1. About This Policy
This Privacy Policy and Terms of Use ("Policy") is published by CORTEXA TECHNOLOGIES ("Cortexa", "we", "our", or "us"), the company that owns and operates the ShopSense mobile application ("App").
By downloading, installing, registering, or using the App, you agree to be bound by this Policy. If you do not agree, please do not use the App.
2. Information We Collect
We collect information you provide directly when creating or using your account:
- Full name and email address (required for account creation)
- Profile photo (optional)
- Login PIN (stored securely; not readable by Cortexa staff)
- Receipts you scan or enter manually — merchant, items, amounts, categories, and payment method
- Receipt images you upload or scan via the AI scan feature — saved so you can view or edit them anytime, including after reinstalling the app or switching devices
- Questions and messages you send to ShopSense AI chat
- Push notification preferences and quiet-hour settings
- Device type and OS version (for crash reporting and compatibility)
3. How We Use Your Information
We use your information to:
- Create and maintain your ShopSense account
- Turn your receipts into spending insights, trends, and summaries
- Power the AI receipt scanning and ShopSense AI chat features
- Send push notifications for reminders and updates you've opted into
- Support account recovery and PIN reset flows
- Improve App reliability, performance, and features
- Detect and prevent fraud, abuse, or unauthorised access
- Comply with applicable laws and respond to legal requests
4. Account and Identity
Your account is identified by your email address.
Your login PIN is used for local app authentication and account recovery. Cortexa does not store your PIN in plain text and cannot retrieve it on your behalf — if forgotten, a reset flow via email OTP is available.
5. Payments and the Pro Subscription
ShopSense does not process, hold, or transfer money for the expenses you track in the App — the App only records and analyses spending you've already made elsewhere.
If you choose to upgrade to the Pro plan, payment is handled differently depending on your platform:
- Android: payment is processed by Razorpay, a licensed and RBI-regulated payment gateway, as a one-time monthly charge — there is no auto-renewal; you choose to upgrade again manually each time it expires. Razorpay collects your card, UPI, or net-banking details directly — ShopSense never receives, sees, or stores your card number, UPI ID, or bank account details. Razorpay's own privacy policy governs how it handles your payment information.
- iOS: payment is processed by Apple through the App Store's In-App Purchase system, as an auto-renewing monthly subscription. Apple, not Cortexa, bills and manages this subscription — you can view, change, or cancel it anytime from your iPhone's Settings → your name → Subscriptions. Apple's own privacy policy governs how it handles your payment information.
6. User Responsibilities
By using ShopSense you agree to:
- Provide accurate information when creating your account
- Keep your login PIN confidential and not share it with others
- Use the App only for lawful personal expense-tracking purposes
- Not attempt to access other users' accounts or data
- Not use the App to harass, defraud, or harm any person
- Not reverse-engineer, copy, or redistribute any part of the App
Cortexa reserves the right to suspend or terminate accounts that violate these responsibilities.
7. Sharing of Information
Cortexa does not sell, rent, or trade your personal information.
We may share information only in these limited circumstances:
- Service providers: hosting infrastructure, database services, and Firebase Cloud Messaging (FCM) for push notifications
- Email delivery: verification codes, PIN-reset codes, security notifications, and other transactional emails are sent via Mailgun, our email delivery provider
- AI processing: receipt images are sent to Google Gemini API for OCR and parsing; this content is not stored by Google beyond the API call
- ShopSense AI chat: your chat questions and non-English translation are processed by a self-hosted AI model running on our own servers — this content is not sent to Google or any other third party
- Payment processing: if you upgrade to Pro on Android, your name, email, and payment details are shared with Razorpay, a licensed payment aggregator regulated by the Reserve Bank of India, solely to process that payment — Razorpay is not authorised to use this information for anything else. On iOS, your purchase is handled entirely by Apple through the App Store; Cortexa only receives confirmation that a valid subscription exists, never your card or Apple ID payment details
- Legal compliance: where required by Indian law, court order, or government authority
- Business transfer: in the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction with prior notice
All third-party providers are contractually required to protect your data.
8. Your Data Stays Private to You
ShopSense is a personal app — your receipts, spending insights, and chat history are visible only to you within your own account. We do not share your expense data with other ShopSense users.
If ShopSense ever introduces account-sharing or multi-user features, this Policy will be updated before those features are enabled.
9. Data Security
Cortexa applies the following security measures:
- All data is transmitted over encrypted HTTPS connections
- Passwords and PINs are hashed and never stored in plain text
- Receipt images are stored in a secure server directory, not in public storage
- Access to production databases is restricted to authorised personnel only
- Regular backups are maintained to prevent data loss
No system is 100% secure. While we take every reasonable precaution, Cortexa cannot guarantee absolute security against all threats.
10. Data Retention
We retain your data for as long as your account is active or as needed to provide the service.
- Account data is retained until you request deletion
- Receipt and expense history is retained to power your spending insights and history
- Receipt images are stored until you delete the associated receipt or request image removal
- ShopSense AI chat messages are automatically deleted after 90 days
- Backup copies may be retained for up to 90 days after deletion
- Data required for legal compliance may be retained longer as mandated by Indian law
To request deletion, contact us at support@cortexatech.in.
11. Your Rights and Choices
You have the following rights regarding your data:
- Access: View your account details and expense history within the App
- Correction: Update your name and profile details within the App
- Deletion: Request full account and data deletion by contacting support
- Notification control: Enable or disable push notifications in App settings
- Opt-out of analytics: Disable anonymous analytics sharing in Privacy settings
- Data portability: Request an export of your expense data by contacting support
To exercise any right, email support@cortexatech.in with your registered email address.
12. Third-Party Services
The App uses the following third-party services:
- Firebase Cloud Messaging (Google) — push notifications
- Mailgun — transactional email delivery (verification codes, PIN resets, security notices)
- Google Gemini API — AI receipt scanning and parsing
- Self-hosted AI model (operated on our own servers) — ShopSense AI chat answers and non-English chat translation; this content is not sent to any third party
- Razorpay — payment processing for the optional Pro subscription on Android
- Apple In-App Purchase (App Store) — payment processing for the optional Pro subscription on iOS
- React Native (Meta) — app framework
- Expo / React Native community libraries — device features
Each third-party service is subject to its own privacy policy. Cortexa is not responsible for the data practices of third-party services beyond our contractual obligations with them.
13. Children's Privacy
ShopSense is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@cortexatech.in. We will promptly delete such information upon verification.
14. Intellectual Property
All content, design, code, branding, logos, and features of ShopSense are the exclusive property of CORTEXA TECHNOLOGIES.
You may not copy, reproduce, modify, distribute, or create derivative works from any part of the App without prior written permission from Cortexa.
User-generated content (such as expense descriptions and notes) remains your property, but you grant Cortexa a limited licence to store and display it within the App to provide the service.
15. Limitation of Liability
To the maximum extent permitted by applicable Indian law, CORTEXA TECHNOLOGIES shall not be liable for:
- Any indirect, incidental, or consequential loss arising from use of the App
- Decisions made based on AI-generated insights or chat responses
- Loss of data due to device failure or third-party service outages
- Inaccuracies in AI-scanned receipt data
- Any unauthorised access to your account caused by disclosure of your PIN
Our total liability for any claim arising from use of the App shall not exceed INR 1,000 (One Thousand Rupees).
16. Governing Law and Dispute Resolution
This Policy is governed by the laws of India. Any disputes arising from the use of ShopSense shall be subject to the exclusive jurisdiction of the courts located in Hyderabad, Telangana, India.
Before initiating legal proceedings, you agree to contact Cortexa at support@cortexatech.in to attempt an informal resolution within 30 days.
17. India — Legal Compliance
ShopSense is operated by Cortexa Technologies, based in India.
The App is designed to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) to the extent applicable.
If you have concerns about data protection compliance, contact our Grievance Officer at support@cortexatech.in.
18. Contact Us
CORTEXA TECHNOLOGIES
Email: support@cortexatech.in
For privacy-related requests (data access, correction, deletion), account issues, or general queries, please email us with your registered email address and a description of your request. We aim to respond within 7 business days.
For urgent account security concerns, please use the subject line "URGENT: Account Security" so we can prioritise your request.