Privacy Policy — Welp

Version 1.1 · effective 24 September 2026

1. Who is responsible

Welp is an app for keeping track of your spending, based on your receipts.

Data controller: VStudio · CVR 46665171 · Denmark Contact: contact@vstudiodigital.com

We process your information under the GDPR. Privacy questions can always be sent to the address above.

2. What we process

The short version: your receipts, your items, your amounts and your history are not stored on our servers. The receipt image is read inside the EU and deleted at once — we keep neither the image nor its contents.

Typed purchases are counted, not stored. When you type a purchase in yourself, one number is sent to us: that you have typed one more purchase this month. We do not store what you typed, what it cost or where you shopped — only the count, per month and linked to your account. It is needed because two phones can share one subscription: both have to be able to see how much is left of the shared pool.

The 10 free imports are granted once per account. They belong to your Google account and are not renewed by deleting the account and creating a new one. To keep track of that we store a one-way hash — a cryptographic calculation that cannot be traced back to your account — of the account that received them. It remains even if you delete your account, and is used solely to prevent abuse.

The humour: what leaves your phone, and what we store

Chip — the voice that comments on your receipts — is written by a language model, not by the app itself. To write a comment the model needs some numbers, and the app works those out on your phone from your own receipts: the period's total, the split across categories, the comparison with the previous period, the last few comments (so it does not say the same thing twice), your country and your language. No images, no item lines and no receipts are sent — only numbers the app has worked out itself.

So the model does not see your receipts. It sees those numbers and answers with a comment. That comment is stored with us, along with the model's own short note on why the joke is the joke, and the country and language it was written for. We do that so we can see whether the humour is actually getting better — it is the log that makes "expect rapid improvements" something we can stand behind. It sits in two separate logs: one for the small comments on a single receipt, and one for the larger overviews, where the app comments on several screens at once. That way we can tell what came from where.

That log does not contain your image, your item lines, your account name, your email or your key. The comment itself may mention a purchase in broad terms — that is the whole point of it — but the log cannot be linked to you, and we do not use it to follow you, to sell anything, or to build profiles.

We keep the time only to the hour, not to the second, and there is no account, no key and no device in the row. That is deliberate: a log that cannot be linked to you is a log we cannot come to use against you.

The log is deleted automatically once it is older than 24 months. That happens as part of normal operation, so there is nothing you need to do.

Reports and feedback you send yourself

If you report a problem or send feedback in the app, the app sends your text along with a few technical details about the phone: app version, platform, language, and the technical errors the app caught itself. There are no receipts, amounts or items in it, and no image. We keep it until we have handled the case, so we can fix what you found.

Patterns the app finds by itself

The app works out patterns from your own history — for example that you shop late in the day, or that you buy something particular more often at weekends. That happens on your phone, and the pattern is used only to write the comment you see. It is not used to make decisions about you: you neither gain nor lose anything because the app notices a pattern. It is not linked to you on our side, and it is not sold or shared. So it is not an automated decision in the GDPR sense either (Article 22).

What the legal basis is (GDPR Article 6)

3. What we do not do

and it may mention a purchase in broad terms — see the humour section above.

and the text stays on the phone.

• We do not store your receipt images. The image is read inside the EU and deleted at once.
• We do not store your item lines or your amounts. The finished comment from Chip is stored,
• We do not read your notifications unless you have granted the access yourself in Android —
• We do not link the humour to you: the log has no account id, no email and no key.
• We do not sell your information or share it with advertisers.
• There is no third-party tracking, no advertising profiles and no cookies in the app.
• We do not read any document or image other than the ones you choose yourself.

4. Sub-processors

Google sees the document being read at the moment of the read. We do not claim that Google cannot process the content in that context — which is exactly why the receipt is deleted immediately and never stored by us.

Google operates worldwide. Where information is transferred to Google outside the EU it is covered by Google's data processing terms with the EU standard contractual clauses — and, where it applies, the EU-US Data Privacy Framework. Write to us if you want to see the basis.

5. Your rights

You have the right to access, correct and delete the information we hold about you, and to object to the processing. You can also get your information out in a common, machine-readable format (data portability) and have the processing restricted. If you have given consent — for example for notification access — you can withdraw it again, without that changing anything for what has already happened. Write to contact@vstudiodigital.com and we will answer within 30 days.

Deleting your account: you can delete your account directly in the app under Konto og opsætning. That removes your account, your key and your account data with us. The single one-way hash that prevents repeat free imports (section 2) remains. The history on your phone is deleted at the same time, and can also be deleted separately in the app.

The humour and your account: the log of comments is anonymous — there is no reference to either an account or a phone in it. We therefore cannot pick out "your" lines, and they are not deleted when you delete your account. In return, they cannot be used to find you, and they are deleted automatically after 24 months.

If you are unhappy with how we process your information, you can complain to the Danish Data Protection Agency (datatilsynet.dk).

If you find that the app guesses wrong outside Denmark, please say so under Report a problem in the app, or send a photo of the receipt to contact@vstudiodigital.com — it helps us fix it.

6. Children

Welp is not aimed at children. You must be at least 15 years old to use the app.

7. Changes

If we change this policy we update the version and date at the top, and material changes will be shown in the app.

Version 1.1 (24 September 2026) added:

comment is stored in two separate logs, that the log is anonymous, and that it is deleted automatically after 24 months

• the section on the humour: which numbers are sent to write a comment, that the finished
• what we store when you send a report or feedback yourself
• the row on notifications from other apps, which the app reads only if you turn it on
• the legal basis for each purpose (GDPR Article 6)
• the section on the patterns the app finds by itself on your phone
• the basis for transfers to Google outside the EU (section 4)
• the extra rights on data portability, restriction and withdrawn consent

This policy covers the Welp app. Our API service (Mervext) has its own data processing agreement and privacy policy, aimed at businesses using the API for their own documents.