kkvitlo.
Back to home

Legal

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how ozpr s.r.o., seated in Prague, Czech Republic ("Kvitlo", "we"), processes personal data when you use Kvitlo. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Czech data-protection law. Kvitlo is a business tool and is not directed at children.

1. Our role — controller and processor

We are the controller for your account and billing data. For the receipts and accounting content you submit to an organization, we act as a processor on that organization's instructions and the organization is the controller — the standard processing terms are part of onboarding. For privacy matters contact privacy@kvitlo.cz.

2. What we collect

  • Account & contact data — name, email address, optional phone, organization membership, and passwordless sign-in codes.
  • Receipt content (photos & financial data) — the images you capture or send in, and the accounting values extracted from them: amounts, VAT, dates, vendor identity (IČO/DIČ), and payment method. Receipts can themselves contain personal data (names, card fragments).
  • Purchase & billing data — plan, subscription and top-up purchase history, quota usage, and (for organizations) invoicing identifiers (IČO/DIČ). Card details are handled by our payment provider and are not stored by us.
  • Identifiers & device data — user and device identifiers, and a push-notification token if you enable notifications.
  • Usage & diagnostics — logs needed to operate, secure and debug the service.

3. Purposes and legal bases

  • Providing the service (capture, extraction, review, export, archive) — performance of a contract.
  • Billing, subscriptions and fraud prevention — contract and legitimate interests.
  • Security, logging, notifications and abuse prevention — legitimate interests (and consent for push notifications, which you can turn off).
  • Legal and accounting record-keeping obligations — legal obligation.

4. Automated extraction

Receipt images and their OCR text are processed by automated extraction models to read the accounting details. Model access keys are held server-side only; extraction runs on infrastructure located in the European Union. One exception: when the automated reading leaves a required field missing or uncertain, the original document, its OCR text and the fields read so far are sent to Anthropic's API (Claude) to complete it — that processing takes place outside the European Union (see §5 and §6). Extraction is assistive and every document is reviewed by a human before it is booked or exported. We do not use your receipt content to train third-party models, and our processing agreements with the model providers require zero training and zero retention of your content.

5. Data location

Personal data and receipt content are stored and processed within the European Union, except the AI completion of fields described in §4, which Anthropic PBC processes in the United States under the EU Standard Contractual Clauses. Data belonging to different companies is isolated at the storage and query layer (per-company isolation).

6. Who we share it with (sub-processors)

We do not sell your personal data and do not use it for advertising. We share it only with the sub-processors needed to run the service, each bound by data-processing terms and, except where stated, EU-residency requirements:

  • OpenAI — automated extraction of receipt content (EU processing, zero training / zero retention).
  • Anthropic PBC (USA) — automated extraction of receipt content, including the completion of fields our automated reading could not finish (the original document, its OCR text and the fields read so far). Processed outside the EU; the transfer is safeguarded by the EU Standard Contractual Clauses. No training on your content.
  • Stripe — organization subscription payments and invoicing.
  • Apple and Google — in-app purchases (subscriptions and credit packs) and push-notification delivery.
  • Hetzner — EU cloud hosting and object storage.
  • Our transactional email provider — sign-in codes and service emails.

The current, named sub-processor list is kept up to date here and is also available on request.

7. Retention and archive pickup

Receipt files are retained only for a processing window that depends on your plan (e.g. "to the end of the following month + 1 day" on Basic, or "to the end of June of the following year" on Plus), after which a ZIP archive is made available for a mandatory pickup. After you confirm the download, our copies of the originals are purged; the structured data, audit trail and per-file checksums are retained so your local copy stays verifiable. Your own statutory retention obligation (e.g. 10 years for VAT documents) is unchanged. Account and billing records are kept as long as needed for the service and to meet legal accounting-retention obligations.

8. Deleting your account and your rights

You can delete your account from the app, from the web app, or via our account-deletion page. Deletion revokes your personal access and anonymises your account and contact data; identifiers, sign-in codes and devices are removed; purely-personal data is purged on the next retention cycle. Documents you submitted to an organization stay with that organization (its own accounting records, subject to statutory retention), and any records the law requires us to keep are retained for the required period and then deleted.

Subject to law, you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where we act as processor for your organization, we direct such requests to that organization. To exercise your rights, contact privacy@kvitlo.cz. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

9. Security

We use encryption in transit, per-company data isolation, access controls, and audit logging of document changes. Original scans are stored write-once with per-file checksums (integrity). No system is perfectly secure, but we work to protect your data proportionately to its sensitivity.

10. Cookies and tracking

The public site uses no advertising or third-party tracking cookies. Your language choice is carried in the page URL (?lang=). The web application uses a strictly-necessary session cookie to keep you signed in, plus an optional "remember this browser" cookie if you choose it.

11. Changes

We may update this Policy; material changes will be notified in the app or by email, with the "last updated" date revised above.

12. Contact

ozpr s.r.o., Prague, Czech Republic — privacy@kvitlo.cz.

See also our Terms of Service, Support, and how to delete your account.