This article summarises, in plain language, the most important parts of how facturillo handles your data. It is a summary: the documents that govern are the Privacy Policy and the Terms of Use, and every point below links to them so you can read the full text.
The essentials
- facturillo does not sell or rent your personal information or your identifiable receipts.
- Aggregated, irreversibly anonymised statistics can be shared or sold to trusted partners and data brokers. They carry no identifiers and cannot be traced back to you.
- You can request access, correction or deletion of your data at any time.
What data facturillo stores
Your electronic invoices. When you scan the QR, facturillo retrieves the official electronic invoice from the DGI, with the merchant, the items, the prices, the taxes and the totals.
Your profile and optional demographic details. Gender, age group and region are optional and are used to personalise your experience and for anonymous analysis.
Usage data and crash logs. Which features you use and which errors happen, so problems get fixed and the app improves.
Your subscription data, not your card. facturillo stores your plan and the billing dates. Payment details are handled by the App Store, Google Play and the subscription provider.
Advertising ID, on Android only. It is used to measure campaigns and you can switch it off in your phone settings. Nothing of the sort is collected on iPhone.
See «Data Collection» in the Privacy Policy ›
What it is used for
Your data is processed to run the app (retrieving your receipts, processing them, categorising merchants and products, and giving you your spending analysis), to improve it, to manage your subscription, and to produce aggregated anonymous market statistics.
If you joined Puntos Facturillo there is one further use worth knowing about: an anonymous profile of your buying behaviour is generated, with an encrypted identifier that does not identify you. It is used to personalise your offers and promotions, and its insights can be shared with trusted third parties, always in an anonymised form that does not reveal who you are. That use is optional and you authorised it when you joined the programme: you can withdraw consent at any time by leaving Puntos Facturillo or deleting your account. Being in the programme also means occasional promotional emails, always with a way to stop receiving them. Anyone who does not join the programme gets no anonymous profile and no personalised offers.
See «Data Processing and Use» in the Privacy Policy ›
Who it is shared with
facturillo does not sell or rent your personal information. These are the cases where your data leaves facturillo, and in what form:
Providers working on our behalf. Google Cloud and Firebase for hosting, analytics and crash-reporting tools, the provider that manages subscriptions, and Apple and Google for processing payments. All under confidentiality and security agreements.
Data partners and data brokers, anonymised information only. Statistics built from many people, with no personal identifiers and no way to trace them back to you or to contact you. These irreversibly anonymised statistics can be shared or sold for research, analytics or industry insight. If you joined Puntos Facturillo, the insights from your anonymous profile too, always in a form that does not reveal your identity.
Legal compliance. When the law or a valid legal process requires it, and only to the extent required.
Your identifiable receipts and personal details are not handed to third parties without your knowledge or your consent.
See «Data Sharing and Disclosure» in the Privacy Policy ›
If you share a family account
Everything in a family account (the receipts scanned into it, the pockets, the budgets, the analysis and the Puntos Facturillo activity) is visible to every member, and the app shows who scanned each receipt. If you leave the family, the receipts you scanned return to your personal account. If instead you delete your account, those receipts stay with the family account, because they are part of its shared records.
See «Shared Accounts (facturillo Familia)» in the Privacy Policy ›
If you connect an AI assistant or your accounting
Both connections are optional and you start them yourself. The AI assistant reads your receipts and receives data only in response to the questions you ask it. With the "Write permission" turned on in the app it can also add receipts and move one into a family or business account that allows it, and on your instruction it can manage your product baskets and price watch list, but it can never delete a receipt or edit what one contains. The accounting export runs one way and only for the receipts you choose. In both cases, from that point on the data is governed by the terms and policy of the provider you connected, and you can disconnect whenever you want.
See «AI Assistant Connections» and «Accounting Integrations» ›
Where it is stored and for how long
Your data is stored on Google Cloud servers in the United States. It is kept while you have the account, until you ask for it to be deleted. If you request deletion, your personal data is erased within 30 days and backups are purged shortly afterwards. Data that was already anonymised and aggregated cannot be deleted individually, because it no longer identifies you.
See «Data Storage and Retention» ›
Your rights
Access and portability. You can ask for a copy of the data facturillo holds about you, in a commonly used format.
Rectification. If something is wrong or incomplete, you can ask for it to be corrected.
Erasure. You can ask for your personal data to be deleted.
Objection. You can object to certain uses of your data, for example to receiving promotional communications.
To exercise them, write to privacy@facturillo.com from the email linked to your account and state your request clearly. It is free and the reply arrives within 30 calendar days. These rights can have exceptions provided by law, and if a request cannot be met you get an explanation of why.
See «User Rights» in the Privacy Policy ›
How to delete your data
There are three routes: the Delete my account option inside the app, a support request from the app, or an email to privacy@facturillo.com from the address linked to your account. The first two come from your signed-in session, so they serve as proof that the account is yours.
From Profile › Privacy you can also open the Privacy Policy and the Terms of Use inside the app, and leave Puntos Facturillo without deleting your account.
See «Data Deletion Process» in the Privacy Policy ›
How it is protected
Data travels and is stored encrypted (SSL/TLS in transit and encryption at rest) on Google Cloud infrastructure. Internal access is restricted to authorised staff, and the database rules mean your account can only read your own data. No system is 100% secure, so look after your credentials and tell us if you suspect any unauthorised access.
See «Security Measures» in the Privacy Policy ›