MajaSam Privacy Policy

Last updated: September 22, 2026

Overview

MajaSam is an iOS app that helps users track purchases, monitor return windows and warranties, and scan Gmail for receipts. We are committed to protecting your privacy and handling your data responsibly.

Gmail Data

MajaSam requests read-only access to your Gmail account (gmail.readonly scope). This access is used solely to:

Scan your inbox for purchase receipts and subscription confirmations
Extract product name, price, store name, and purchase date from receipt emails
Populate your personal purchase vault within the app

MajaSam does not store your emails. Email content is sent to our server only for AI-based receipt extraction and is not retained after processing. We do not read, store, or share emails unrelated to purchases. Gmail OAuth tokens are stored securely on your device only.

You can disconnect Gmail at any time from Settings inside the MajaSam app. This revokes all Gmail access immediately.

Data We Collect

Purchase information extracted from receipts (product name, price, store, date)
Gmail OAuth tokens — stored securely on your device, never on our servers
Account information (email address) used only for authentication via Supabase

Data Protection

We protect your data using the following mechanisms:

Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS/HTTPS.
Encryption at rest: User data stored in our database (Supabase) is encrypted at rest.
Minimal data retention: Email content is processed in memory and never written to disk or stored after extraction is complete.
Access controls: API endpoints are protected with authentication keys. Only your own purchases are accessible to your account.
OAuth token security: Gmail OAuth tokens are stored locally on your device using secure storage and are never transmitted to or stored on our servers.

Third-Party AI Services

MajaSam uses OpenAI's API (GPT-4o-mini) to extract purchase details from receipt text. When you use Gmail scanning or Quick Add, relevant text is sent to OpenAI for processing.

OpenAI's API terms of service state that data submitted via the API is not used to train their models. You can review OpenAI's data usage policy at openai.com/policies/api-data-usage-policies.

We do not use any other third-party AI services, aggregators, model gateways, or model hubs.

Google API Limited Use Compliance

MajaSam's use of information received from Google APIs, including Gmail data, adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data accessed through Google APIs is used only to provide the receipt-scanning feature within MajaSam and is not transferred to, or used to train, any AI or machine learning model — including OpenAI's models. Raw or derived Google user data is never sold, shared with third parties, or used for advertising purposes.

Data Sharing

We do not sell your data. We do not share your personal data with third parties except as described above (OpenAI for receipt text extraction) and as required by law.

Data Retention

Purchase data you add to your vault is retained until you delete it or close your account. You can delete your account at any time from Settings → Delete Account, which permanently removes all your data from our servers.

Children's Privacy

MajaSam is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes through the app.

Contact

If you have questions about this privacy policy, contact us at igyasi24@gmail.com.