Legal
Privacy Policy
We built Bukti to make your financial records less stressful, not to turn your data into a product. This policy explains what we collect, why, and what we do with it.
Last updated: 15 May 2026Short version: We collect what we need to run the service. We don't sell your data. We don't share it with third parties except to operate the product. You can ask us to delete everything at any time.
1. Who we are
Bukti is an app built and operated in Singapore. When this policy refers to "Bukti", "we", "us", or "our", it means us.
We are the data controller for the personal data we process. If you have questions, contact us at privacy@bukti.app.
2. What we collect
Information you give us
- Account details — your email address and password when you sign up.
- Receipt data — photos, email forwards, and documents you submit. This may include merchant names, amounts, dates, and other details visible on your receipts.
- Payment information — billing details when you upgrade to a paid plan. Card details are processed directly by our payment provider and never stored on our servers.
Information we collect automatically
- Usage data — pages visited, features used, and actions taken within the app.
- Device data — browser type, operating system, and IP address.
- Cookies — see our Cookie Policy for details.
3. How we use your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Running the service and your account | Email, receipt data | Contract |
| Processing and categorising receipts | Receipt images and content | Contract |
| Sending transactional emails (exports, receipts) | Email address | Contract |
| Processing payments | Billing details (via payment provider) | Contract |
| Improving the product | Anonymised usage data | Legitimate interest |
| Sending product updates (optional) | Email address | Consent |
4. How we process your receipts
When you submit a receipt, it is processed automatically to extract key details such as the merchant name, date, and amount. This processing uses third-party AI services. Your receipt content is sent to these services solely to perform this extraction and is not used to train their models.
We do not read your receipts manually unless you contact us for support and specifically ask us to look at a record.
5. Who we share data with
We do not sell your personal data. We only share it with the third-party services we use to operate the product:
- Cloud infrastructure — to host the application and store your data securely.
- AI processing services — to read and categorise your receipts.
- Payment processing — to handle billing for paid plans.
- Email delivery — to send you export packs and account notifications.
- Analytics — to understand how the product is being used (anonymised).
All third-party providers are contractually required to handle your data securely and only for the purposes we specify.
We may also disclose data if required to do so by law, or to protect the rights, property, or safety of Bukti, our users, or others.
6. Data retention
We keep your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.
Anonymised and aggregated data (with no way to identify you) may be retained indefinitely for product improvement purposes.
7. Your rights under the PDPA
Under Singapore's Personal Data Protection Act (PDPA), you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate personal data.
- Withdraw consent for data processing where consent is the legal basis.
- Request deletion of your personal data.
To exercise any of these rights, contact us at privacy@bukti.app. We will respond within 30 days.
8. Security
We use industry-standard measures to protect your data, including encryption in transit and at rest. No system is completely secure, but we take reasonable steps to keep your information safe.
If you believe your account has been compromised, contact us immediately at privacy@bukti.app.
9. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or with a notice in the app before the changes take effect. The date at the top of this page reflects when it was last updated.