HSA Receipt Tracker
Back to home

Privacy Policy

Last updated: June 30, 2026

Limited private beta. HSA Receipt Tracker is currently available to a small, invite-only group of users while we test and refine the product. Features, data handling, and this policy may change during the beta. Please treat the Service accordingly and keep your own copies of anything important.

The short version. HSA Receipt Tracker helps you find and organize medical receipts so you can reimburse yourself from your Health Savings Account. To do that we need access to some sensitive information. Here is our promise: we ask for the narrowest access possible, we read only messages that look like medical receipts, we store your document backups in your own Google Drive, and we never sell your data or use it for advertising. You can disconnect any account or delete your data at any time.

Who this policy covers

This Privacy Policy explains how HSA Receipt Tracker (“we,” “us,” the “Service”) handles information when you use the app at hsa.kyokoandmarc.com. HSA Receipt Tracker is a personal, independently operated tool. It is not affiliated with, endorsed by, or sponsored by Google, Microsoft, Anthropic, the IRS, or any HSA custodian or health plan.

Information we collect

1. Account & identity

When you sign in with Google, we receive your name, email address, and profile photo. We use this to create your account and identify you when you log in. Signing in requests only basic identity (“openid email profile”) — nothing more.

2. Email you choose to scan

If you connect Gmail or Outlook to scan for receipts, we request read-only access to your mailbox (gmail.readonly / Mail.Read). We cannot send, delete, or modify your email. Before sending any message to AI for analysis, we apply a keyword pre-filter so that only messages that look like medical receipts, invoices, or Explanations of Benefits are examined in detail. The overwhelming majority of your inbox is never read or sent anywhere.

3. Receipt & expense data

From the receipts you upload or that we find in your email, we extract and store structured information such as: the date of service and payment, the provider or institution, an expense category (for example dental, vision, or pharmacy), the amount and currency, a short summary, line items, and — where present on the document — a patient name. This is health-related financial data, and we treat it accordingly.

4. Document backups

The original receipt files (images and PDFs) are stored in a dedicated folder inside your own Google Drive. We use Google’s drive.file scope, which means the app can only see and touch files it created — it has no access to the rest of your Drive. We keep a reference (a file ID and content hash) so we can link a claim to its backup and detect duplicates.

5. Connection tokens

To keep your connected services working, we securely store the OAuth access and refresh tokens Google and Microsoft issue. These are used only to perform the actions you authorized (reading receipt email, writing backups to your Drive) and are never shared.

6. Operational data

We store settings and housekeeping data such as your scan date range, your HSA start date, when your last scan ran, and a summary of results. We do not use third-party analytics, advertising trackers, or behavioral tracking cookies. We use only the essential cookie required to keep you logged in.

How we use your information

  • To find, parse, categorize, and organize your medical receipts.
  • To back up your receipt documents to your Google Drive.
  • To detect duplicates and match documents to the correct expense.
  • To show you which expenses are still eligible to reimburse and to flag receipts dated before your HSA was established.
  • To send you service email, such as a scan-completion summary.

We do not use your data to train our own models, we do not sell or rent it, and we do not use it for advertising or profiling.

When we share data with third parties

We share only what is necessary to run the Service, and only with the providers below. We do not sell data to anyone.

  • AI parsing providers. To read a receipt, the document image or its extracted text is sent to an AI provider — Anthropic (Claude), Google (Gemini), or MiniMax — depending on the app’s configuration. They process the content to return structured data and, per their business terms, do not use it to train their models. Only content that has passed the medical-receipt filter is sent.
  • Google. For sign-in, optional Gmail scanning, and Drive backups, under the scopes described above.
  • Microsoft. For optional Outlook scanning, under read-only mail access.
  • Infrastructure. Structured data is stored in a PostgreSQL database (hosted by Neon) and the app runs on a private server. These providers host data on our behalf and do not access it.
  • Legal. We may disclose information if required by law or to protect the safety, rights, or property of users or the public.

Household sharing

HSA Receipt Tracker lets you invite household members so a couple or family can manage HSA receipts together. If you accept or send an invitation, the receipts in that shared household are visible to the other members you are linked with. Only invite people you intend to share this information with.

Data retention

We keep your data for as long as your account is active so the Service works. You can delete individual receipts at any time. When you delete a receipt, its record is removed from our database; the backup file in your Google Drive remains under your control and can be removed by the app or by you directly. If you want your entire account and its data deleted, contact us and we will remove it.

Your choices and controls

  • Disconnect a service. You can revoke the app’s access to Gmail, Outlook, or Google Drive at any time from your Google or Microsoft account security settings, and from within HSA Receipt Tracker.
  • Access & export. Your document backups already live in your own Google Drive. Contact us for a copy of the structured data we hold about you.
  • Delete. Delete individual receipts in the app, or request full account deletion.

Security

Connections use encryption in transit (HTTPS). Access tokens are stored securely and access to our systems is restricted. No system is perfectly secure, but we design the Service to hold the minimum data needed and to keep your original documents in storage you already own and control.

A note on health information & HIPAA

HSA Receipt Tracker is a personal finance tool that you use for your own records. It is not a covered entity or a business associate under HIPAA, and it does not provide medical, tax, or legal advice. Confirm the eligibility of any expense with your HSA custodian or a qualified advisor before claiming it.

Children

The Service is intended for adults managing their own HSA. It is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Continued use of the Service after a change means you accept the updated policy.

Contact us

Questions about your privacy or this policy? Email us at privacy@kyokoandmarc.com.