Privacy Policy

Last updated: 8 November 2026

This policy explains what data the «Мої платіжки» (“My Bills”) app processes, where it is stored, who receives it and how to delete it. It covers the app for iPhone and Android and the website moyaplatizhka.site.

Who is responsible for the data

The «Мої платіжки» app is owned by sole proprietor (FOP) Abramenko Oleksandr Oleksandrovych, 7 Shkilna Street, Novodmytrivka Druha, Ivanivka district, Kherson region, Ukraine. Privacy questions: support@moyaplatizhka.site.

No Data Protection Officer has been appointed, as the scope and nature of the processing do not require one. All requests are handled by the owner of the app.

What is stored on your phone

Everything you enter in the app is stored on your phone:

• Places: name (“Apartment”, “Country house”), type (apartment, house, business), town or village, community and region; optionally the number of residents and floor area.
• Services and tariffs: which utilities you pay for, prices, gas supplier, delivery charge, fixed payments (building maintenance, waste collection, etc.).
• Meters: type, model, serial number, number of digits on the display.
• Readings: the number, the date, how it was obtained (photo, manual, gallery) and whether it was corrected manually.
• Cropped strips of meter photos showing the digits — to show which photo a reading came from (the photo archive is part of Pro).
• Data from bills: supplier name, period, line items with amounts, volumes and tariffs, the total due. The bill photo itself is not stored by the app.
• Settings: reminders, participation in statistics, iCloud backup choice.

We cannot see or access this data.

A copy in your iCloud or Google Drive

• iPhone: the app keeps a copy of your data in the app’s private folder in your iCloud. You can turn it off: “Більше → Мої дані → Зберігати в iCloud” (More → My data → Save to iCloud). This copy is accessible only through your Apple ID; we cannot see it. Storage is governed by Apple’s policies.
• Android: the copy is kept in the app’s hidden folder on your Google Drive, accessible only to you through your Google account, under Google’s policies.
• In addition, the phone’s operating system may include the app’s data in the regular device backup (iCloud or Google).
• Data file: “More → My data → Download file” creates one file with all places, readings and photos. Where you send or keep it is up to you.

What reaches our server

Our server (Hetzner, EU) stores no personal data. It only forwards photos for recognition, provides tariffs, verifies subscriptions and counts anonymous statistics.

Meter photo

• You photograph the meter, and the phone itself crops only the strip with the digits. The full photo (which may show an apartment number or your home) never leaves the phone.
• The server receives this strip, the meter type (electricity, gas, water…) and the number of digits on the display. It passes them to Google Gemini for recognition and returns the digits and serial number to the phone.
• The strip is not stored on the server — not in the database, not in files, not in logs. It exists only for the duration of the request.
• You always confirm the number. Without internet, a reading can be entered manually.

Bill photo

• A bill (photo or screenshot) cannot be recognised in pieces, so the whole image is sent to the server. It may show your name, address and account number.
• The server passes the image to Google Gemini and asks it to return only the supplier name, the period, the line items with amounts and the total due. The model does not return your name, address or account number.
• The image is not stored anywhere — not in the database, not in files, not in logs — and is deleted immediately after recognition. Only the numbers and the supplier name remain, on your phone.

Tariffs and anonymous statistics

• Tariffs: the app downloads current electricity, gas and water prices from the server. Nothing about you is sent.
• Water price: if you enter the water price from your bill, only the town and the price are sent to the server — to suggest it to other people in the same town.
• “You and others” statistics: the server receives only the region and town, monthly consumption and amounts per utility and, if you entered them, the number of residents and floor area. No address, name or any identifier of a person or phone. Averages are shown only when a region has enough people that no one can be singled out. You can turn participation off in the place settings.

Server logs

The server keeps a technical request log: time, requested address, result and response size. IP addresses are not logged. To protect the server from overload, the IP address is briefly held in memory for rate limiting and is not stored.

Advertising

• The free version shows Google AdMob ads. Pro has no ads.
• To serve ads, Google receives technical data from the phone: IP address, device model and OS, language, approximate location derived from the IP, ad events (impression, tap). On iPhone, Google receives the advertising identifier (IDFA) only if you allow tracking in Apple’s prompt; without permission, ads are not personalised based on your activity in other apps.
• If you are in the EU, EEA, UK or Switzerland, the app will first ask for your consent to personalised ads.
• Your readings, places, amounts and photos are never shared with advertising platforms.
• How Google uses this data: policies.google.com/technologies/partner-sites.

Pro subscription

• Pro is paid through the App Store or Google Play. Payment is handled entirely by Apple or Google — we never receive card details.
• Purchases are tracked by RevenueCat. It receives a random app identifier (not linked to your name or email), purchase details (product, price, currency, store country, purchase and renewal dates) and technical device data.
• Our server verifies the store’s signed receipt to unlock Pro features and does not link it to your data.
• “Restore purchases” brings Pro back on a new phone through your Apple ID or Google account.

When Pro ends

• For 45 days nothing is deleted. The photo archive and additional addresses become unavailable (locked) but are kept. Renew Pro within those 45 days and everything comes back.
• We will remind you with a notification 14 days and 3 days before deletion.
• After 45 days without payment the app deletes everything beyond the free version: the archive of cropped photos and additional addresses together with their meters and readings — from the phone and from the copy in iCloud or Google Drive. One address remains with all its readings and statistics — permanently and free of charge.
• To keep everything, you can download a file beforehand: “More → My data → Download file”.

Phone permissions

• Camera — to photograph a meter or a bill. Finding the digits in the photo happens on the phone itself.
• Photos — to pick old meter photos or a bill screenshot. The app uses only the photos you select and the date they were taken.
• Location — only if you tap “Detect by location”, once and only while the app is in use. The phone turns the coordinates into a town name using Apple’s or Google’s service; the coordinates are not stored and not sent to us.
• Notifications — reminders to take readings. They are scheduled by the phone itself; we send nothing from the server.

Any permission can be turned off in the phone’s settings.

Who receives data

We use the paid tier of the Gemini API. Under Google’s terms for this tier, Google does not use prompts and responses to improve its products, but logs them for a limited period to detect policy violations and for security.

Each provider receives only what its function requires and processes data under its own terms: Hetzner, Google, RevenueCat, Apple. We share data with others only when required by law.

Website

The moyaplatizhka.site website sets no cookies, has no analytics and loads nothing from third-party servers. The website’s server log is the same as described above, without IP addresses.

Support requests

If you write to support@moyaplatizhka.site, we receive your email address, the message and any attachments. Emails are kept as long as needed to reply and are then deleted.

How long data is kept

• Data on the phone and the copy in iCloud / Google Drive — until you delete it (see “When Pro ends” for the exceptions).
• Meter and bill photos on the server — only during recognition.
• Anonymous statistics and water prices — indefinitely: they cannot be linked to a person.
• Server logs (without IP) — briefly; overwritten automatically.
• Support emails — as long as needed for the conversation.

How to delete data

• Everything at once: “More → My data → Delete all data”. All places, readings and photos are deleted from the phone along with the copy in iCloud. They can be restored only from a file, if you saved one.
• Partially: a single reading, service or place can be deleted in the app.
• Deleting the app erases its data from the phone; the iCloud copy can also be deleted in iPhone Settings: “Settings → [your name] → iCloud → Manage Storage”.
• There is no personal data of yours on our server, so there is nothing to delete there.

Deleting data does not cancel a Pro subscription. Manage it in your Apple ID or Google Play settings.

Your rights

• Access and portability: “More → My data → Download file” — all your data in one file.
• Rectification: any reading, place or tariff can be changed in the app.
• Erasure: see the section above.
• Withdrawing consent: statistics participation — in the place settings; ad tracking, camera, photos, location, notifications — in the phone’s settings.
• Objection or restriction: write to us and we will consider the request in accordance with the law.

Since there are no accounts and the server stores no personal data, we usually cannot find or show “your” data on our side — it is with you.

Legal bases for processing

• Performance of a contract: photo recognition, tariffs, the Pro subscription, support replies.
• Legitimate interest: anonymous statistics (can be turned off), technical logs, protecting the server from overload.
• Consent: personalised ads and tracking, phone permissions (camera, photos, location, notifications). Consent can be withdrawn at any time.
• Legal obligation: accounting and responses to lawful requests from competent authorities.

Users in the EU, EEA and UK

The GDPR and UK GDPR apply to the processing of your data. You have the right of access, rectification, erasure, data portability, restriction of processing and to object to processing based on legitimate interest. The app makes no decisions based solely on automated processing with legal effects. We respond to requests within 30 days. You can lodge a complaint with the data protection authority in your country of residence, and in Ukraine with the Ukrainian Parliament Commissioner for Human Rights.

International transfers

Our server is located in the EU. Google, RevenueCat and Apple may process data in the United States and other countries where they have infrastructure. Such transfers rely on the European Commission’s Standard Contractual Clauses provided in these providers’ terms, or on other lawful grounds.

Security

Connections to the server use HTTPS only. Keys for recognition services are kept only on the server, never in the app. The server exposes only the endpoints the app needs. No system can guarantee absolute security, so we recommend protecting your phone with a passcode.

Children

The app is intended for adults who manage household utility payments and is not directed at children. We do not knowingly collect children’s data.

Changes to this policy

We may update this policy as the app evolves or the law changes. The date of the current version is shown at the top. Any new provider that will receive data is added here before it starts receiving it. We will notify you in the app of significant changes.

Contact