Privacy policy

Updated: 6 October 2026

Operator and contact

RoastMyBill is operated by Dariusz Furman in Poland. For privacy and app support, contact roastmybill@gmail.com. This policy covers roastmybill.com and the RoastMyBill app.

The website

This website uses no advertising, analytics or tracking cookies. The calculator runs in your browser and does not send entered amounts to the server. MyDevil hosting processes technical connection data such as IP address, request time and requested URL to deliver and protect the service.

App data

The app processes the profile you provide, receipts and line items, photos or PDFs, budgets, shopping lists, household information, support requests and session identifiers. These support the features you choose to use. Receipts may contain personal information; check before uploading. Bank access is not required.

AI extraction and assessment

Uploaded documents are sent to the RoastMyBill backend and Google Gemini for receipt extraction. Selected basket information may also be used for optional AI assessment. Google processing terms depend on the service and project configuration. We do not claim Google never retains data or that all processing occurs in Poland. Avoid uploading unnecessary sensitive information. AI may make mistakes; review extraction before saving.

Sharing and providers

MyDevil hosts the backend and database. Google Gemini provides AI extraction. Purchase features, if made available, use Google Play or Apple. Household members see only receipts you explicitly share; photos, private notes and AI assessments are excluded from that shared view.

Retention and deletion

Saved receipts and profiles remain until you delete them. Unsaved attachments expire after 7 days. Account deletion removes active account data and revokes sessions. Private backups expire within 30 days. Legally required accounting records may have separate retention if they arise.

Your rights

You may request access, correction, export, deletion or restriction of your personal data. You may object or withdraw consent where consent is the basis for processing. Contact the operator. You may complain to your local data protection authority; in Poland this is the President of UODO.

Security and children

Connections use HTTPS. Keep recovery keys and session tokens private. The service is not directed at children under 13. Contact the operator with questions about a child’s data.