Your photos, your key, your data

What is stored

Your account, the assets you create and the photographs you take, on the server this installation runs on. Nothing is sold, shared with anyone you have not chosen, or used to train anything.

Sharing a property

Nothing is shared unless you share it. When you share a property with another account, that person can see, add, change and delete everything in that property - its photographs and receipts included - and nothing in your other properties. You can remove them at any time, and they can leave. Photos are always read with the AI key of whoever added the asset.

What is sent to an AI provider

When a photo is read, a resized copy of that photo is sent to the provider you chose - Anthropic or OpenAI - using the API key on your own account, and the answer comes back and is written to the record. That is the only thing that leaves, and it only happens when you add a photo or ask for one to be read again.

Because the key is yours, that request is billed to your account and governed by your agreement with that provider, not ours.

Your API keys

Stored encrypted, and only ever sent to the service they belong to. Clearing the field in Settings removes the key. With no key at all, photos are saved and simply not read.

Administrators

An administrator of this installation can see the list of accounts, and can sign in as one to help with a problem. When they do, a warning banner is shown for the whole of that session, and both the start and the end are written to the account activity log where you can see them.

Deleting things

Deleting an asset deletes its photographs with it. Ask an administrator to remove your account and everything on it goes.