My COL: Privacy Policy
Last updated: 24 September 2026
My COL is a budgeting app that helps you understand your cost of living by reading your receipts and bank statements. This policy explains what information the app collects, why, who it is shared with, and your rights.
My COL is currently in testing. Features may change, and this policy will be updated if they do.
Who is responsible for your data
My COL is run by Dare Adegbola, a sole trader based in the United Kingdom, who is the data controller for your information.
Contact: mycol.support@gmail.com
What information we collect
Account details
Your email address and password. Your password is stored in a scrambled (hashed) form and cannot be read back, even by us.
Technical sign-in records, such as when you last signed in, and IP addresses recorded in security logs.
Receipt information
When you scan a receipt, we store the shop name, purchase date, total, and each item's name, price and spending category.
Bank statement information
When you upload a statement, we store each transaction's date, description, amount, whether money came in or went out, its spending category, and any receipt it is matched to. Transaction descriptions may include the names of people or businesses you have paid, such as a landlord or a friend.
On your device
A login token is kept on your phone (or in your browser, if you use the web version) so you stay signed in. The app may briefly keep copies of photos or files you choose in your phone's temporary storage, which your phone clears automatically.
What we don't collect
We do not collect your name, home address, phone number, location or device identifiers. We do not use cookies for tracking, advertising, or analytics.
Receipt photos and statement files
Receipt photos and statement files (CSV or PDF) are not stored on our servers. They are sent for processing, the useful details are extracted and saved, and the photo or file itself is then discarded.
If a photo cannot be read, a short description of the problem may be recorded in our technical logs for troubleshooting. These logs are kept for a limited time.
Why we use your information
We use your information to:
create and secure your account
read your receipts and statements and organise your spending by category, item and merchant
send you account emails, such as email confirmation and password reset
fix problems and keep the service secure
Under UK data protection law, we rely on performing our contract with you (providing the app you signed up for) and our legitimate interests in keeping the service secure and working properly.
We do not sell your data, show you adverts, or use your data for marketing.
Who we share information with
We only share information with companies that help us run the app, and only for that purpose:
Supabase: stores your account and spending data, runs sign-in, and sends account emails. Your data is stored in London, United Kingdom. Some processing runs on Supabase's global network.
Anthropic (the provider of the Claude AI model): reads your receipt photos and statement text to extract items, prices and transactions, and suggests spending categories and product names. We do not send Anthropic your email address or account ID. Anthropic processes data in the United States. Anthropic does not use this data to train its AI models, and automatically deletes it within 30 days, except where it must keep it longer to enforce its usage policies or comply with the law.
Apple and Google: distribute the app through TestFlight and Google Play, and may collect information under their own privacy policies.
International transfers
Because Anthropic processes data in the United States, some of your information is transferred outside the UK. These transfers are protected by Anthropic's data processing terms, which include the Standard Contractual Clauses together with the UK International Data Transfer Addendum approved by the Information Commissioner's Office.
How long we keep your information
We keep your account and spending data for as long as your account exists. When you ask us to delete your account, we delete your account and all your receipts and transactions within 30 days.
Deleting your account
To delete your account and all your data, email mycol.support@gmail.com from the email address you use for My COL, with the subject "Delete my account". We will confirm when it has been done. An option to delete your account from inside the app is planned.
Phone permissions
Camera: only to photograph receipts.
Photos: only to let you choose a receipt photo you have already taken.
The app does not use your microphone, contacts or location.
Security
Data is sent over encrypted connections. Each user can only access their own receipts and transactions; this is enforced by our database rules. No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
Under UK data protection law, you have the right to:
access the information we hold about you
correct information that is wrong
have your information deleted
object to or restrict how we use it
receive a copy of your information in a portable format
To use any of these rights, email mycol.support@gmail.com. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Age limit
My COL is for people aged 18 and over. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, we will update the date at the top and, for important changes, tell you in the app or by email.