Receipt-to-Sheet for small business owners — one tap to log every cost.
Effective date: 8 May 2026 Last updated: 10 October 2026
This Privacy Policy explains how Margino (“App”, “Service”) collects, uses, stores, and protects your personal data. It is provided in compliance with the EU General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law (KVKK).
Cemal Yılmaz, sole proprietor registered in Türkiye.
Contact: support@usemargino.com
We have not appointed a Data Protection Officer (DPO) — Margino’s processing volume and risk profile do not meet the GDPR Article 37 thresholds. The Data Controller above is the point of contact for all data subject requests.
When you use the App, we process the following data:
| Category | Content | Source |
|---|---|---|
| Identity | Google account ID (sub), name, profile picture | Google OAuth |
| Contact | Email associated with your Google account | Google OAuth |
| Service Usage | Receipt/invoice images you upload (transient), parsed line items (vendor, items, prices, totals, tax), your product list (product names, suppliers, pack sizes, latest and previous unit cost, and what you charge for an item if you enter it), the dishes you cost (name, ingredients, menu prices), your target profit margin and delivery-app commission preferences, whether you accept SNAP and the food group of each product if you turn on the SNAP stock check, your Google Sheet ID if you connect one | App use |
| Technical / Device | IP address, request timestamp | Cloudflare access logs |
| Notifications (optional) | Push notification token, app language and your device’s time zone offset, only if you allow notifications — used for the weekly supplier-cost alert and for a reminder to scan your next invoice, sent mid-morning your time. Either can be switched off in Settings | App (iOS) |
| Square (optional) | Only if you connect Square: your Square merchant ID, encrypted access and refresh tokens, and the Square menu items (names, variations, prices) read when you link a dish. The linked item ID and its menu price are saved on that dish | Square (OAuth) |
| Billing (future) | RevenueCat subscription state | App Store / Play Store |
| Purpose | Legal Basis |
|---|---|
| OCR-parsing your receipt, keeping your product list and suggested prices in the App, and — only if you connect it — writing them to your own Google Sheet | Performance of contract (Art. 6(1)(b)) |
| Account authentication and session management | Performance of contract (Art. 6(1)(b)) |
| Preventing service abuse (rate-limit, error logs) | Legitimate interest (Art. 6(1)(f)) |
| Anonymous regional price benchmarking | Legitimate interest (Art. 6(1)(f)) — no user identifier attached |
| Product analytics (PostHog — usage metrics) | Consent (Art. 6(1)(a)) — collected via in-app consent |
| Measuring which of our ads lead to app installs, sign-ups and subscriptions (Meta App Events) | Legitimate interest (Art. 6(1)(f)) |
| Filling a dish’s menu price from your Square menu — only if you connect Square | Performance of contract (Art. 6(1)(b)) |
We share your data with the following service providers solely to operate Margino. We do not sell or share data for marketing.
| Recipient | Location | Purpose | Data Type |
|---|---|---|---|
| Anthropic, PBC | USA | AI parsing of receipt images (Claude API); sorting your products into food groups, only if you turn on the SNAP stock check | Receipt images (transient, deleted after parse). With the SNAP stock check on: product names and pack sizes from your recent invoices — never your name, e-mail, costs or prices |
| Google LLC | Global | Google OAuth, Sheets API (writing to your own sheet), Drive metadata | Google profile, encrypted refresh token |
| Cloudflare, Inc. | USA (edge POPs are global) | App backend (Workers), queue processing, access logs | All request payloads (transient in RAM, no persistent storage) |
| Supabase, Inc. | USA (us-east-1) | Postgres database (user records, parsed receipts, your product list, encrypted refresh token), Vault (key management) | Identity, contact, parsed receipt content, product list, encrypted refresh token |
| PostHog, Inc. | USA | Product analytics; anonymous website page views and App Store link clicks (no cookies) | Anonymous events |
| RevenueCat, Inc. | USA | Subscription management (post-Apple approval) | Anonymous subscription state |
| Meta Platforms, Inc. | USA | Measuring Margino’s own ads (Meta App Events SDK) | App events (install, first sign-in, first receipt, subscription with price and currency), device and app information (model, OS and app version, language, time zone), IP address. Never your name, e-mail, receipts or product list. |
| Block, Inc. (Square) | USA | Optional Square POS connection (OAuth, Catalog API) | We exchange the OAuth tokens with Square and read your Square menu items and prices. We never send Square your receipts, costs or product list. |
International transfers: Data is transferred to the USA and other regions outside the EEA / Türkiye. These transfers are protected by Standard Contractual Clauses (SCCs) under each provider’s Data Processing Agreement (DPA). Where we rely on consent for the transfer (e.g. KVKK Article 9), it is collected when you start using the App.
Margino does not track you across other companies’ apps or websites. We do not ask for App Tracking Transparency permission and do not collect your device’s advertising identifier (IDFA/AAID). On iOS, Apple’s SKAdNetwork tells Meta that an install came from an ad without identifying you.
| Data | Retention |
|---|---|
| Receipt images | Until parsed (seconds); never persisted |
| Parsed receipt content and your product list | While your account is active; cascade-deleted on account deletion. If you connect Google Sheets, a copy also lives in your own Sheet, which you own |
| Encrypted refresh token (Supabase) | While account is active; deleted immediately on account deletion |
| User record (Supabase users table) | While account is active; cascade-deleted on account deletion |
| Receipt log (timestamp, success/failure) | While account is active; cascade-deleted on account deletion |
| Square connection (merchant ID, encrypted tokens) | Until you disconnect Square in Settings or delete your account; disconnecting also revokes our access at Square |
| Cloudflare access logs | Cloudflare default 30 days |
| Anonymous regional benchmarks | Indefinitely (no user identifier; cannot be traced back) |
| A record that an account was deleted: how long it existed, its plan, how many receipts, products and dishes it held, the country the request came from, and the reason if you chose one | Indefinitely (kept as a count only — no user identifier, name, e-mail or IP address; cannot be traced back) |
You have the following rights regarding your personal data:
To exercise any of these rights, email support@usemargino.com. We respond within 30 days (GDPR Article 12(3)).
Margino is not intended for users under 13. If we discover data has been collected from a user under 13, we will delete the account immediately.
When we update this policy, the “Last updated” date changes and we notify you in-app. Material changes require re-consent from existing users.
Reach the Data Controller (Cemal Yılmaz) at: