Privacy

Who we are

Leav (leavreceipts.com) is responsible for the personal data on this page, except where a shop is (see “Two roles”). Leav is not yet a company (BV). When it becomes one, we will update this page and tell everyone with a Leav account.

Questions about your privacy, or a request about your data: privacy@leavreceipts.com. We answer within one month.

Two roles

For a receipt a shop gives you through Leav, the shop is responsible for its customers’ data, and Leav processes it on the shop’s behalf, under an agreement with the shop.

For your Leav account, the receipts you save there, sign-ups for a shop’s newsletter and the pilot waiting list, Leav itself is responsible.

Your receipt

When you pay at a shop that uses Leav, the shop’s till system sends us your receipt: the shop, what you bought, the prices, VAT, any discount or tip, how you paid, the receipt number and the time.

How you paid means, for example, “Card” or “Visa ending in 4242”. We never receive your card number. We receive no name, email address, postal address or phone number from the shop’s till.

We use it only to give you your receipt. Why: the shop has to give you a receipt for your purchase, and asks us to do that digitally.

A receipt nobody saves is deleted automatically after 30 days, together with everything made from it: its PDF, its image and whether it was opened.

Collecting your receipt

When you collect a receipt at the counter, we place one functional cookie on your phone, so that the receipt opens only on the phone that collected it. It holds a random code, nothing about you, and expires after 24 hours.

To keep receipts out of the wrong hands, we also keep a scrambled (pseudonymised) version of that code and of the network address your phone used, for 2 days. Then they are deleted. Why: our legitimate interest, and the shop’s, in getting each receipt to the right person only.

Your Leav account

If you make a Leav account, we keep your email address, the receipts you save, what you add to them yourself (such as who you split a bill with), the lists you make and the notifications you choose. Signing in is handled by Clerk, so we never see your password.

If you add a paper receipt by taking a photo, the photo is read by an AI model run by our hosting provider, Cloudflare, only to type out the receipt. We don’t keep the photo; we keep the receipt it becomes, in your account.

If a shop has a loyalty card, the receipts you save from that shop count towards it. Your progress is worked out from your own account.

Why: to provide the account you asked for (our agreement with you). Your saved receipts stay until you delete them, or your account. You can delete your account yourself, in Settings on the website or in the app, and everything in it goes within 30 days. If your account runs a shop, we close the shop with you first. You can export your receipts as a CSV at any time.

What shops see

A shop sees the receipts it issued in the last 30 days, and whether each one was opened. It does not see who you are, your Leav account or your receipts from other shops.

Emails from a shop

Some shops offer their newsletter on the receipt page. Only if you tick the box and sign up do we pass your email address on to that shop: to its own mailing tool (such as Mailchimp or Brevo), or to a list the shop downloads from Leav. Leav never sends you a newsletter itself.

Why: your consent. You can withdraw it at any time by unsubscribing with the shop. With your sign-up we keep your email address, the time and the text you agreed to, as proof of your consent; not the receipt you signed up from. Ask us any time to remove it.

For shops that use Leav

For a shop’s account we keep the owner’s email address and the shop details the shop enters itself, such as its name, address, phone number, website, logo and receipt design. These appear on its receipts.

When a shop connects its till system (for example Shopify or SumUp), Leav reads its sales only to turn each sale into a receipt. From Shopify we read orders and store locations, nothing else. We never keep the names, email addresses, postal addresses or phone numbers of a shop’s customers. We use the sales for receipts only: never for marketing, and we never sell them.

The access to a shop’s till system is stored encrypted. Disconnecting, or uninstalling the Leav app in Shopify, stops it at once and deletes that access. Receipts already issued follow the days above.

Why: our agreement with the shop. A shop’s account is kept while it uses Leav; ask us to delete it when it stops.

The pilot waiting list

If you sign up for the pilot on leavreceipts.com, we keep your name, email address, store name and till system, and when you agreed to this. We use them only to contact you about the pilot. Why: your consent, which you can withdraw at any time.

They are deleted when the pilot has started, or within 12 months at the latest.

Cookies

We use functional cookies only: to keep you signed in, to open a receipt on the right phone, and while a shop connects its till system. There are no advertising, analytics or tracking cookies, so we don’t ask you to accept any.

Technical logs and security

Like every website, our servers record technical details of each visit, such as the time, the page, your browser or phone and your network address, to keep Leav running and to find faults. These logs are deleted after at most 7 days.

To stop misuse, such as too many sign-ups at once, we count requests per scrambled network address for at most two days.

Everything is encrypted on its way (TLS) and when stored. Only the people who build Leav have access, and only when needed.

Who we work with

We use these service providers, under agreements that oblige them to protect your data: Cloudflare (hosting, storage, making receipt PDFs, reading receipt photos, logs) and Clerk (signing in).

We also exchange data with the services a shop chooses itself: its till system, and the mailing tool it connects for its newsletter.

We never sell personal data and never use it for advertising. We only share it with authorities when the law requires us to.

Outside the EU

Cloudflare and Clerk are American companies, so your data can be processed in the United States. That happens under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can ask what we hold about you, and have it corrected, deleted, limited or given to you in a form you can take elsewhere. You can object to what we do on the basis of a legitimate interest, and withdraw a consent at any time (this does not undo what happened before). Email privacy@leavreceipts.com. Your account you can also delete yourself, in Settings.

For a receipt we hold on a shop’s behalf, we help the shop answer your request, or pass it on to the shop.

Leav takes no decisions about you by automated means. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

A Leav account is not meant for children under 16.

Changes

When we change this statement, we change the date at the top. If a change matters for people with a Leav account, we tell them by email before it takes effect.