Privacy Policy
Last updated: 15 March 2026
1. Introduction
Reecit is operated by Southbank Software Ltd ("we", "us", or "our"). We are committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store, and protect your information when you use Reecit and our associated services. If you have any questions, please contact us at [email protected].
2. Information We Collect
Account Information
When you register for Reecit, we collect your name and email address to create and manage your account.
Receipt Data
When you upload receipts, we collect and process the receipt images along with data extracted via OCR, including text content, transaction amounts, dates, and store names.
Usage Data
We collect information about how you interact with our service, including pages visited, features used, and device information such as browser type and operating system.
3. How We Use Your Information
We use your information to:
- Operate and maintain the service — providing your account, storing your data, and delivering core functionality.
- Process and analyse your receipts — using OCR technology to extract, categorise, and organise your receipt data.
- Improve our service — understanding usage patterns to enhance features and user experience.
- Send service-related communications — account notifications, security alerts, and important updates about the service.
- Analytics — we use PostHog to understand how our site is used. Analytics cookies are only activated when you provide your consent via our cookie consent banner.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract — Processing that is necessary to provide the service you signed up for, including account management, receipt processing, and data storage.
- Consent — Analytics cookies (PostHog) are only activated when you opt in via our cookie consent banner. You may withdraw your consent at any time.
- Legitimate Interest — Service operation, security monitoring, and fraud prevention, where our interests do not override your fundamental rights.
5. Cookies
We use the following cookies on our website:
| Cookie Name | Purpose | Duration |
|---|---|---|
| reecit_consent | Stores your cookie consent preferences | 1 year |
| reecit_consent_given | Indicates whether consent has been recorded (used by the server) | 1 year |
| ph_* | PostHog analytics tracking (only set with your consent) | Session / 1 year |
You can manage your cookie preferences at any time using the "Cookie Settings" link in our website footer.
6. Data Sharing
We do not sell your personal data.
We may share your data with the following third parties:
- PostHog — analytics platform, hosted on EU servers.
- Cloud infrastructure providers — for hosting and data storage necessary to operate the service.
We may also disclose your personal data if required to do so by law or in response to valid requests by public authorities.
7. Data Retention
- Account data — retained for as long as your account is active.
- Receipt data — retained according to your account settings. Upon account deletion, all receipt data is permanently deleted within 30 days.
- Analytics data — anonymised after 12 months.
8. Your Rights (GDPR Articles 15-22)
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — You may request a copy of the personal data we hold about you.
- Right to rectification — You may request that we correct any inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — You may request that we delete your personal data.
- Right to restrict processing — You may request that we limit how we use your data.
- Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
- Right to object — You may object to our processing of your personal data in certain circumstances.
To exercise any of these rights, please email us at [email protected]. We will respond to your request within 30 days.
9. International Transfers
Analytics data is processed by PostHog on EU servers. Our infrastructure is hosted in European data centres where possible. Where data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with GDPR requirements.
10. Children''s Privacy
Our service is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through an in-app notification. The "Last updated" date at the top of this page will be revised accordingly.
Your continued use of Reecit after any changes to this policy constitutes your acceptance of the updated terms.
12. Contact & Complaints
If you have any questions or concerns about this Privacy Policy or our data practices, you can reach us at:
- Email: [email protected]
- Postal: Southbank Software Ltd (address to be confirmed)
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner''s Office (ICO):