How Pintri uses your information

Who is responsible

MFI Office Services Kft., 9725 Kőszegdoroszló, Fő utca 110/2., Hungary, is the controller for Pintri and is established in Hungary. Contact us about privacy at privacy@pintri.app.

What we collect and why

• Account and security data: name, email, sign-in method, sessions, devices, and bounded abuse-prevention metadata to create and secure your account.
• Household data: household name, roles, invitations, shared notes, and member attribution to provide the household service you request.
• Receipt and product data: receipt images, shops, dates, locations, products, quantities, prices, totals, corrections, budgets, aliases, and derived spending views to maintain your grocery ledger.
• Device and support data: local offline copies, queued changes, categorical diagnostics, and correspondence needed to operate, protect, and support the service.

We rely on steps requested before a contract and performance of the service contract for registration and core product features. We rely on legitimate interests for proportionate service security, abuse prevention, reliability, and support. Where a legal obligation applies, we use information to meet that obligation. We do not use consent to make contract-essential processing appear optional.

Receipts, AI, and spending insights

Receipt images are processed with OCR and AI-assisted extraction to suggest shops, dates, items, and amounts. Full OCR text, prompts, and raw provider responses are transient in Pintri application storage. Extracted fields and the source fragments shown for review follow the receipt record. You review and can correct the result before it becomes part of the household ledger.

Pintri creates search, price-memory, budget, and spending summaries from your records. It does not make solely automated decisions intended to produce legal or similarly significant effects. A receipt may nevertheless reveal sensitive facts, so only upload receipts you are entitled to share.

Household sharing

Active household members can see shared receipts, products, budgets, stores, aliases, and household notes. Household administration does not let one member exercise another member's individual privacy rights. Deleting an account may remove or reduce personal attribution while preserving shared purchases needed by remaining members.

Recipients and international transfers

Cloudflare provides infrastructure for this development environment. Use is limited to authorized testers and synthetic test data while processor and transfer reviews remain incomplete.

Processing of real personal data, including any international transfer, is prohibited in this development environment until the applicable processor terms, transfer mechanism, and supplementary measures are approved.

How long we keep information

Account, household, and structured receipt records remain while the relevant account or household is active, unless you edit or delete them sooner. Receipt capture bytes are removed after their bounded processing/recovery window. Analytics caches expire after 30 days; terminal invitations after 30 days; expired or revoked tenant sessions after 14 days; revoked bootstrap sessions after 30 days; and stale device records after 180 days. Completed deletion workflow evidence is anonymised and removed after 30 days. Provider security logs, support cases, backups, and legal records follow their approved schedules and are not kept indefinitely.

Local offline copies remain on your device until logout, access loss, local reset, account deletion, or platform storage eviction. Deletion removes live application authority; provider recovery copies expire under the applicable backup schedule and must not be restored to reverse a valid deletion.

Your choices and rights

Depending on the circumstances, you may have rights to information, access, correction, erasure, restriction, portability, objection, and review of automated decisions. Profile includes correction, export, local reset, and role-aware account deletion controls. Contact privacy@pintri.app for other requests. We normally respond within one month after proportionate identity verification; some rights have legal limits.

You can complain to Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or another competent supervisory authority, and seek a judicial remedy. Contacting us first is optional.

Children

Pintri accounts are not offered to people under 16. Do not create an account or upload another person's information if doing so would violate applicable law or their rights.

Security and changes

We use tenant isolation, role checks, revocable sessions, restricted diagnostics, bounded retention, and human review of receipt extraction. No internet service is risk-free. If this notice changes materially, we update its version and effective date and provide an appropriate in-product or direct notice before the change takes effect where required.