Slip Vault — Privacy Policy

Last updated 21 August 2026

Slip Vault is operated by Zande Fintech Solutions (Pty) Ltd in South Africa. This policy explains what we collect, why, and your choices, in line with the Protection of Personal Information Act (POPIA).

What we collect

What we do not keep

Photos of your slips are never stored. When you scan, the image is sent for reading and then discarded — only the extracted text is saved to your vault.

Our reader is instructed not to record customer names, loyalty card numbers or cashier names from receipts, and we do not save them.

Why we use it

To read your receipts and store them so you can search, prove and keep them; to keep your vault attached to your account across devices; to find and fix reading problems; and, only if you opt in, to produce anonymous community price comparisons.

Community Price Check

This feature is optional and off by default. If enabled, we derive a product key, unit price, retailer and purchase month. We do not contribute your receipt, identity, exact date, branch, address or full basket. Retailer averages appear only after at least five distinct contributors match the same product and retailer.

You can turn sharing off in Profile. This deletes all community observations linked to your account while leaving your private slips and personal price history intact.

Who else sees it

To read a slip, the photo is processed by Anthropic and is not used to train models by default. Anthropic states that standard API inputs and outputs are deleted within 30 days, subject to legal and abuse-prevention exceptions. Our servers and database are hosted by Railway. Both operate outside South Africa, mainly in the United States. We do not sell your information or share your slips with retailers or advertisers.

How long we keep it

Your slips stay until you delete them or your account. Operational logs do not contain receipt line details. Railway currently retains deployment logs for 7 days on Hobby/Trial and 30 days on Pro; we do not export them to longer-term logging. Opted-in community observations remain until consent is withdrawn, the source slip is deleted, or the account is deleted.

Your rights

Under POPIA you may ask what we hold, correct it, delete it, object, or complain to the Information Regulator of South Africa. You can delete slips, community contributions and your account in the app.

Security

Passwords are hashed with bcrypt, traffic is encrypted in transit, and each vault is reachable only with your own session.

Children

Slip Vault is not intended for people under 18.

Contact

hello@zande.net