Privacy Policy
Last updated November 9, 2026
The short version: Tabit keeps the receipts from your card purchases so you don't have to. We never see your full card number, PIN or balance, your data is stored in Canada, we don't sell it, and you can export or delete it any time from the app.
Who we are
Tabit ("we", "us") makes the Tabit app, which saves receipts for purchases made with cards you link. Questions about privacy go to privacy@tabit.dev.
What we collect
| What | Why |
|---|---|
| Your phone number | To sign you in with a one-time code. |
| Your first name and the avatar you pick | To personalize the app. |
| Linked cards: network (e.g. Visa), last 4 digits, a reference from our card partner, and your card settings | To match purchases to you and show which card was used. |
| Purchases on linked cards: store, amount, date and time, card used, store category and location when provided | To create your receipts and monthly totals. |
| Itemized details (items, tax, tip) from stores whose register is connected to Tabit | To show the full receipt. |
| A push notification token for your device | To notify you when a receipt arrives. |
| Sign-in sessions (which devices are signed in) | To keep you signed in and let you sign out everywhere. |
We do not collect your full card number, security code, PIN, account balance or bank login. Your Tabit PIN and Face ID stay on your phone and are never sent to us.
How we use it
- To run Tabit: saving receipts, sending receipt notifications, and working out your spending, tax and tips.
- To keep your account secure and prevent abuse.
- To fix problems and improve the app.
We don't sell your data, we don't show ads, and we don't share your receipts with other stores.
Who we work with
We use a small number of service providers to run Tabit. They only process data to provide their service to us:
- Hosting and database: Fly.io (servers in Toronto) and Supabase (database in Canada).
- Card partners: card-linking providers such as Mastercard and Fidel, which tell us when a linked card is used.
- Store registers: Square and Clover, for itemized receipts from stores that connected their register to Tabit.
- Notifications and sign-in: Apple (push notifications) and our text-message provider (sign-in codes).
- Store logos: logo.dev, which receives store names and websites only, never anything about you.
We may also disclose information if the law requires it.
Where your data is stored
Your account and receipts are stored on servers in Canada. Some providers above (for example Apple, for push notifications) may process limited data outside Canada to deliver their service.
How long we keep it
We keep your data while you have an account. When you delete your account in the app (Profile → Delete account), we delete your account, cards, receipts and notifications right away. Copies in our backups are deleted as those backups expire.
Your choices and rights
- Export: Profile → Export my data gives you everything we hold about you.
- Correct: change your name in Profile, or email us.
- Control: turn off notifications or saving receipts for each card, or remove a card, in the Cards tab.
- Delete: Profile → Delete account.
You can also contact us at privacy@tabit.dev. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, or in Quebec the Commission d'accès à l'information.
Security
Data is encrypted in transit. Messages from our card and register partners are signed and checked before we accept them, and register access tokens are stored encrypted. You can lock Tabit with Face ID and a PIN.
Children
Tabit isn't meant for children under 16.
This website
tabit.dev uses no tracking cookies or analytics. If you send the merchant form, we use those details only to contact you about Tabit for your store.
Changes
If we change this policy, we'll update the date above and, for significant changes, tell you in the app.