Colourway is an iOS app that turns receipts into a cost-basis ledger for resale inventory. This policy describes what it collects, where that goes, and how to get rid of it. It describes the app as it actually behaves; where a feature does not exist yet, this policy does not describe one.

Colourway is operated by Break Thruu Entertainment, Inc., Ontario, Canada. Contact: privacy@colourwayapp.com.

What Colourway collects

Information you provide

Information read from your receipts

Receipt images frequently contain personal information, and Colourway extracts and stores parts of it so your ledger is usable:

• Merchant name and country
• Purchase date and order number
• Currency, subtotal, tax, shipping, duties, discount, and total
• The last four digits of the payment card, where the receipt prints them
• Payment method (for example "Visa debit")
• Line items: description, quantity, unit price, brand, style code, size, colourway and condition
• Short verbatim snippets of receipt text, retained alongside each extracted figure so every number can be traced back to where it was read

Information Colourway derives

Inventory items, landed cost, holding periods, sale prices, fees, payouts, realized profit and loss, and an append-only audit trail of every correction you make.

Information collected automatically

• Technical logs. Our hosting provider records IP address, timestamp, and device user-agent for authentication requests and API calls, for security and abuse prevention.
• Operational logs. When a receipt is extracted, we log the number of pages, processing time, and cost. The contents of the receipt are not logged.

What Colourway does not collect

• No advertising or analytics SDKs. No Firebase, no Facebook SDK, no Mixpanel, no Sentry, nothing of the kind — the app's only third-party dependency is our hosting provider's client library.
• No tracking across other apps or websites, and no App Tracking Transparency permission is requested.
• No location data.
• No contacts, photos library scanning, or device identifiers for advertising.
• No full payment card numbers, CVVs, or bank account details. Colourway does not take payments and has no payment form.

Who your data is shared with

Colourway does not sell your personal information and does not share it for advertising. It is processed by the following service providers, each only to run the app:

Exchange rates are fetched without sending anything about you. Colourway asks the Bank of Canada and the European Central Bank for the published rate for a currency pair on a date. Those requests contain a currency pair and a date and nothing else — no account, no amount, no identifier.

About Anthropic. Receipt images are sent to Anthropic's API to be read and converted into structured figures. Under Anthropic's Commercial Terms of Service, Anthropic may not train models on content submitted through the API. (anthropic.com/legal/commercial-terms)

About QuickBooks. This is entirely optional and off by default. If you connect it, Colourway stores access and refresh tokens on the server, where they are readable only by the server itself and are never sent to the app. You can disconnect at any time from Profile → Accounting, which revokes Colourway's access at Intuit and deletes the stored tokens. Records already posted to your QuickBooks company remain there — they are your accounting records, and removing them is not ours to do.

We may also disclose information if required by law, or to protect the rights, safety, or property of Colourway or its users.

Where your data is stored

Your account, ledger, and receipt images are stored in Canada, in the ca-central-1 region. Receipt images are held in a private storage bucket that is not publicly readable; the app retrieves them using short-lived signed links. Database access is restricted per-user at the database level, so one account cannot read another's rows.

Some processing takes place in the United States — receipt reading by Anthropic, and QuickBooks sync by Intuit if you have connected it. So your information is stored in Canada but processed outside it, and while it is in the United States it is subject to United States law. That includes the possibility of lawful access by United States courts, law enforcement, and national security authorities, under legal standards that differ from Canada's. We tell you this because you cannot weigh it if we do not.

If you are in the EEA, the UK, or Switzerland

Colourway is available worldwide, so for many people using it this is an international transfer.

Storage is in a country the European Commission has found adequate. Your account, ledger and receipt images live in Canada, and the Commission's adequacy decision covers Canadian private-sector organisations subject to PIPEDA, which we are. The UK and Switzerland recognise Canada on the same basis. No further safeguard is needed for the data to be held where it is held.

Receipt reading in the United States relies on Standard Contractual Clauses. Anthropic reads your receipts in the US, which has no adequacy decision covering that transfer. Anthropic acts as our processor, and the transfer is made under the European Commission's Standard Contractual Clauses — Module Two, controller to processor — incorporated into Anthropic's Data Processing Addendum, together with the UK Addendum where UK data is involved. Supabase is covered the same way by its own Addendum. In both cases accepting the agreement has the same effect as signing the clauses, and both are in force. You can ask us for details of the safeguards at the address below.

QuickBooks is different, and it would be misleading to lump it in. If you connect QuickBooks, Intuit receives the records you choose to sync — but Intuit is an independent controller of that data, not our processor, and holds it under its own agreement with you rather than under ours. There is no processor's contract between us for it, and we would be overstating things to claim one. That transfer happens only because you asked for it, only to the company you chose, and only for as long as you leave the connection in place. Disconnecting stops it.

How long it is kept

Your data is kept for as long as your account exists. Colourway does not expire, archive, or auto-delete your ledger — a cost basis is only useful if it goes back as far as your inventory does.

When you delete your account, the deletion from our live database is immediate and permanent. Our hosting provider takes an encrypted backup of the database once a day and keeps each one for 7 days, so a copy of your data can persist in those backups for up to 7 days after you delete it, and is then gone. Backups are not readable by the app and are used only to restore the service after a failure.

Technical and operational logs are retained for 7 days.

Deleting your account

Profile → Delete account, inside the app. It asks you to type DELETE to confirm, and then removes:

• Your account and login
• Every receipt, including the stored images
• Every transaction, tax line and line item
• Your inventory, sales and realized profit and loss
• Photos of the items you kept, and your profile picture
• The edit history behind every correction
• Your categories and their QuickBooks mapping
• Your QuickBooks connection, which we also revoke at Intuit

Revoking at Intuit needs Intuit to answer. If they don't, the deletion still goes ahead and the app tells you to remove Colourway under Apps in QuickBooks yourself — an outage on their side will never trap you in an account you want gone.

There is no grace period and no way to undo it. Export your data first if you want to keep it — Profile → Export writes your whole ledger to a ZIP of CSVs, with the receipt images if you ask for them. Once deleted it cannot be recovered by you or by us: the daily backups described above are whole-database snapshots used to restore the service after a failure, and there is no mechanism to lift one account's data back out of them.

You can also email privacy@colourwayapp.com to request deletion.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to object to or restrict certain processing. Most of this is available directly in the app: your ledger is visible and editable throughout, and account deletion is one screen away.

To exercise any right that is not available in the app, email privacy@colourwayapp.com. We will respond within the period required by applicable law.

• Canada (PIPEDA). You may access your personal information and challenge its accuracy, and may complain to the Office of the Privacy Commissioner of Canada.
• California (CCPA/CPRA). Colourway does not sell or share personal information as those terms are defined, and does not use it for cross-context behavioural advertising. You will never be discriminated against for exercising a privacy right.
• Other United States states. Several have their own privacy statutes granting comparable rights. Where one applies to you, we honour the rights it gives you through the same address below, without asking which state you are in first.
• EEA, UK and Switzerland (GDPR and UK GDPR). Break Thruu Entertainment, Inc. is the controller of your personal data. You have the right to access it, to have it corrected, to have it erased, to restrict or object to processing, to portability — a machine-readable copy, which Profile → Export gives you at any time without asking us — and to withdraw consent where processing rests on it. You will not be treated differently for exercising any of them.
  
  Our lawful bases are performance of a contract, for everything the app needs in order to be the service you signed up for, and legitimate interests, for keeping it secure and preventing abuse. We do not rely on consent for the core service, and we do not process your data for advertising, profiling, or automated decisions that produce legal effects.
  
  You may lodge a complaint with your national supervisory authority. You are entitled to do that without contacting us first, though we would rather hear from you and fix it.
• Elsewhere. Many countries — Australia, Brazil, Japan, South Korea and others — grant comparable rights. Where a law applies to you that we have not named, we honour the rights it gives you through the same address below. We would rather answer a request than argue about which statute compelled it.

Security

Traffic is encrypted in transit. Data is encrypted at rest by our hosting provider. Access to your rows is enforced at the database level rather than only in the app. Receipt images sit in a private bucket reachable only through short-lived signed links. QuickBooks tokens are held where the client application cannot read them at all.

No system is perfectly secure, and Colourway does not claim otherwise. If you believe your account has been compromised, email privacy@colourwayapp.com.

Children

Colourway is not directed at children and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has provided us information, email privacy@colourwayapp.com and we will delete it.

Changes

If this policy changes materially, we will update the date above and notify you in the app before the change takes effect. Continuing to use Colourway after that means you accept the updated policy.

Contact

Break Thruu Entertainment, Inc.
34 Woodbury Court
Brampton, Ontario, Canada  L6Y 4K5
privacy@colourwayapp.com