JustMyTab privacy policy
Last updated: 7 November 2026
JustMyTab is an app for scanning receipts and splitting the bill. This policy explains what data it uses, why, where it is stored and how you can delete it. JustMyTab shows no ads, does not use the advertising ID, has no analytics tools and does not sell your data.
1. Who is responsible
Iván Bernal García, developer of JustMyTab. Contact: support@justmytab.com.
2. What data we use and why
Receipt photos. When you scan a receipt, the app sends the photo to the JustMyTab server, which passes it to Google Gemini to read the shop, items and prices. Before sending it, the app re-encodes the photo, which removes its metadata (such as location or phone model). If you ask for a receipt to be read again, the text you type to help is sent too.
The server does not store the photo or the result. For 7 days it keeps a fingerprint of the photo (a SHA-256 digest that cannot be turned back into the photo) and a scan id, so the same photo can be read again up to 3 times. Receipts you type in yourself are not sent to be read. Like any split, they only leave the phone in the cloud copy, if you have Pro (see "Cloud copy" below).
Account. The first time you open the app, an anonymous account is created in Firebase Authentication (Google) with a random id. It holds no name or email. It is used to count your free scans and so that only you can use your data.
If you sign in with Google (optional, needed for Pro), we store your name, your email and your Google account id, so Pro and your cloud copy follow you to other phones.
Scan counter. The server counts how many receipts you scan each month, by account id, to apply the free limit (5 a month) or the Pro one.
Cloud copy (Pro only). With Pro, your splits, groups and payments are copied to Cloud Firestore (Google), in the europe-southwest1 region (Madrid). They contain what you enter in the app: people's names, items, amounts, currency, dates, categories and group names. Receipt photos are never uploaded. Only your account can read or change your copy.
Pro subscription. Payment is handled by Google Play. We receive the purchase id and the subscription status (active, end date) to turn Pro on for your account. We never see your card or payment details.
Data on your phone. Your split history, groups, photos of saved splits and settings are kept in the app's private storage. If Android backup is on, splits, groups and settings are included in it; photos are not.
Technical logs. The server keeps short technical logs (errors, response times) to keep the service running. They contain no photos or receipt contents.
3. Legal basis
- Providing the service you ask for: reading receipts, your account, the cloud copy and Pro (performance of a contract).
- Preventing abuse and keeping the service secure: scan limits and technical logs (legitimate interest).
- Meeting legal obligations, such as invoicing subscriptions.
4. Who it is shared with
Only with providers working for us:
- Google Gemini API: reads receipt photos. We use the paid service, whose terms do not allow Google to use these photos to improve its products.
- Google Firebase (Authentication and Cloud Firestore): account and cloud copy.
- Google Play: subscription payments.
Some of these services may process data outside the European Economic Area. Google does so with the safeguards the GDPR provides for (standard contractual clauses and the EU-US Data Privacy Framework).
5. How long it is kept
| Data | Kept for |
|---|---|
| Receipt photo sent to be read | Not stored; used only while it is read |
| Photo fingerprint and scan id | 7 days (erased within the next hour) |
| Scan counter | The current month (erased within the first hour of the next one) |
| Account (id, name and email) | Until you delete the account |
| Cloud copy | Until you delete it, clear your history or delete the account. If Pro ends, it is kept and you can still delete it |
| Data on your phone | Until you delete it or uninstall the app |
6. Your rights
You can ask to access, correct or delete your data, object to or restrict its use, or receive it in a portable format, by writing to support@justmytab.com. If you think we are not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.
7. Deleting your account and data
- In the app: Settings → Account → Delete account. Your cloud copy, your data on the server and your account are deleted. The splits on your phone stay there.
- Without the app: follow the steps on this page.
- You can delete a split, a group or your whole history in the app at any time.
Deleting the account does not cancel a Google Play subscription: cancel it in Google Play → Payments & subscriptions.
8. Children
JustMyTab is not directed at children under 14.
9. Security
Communication with the server and with Google is encrypted (HTTPS). The cloud copy can only be reached with your account. No system is foolproof, but we take reasonable measures to protect your data.
10. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.