Privacy policy

Effective from: 24 October 2026

This policy covers both Massi and Massi Lite. Massi is a private expense tracker for Android. The main principle: your data stays on your phone. Massi has no account and no login, and we do not collect your usage data on a server.

Controller and contact

Station Labs (Santeri Pöytäniemi)
Email: Massi.support@gmail.com

What Massi handles on your phone

• Entries (purchases and income), amounts, dates, categories, products and extra information.
• Receipt data you have saved, and the product names and categories Massi has learned.
• Settings such as language and appearance.

This is stored in the phone's own database. It does not leave the phone, and we have no access to it. If you uninstall the app, the data goes with it (unless you have a backup).

Scanning a receipt

To take the picture and read the text, Massi uses Google's ML Kit libraries (document scanner and text recognition). The picture and the text read from it are processed on your phone: they are not sent to us or to Google. The picture is not stored in Massi: the text read from it is turned into a receipt on your phone. According to Google's ML Kit data disclosure, ML Kit sends Google technical diagnostics: the device model and Android version, the app's package name and version, an anonymous per-installation identifier, and performance and error data. This does not include your receipts or entries.

The camera opens only when you tap the scan button. You can also share a picture or PDF to Massi from another app.

Backup

A backup is saved as a file in a folder you choose (for example a Google Drive folder). The file is then under the control and terms of the service that folder belongs to. Massi does not send it to us.

Helping improve Massi (optional, off by default)

Massi can send us what it read from the receipts you scan, so that the receipt reader and the category suggestions can be improved. This is off until you choose it. When you save your first scanned receipt, Massi asks once: send weekly, or not at all. You can change this at any time in Settings → General.

• What is sent (once a week): for every scanned receipt saved since the last send: the store's name, the month, whether the total matched, and each product line as read, Massi's guess (name and category) and what you corrected it to; the rows around the products that are not products (discounts, deposits, and rows ending in a price that the reader set aside); how far the products were from the printed total; the quantity and unit of a line; the store as the reader read it, if you changed it; which version of the reader and which language rules read it, and whether the text came from the camera, a file or pasted text; and, when a scan fails, why and its rows that end in a price. Parts that look like card numbers, long number strings and e-mail addresses are removed first. The top of the receipt (address, cashier, loyalty number, time) is never sent. With each send go the time of sending, the app version and the Android version. Nothing else leaves the phone: no entries, notes, balances or purchase dates (a receipt carries only its month).
• You can see what will be sent: Settings → General → "Show what is sent".
• How: over an encrypted connection to a server run on Cloudflare, which may be located outside Finland and the EU. It is tied to a random installation number, not to your name, email or account. We do not store IP addresses.
• Basis: your consent. You can withdraw it by switching the setting off; anything not yet sent stays on the phone and is deleted.
• Use and deletion: we use the data only to improve the reader, the product list and the categories. We delete the raw data as soon as we have used it (normally within a few weeks) and automatically after 90 days at the latest. We keep only results that contain no personal data, such as product names with their categories, and test receipts that we have cleaned of anything personal. Product names with their categories may be published as open data (see below). To analyse the received data we may use an AI assistant service (Anthropic's Claude) through a read-only connection; it gets only the data described above, nothing else from the phone.
• Deletion request: to have what you sent deleted earlier, write to the support address and quote your installation number (shown in Settings → General).

Waiting list (the full Massi)

When you join the waiting list for the full version of Massi on the website, we store your email address, your language choice (Finnish or English) and the day you joined.

• Use: we send one email to the address when the full version is ready. We do not use the address for anything else and do not pass it on.
• Basis: your consent, which you give by ticking the box in the form.
• Storage: on a Cloudflare server (Workers KV). The address is stored as it is, so that we can send the message; your IP address is not stored.
• Retention: we delete the address as soon as we have sent the message, and after 24 months at the latest.
• Withdrawal and deletion: you can withdraw your consent and ask for the address to be deleted at any time by writing to the support address.

Support mail

When you write to the support address, we read your message and your email address and use them only to answer you and to improve Massi. Please do not send card numbers or other sensitive details. To sort the mail and draft replies we use an AI assistant (Anthropic's Claude) that has access to the support mailbox: it reads only the mail sent to that address. Replies are read and sent by a person. We keep a message as long as the matter needs it. Basis: our legitimate interest in answering you. You can ask us to delete your messages by writing to the support address.

Technical data and third parties

• App updates: Massi fetches updates from Expo's update service (expo.dev). The request shows technical information such as the IP address, app version and Android version. Your spending data is not sent.
• Exchange rates: Massi fetches the European Central Bank's daily rates from the Frankfurter service (api.frankfurter.dev) when you open the app and the kept rates are more than a week old, or when you press "Update rates" in Settings. The request contains only the list of currencies; the service sees your IP address like any website. Your spending data and other data are not sent.
• Google Play: Google collects information about installs and crashes under its own terms. We see only summaries (for example install counts and crash reports), not individual users' data.
• Notifications: the full Massi (not Massi Lite) can show reminders on the phone (for example for a repeating payment or a backup). They are created on the phone and need no server.

Your rights

If you have sent us receipt text, you have the right to ask for access to it, correction or deletion, and to withdraw your consent. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi). Apart from that we hold no data about you, so there is nothing to delete. You can delete your own data by uninstalling the app or clearing its data.

Children

Massi is not directed at children, and we do not knowingly collect children's data.

Open data

Contains information from Open Food Facts, which is made available here under the Open Database License (ODbL). The starter list is open data. The list contains no user data; only product names with their categories that contain no personal data can be added to it.

Changes

If this policy changes materially, we will update the date and tell you in the app.