Effective date: 27 July 2026 Last updated: 27 July 2026
This Privacy Policy explains how Warvo ("Warvo", the "App", "we", "us") handles information when you use the App. It is provided by Hilal Al Hinai ("the Provider"). If you do not agree with this Policy, please do not use the App.
Warvo helps you store receipts to protect warranties, returns, repairs and exchanges. By design, your receipts are stored locally on your device. We only process personal data beyond your device when you turn on optional features (cloud sync), when ads are shown in the free version, or when you make a purchase. We do not sell your personal information, and we do not require an account to use the App.
a) Receipt data you create (stored on your device). When you scan or add a receipt, the App stores on your device: the receipt image, text recognised from it, and any details you enter or confirm (product name, merchant, date, amount, currency, receipt number, warranty length and notes). This data stays in local storage on your device unless you enable Cloud Sync (section 1c) or use Share/Export.
b) Optical Character Recognition (OCR). Text is recognised from your receipt photos on your device using Google's ML Kit. The image is processed locally; it is not sent to us or to Google for OCR.
c) Cloud Sync (optional, off by default). If you enable Cloud Sync in Settings, your receipt data and receipt images are uploaded to and synchronised through Google Firebase (Cloud Firestore and Cloud Storage) so you can access them on your other devices. To do this we create an anonymous Firebase Authentication identifier for your app install; we do not collect your name, email or Google account. You can turn Cloud Sync off at any time. Google processes this data as our sub-processor; see Google's privacy documentation at https://firebase.google.com/support/privacy.
d) Advertising (free version only). The free version shows ads via Google AdMob. AdMob and its partners may collect and use device and advertising identifiers, IP address, and similar data to serve and measure ads, subject to Google's policies (https://policies.google.com/technologies/partner-sites). Upgrading to Premium removes ads. On iOS, ad tracking is subject to Apple's App Tracking Transparency; we do not track you across other companies' apps or websites without your consent.
e) Purchases and subscriptions. Purchases are processed by Apple (App Store) or Google (Google Play). We use RevenueCat to manage entitlements and validate purchases. RevenueCat receives an anonymous app user identifier and purchase/receipt information (such as product ID, purchase and expiration dates, and transaction identifiers). We do not receive your full payment card details. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy.
f) Notifications. Warranty reminders (a Premium feature) are scheduled and shown locally by your device. They are not sent from our servers.
g) Support. If you contact us (e.g. by email), we receive the information you provide, including your email address and message contents, to respond to you.
We do not operate our own analytics SDK, and we do not collect your contacts, precise location, health data, or browsing history.
We use the information described above to: operate core features (store, search, and display your receipts and warranty status); provide optional Cloud Sync; show ads in the free version; process and restore purchases and unlock Premium; deliver local reminders; respond to support requests; maintain security and prevent abuse; and comply with legal obligations.
Where GDPR applies, we rely on: performance of a contract (providing the App and features you request, including Cloud Sync and purchases); legitimate interests (security, preventing abuse, basic ad delivery where permitted); and consent (personalised advertising where required, and any optional feature you switch on). You may withdraw consent at any time by disabling the relevant feature.
We share information only with service providers acting on our behalf or that you engage by using a feature: Google (Firebase for Cloud Sync; AdMob for ads; Google Play for purchases), Apple (App Store purchases), and RevenueCat (purchase management). We may disclose information if required by law or to protect rights, safety and security. We do not sell your personal information, and we do not share it for cross-context behavioural advertising in a way that requires an opt-out under the CCPA.
Our service providers may process data on servers outside your country, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Receipts stored on your device remain until you delete them or uninstall the App. If Cloud Sync is enabled, synced data remains in your Firebase space until you delete the receipt (which removes it from the cloud) or request deletion. Purchase records are retained by the stores and RevenueCat as needed for their services and legal requirements.
Depending on where you live, you may have rights to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. California residents have rights to know, delete, and correct personal information and to not be discriminated against for exercising them; we do not sell or "share" personal information as defined by the CCPA.
You can exercise many of these rights directly in the App: delete individual receipts, disable Cloud Sync, or uninstall to remove local data. For other requests, contact us at [email protected]. We will respond within the time required by applicable law. EEA/UK users may also complain to their local data protection authority.
We use reasonable technical and organisational measures to protect information, including on-device storage and access controls on cloud data (each user can access only their own synced data). No method of storage or transmission is 100% secure.
Warvo is not directed to children and is not intended for use by children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date, and, where required, provide additional notice.
Hilal Al Hinai Email: [email protected]