you allowed helps our team see that it was scanned where it was bought), and to work out and send your reward.
  • To prevent fraud and abuse, such as fake invoices, reused photos and farms of accounts.
  • To answer your support requests.
  • To keep the service secure and working, and to fix problems.

04Who we share it with

We don’t sell your information and we don’t share it with advertisers. We use a few services to run Scan Invoice, and they handle data only to provide their service to us:

  • Hosting and database (Railway): everything on this page is stored on their servers.
  • AI reading (Anthropic): each invoice photo is sent to their model so it can read the printed details.
  • Maps (OpenStreetMap): when location is on, our server asks OpenStreetMap for the street address of that point (the point only, not who you are), and your browser loads the map images around it from OpenStreetMap.
  • Wallet connections (WalletConnect and MetaMask): if you sign in with “Connect EVM wallet” or with MetaMask on a phone, the request to your wallet app passes through their relay.
  • Notifications: if you turn them on, each one passes through your browser maker’s push service (for example Google, Apple or Mozilla) on its way to your device.
  • X: only if you choose to connect your X account.

We may also share information when the law requires it, or to protect people or the service from fraud or harm.

05What is public

  • On the blockchain: your wallet address, your $INVOICE balance and every reward sent to you can be seen by anyone, forever. That is how blockchains work, and we can’t hide or delete it.
  • Your profile: your username, display name, picture, X handle and the date you joined can be looked up by username or wallet address, for example by people you invite. Your email is only ever shown to you.

06How long we keep it

  • Invoice photos and scan records: for as long as your account exists, because they are how we stop the same purchase being claimed twice. If a photo is deleted, we keep its fingerprint (not the photo) for the same reason.
  • A photo taken before sign-in that is never claimed is deleted after 7 days.
  • Your sign-in lasts 30 days on each device, or until you sign out.
  • A notification subscription: until you turn notifications off, or your browser tells us it has ended.
  • Support requests: until the matter is closed and for as long as we may need to refer back to it.

07Security

Your data travels over encrypted connections, and only the Scan Invoice team can open the tools that show invoice photos. Your email, support requests and invoice history are shown only to your own signed-in session. No system is perfectly secure, so keep your wallet and your devices safe too.

08Your choices and rights

  • Change your display name, email or picture, or disconnect X, on the Profile screen in the app.
  • Turn location on or off on the camera screen when you scan, or block it for this site in your browser’s settings.
  • Turn notifications on or off on the Profile screen in the app, or block them for this site in your browser’s settings.
  • Ask for a copy of your information, or ask us to correct or delete it, through the Help center. Tell us the wallet address it’s about. We may need you to be signed in with that wallet to prove it’s yours.
  • Depending on where you live, you may have more rights, such as objecting to how we use your information or complaining to a data protection authority.

We can’t delete anything already recorded on a blockchain.

09Children

Scan Invoice is for people aged 18 and over. We don’t knowingly collect information from anyone younger. If you think a child has used it, tell us and we’ll delete their account.

10Other countries

The services we use may process your information outside your country, including in the United States. When they do, we rely on the protections they provide for that transfer.

11Changes to this policy

When we change this policy, we update the date at the top of the page. If a change matters, we will also say so in the app.