Your receipts are personal.

1. Scope and who is responsible

Studio Duck (“we”, “us” or “our”) provides Magpie and is responsible for the information handling described here. This policy applies to the Magpie app, its share extension, the Magpie API and these legal pages.

It does not govern Apple’s App Store, Apple Account, iCloud Keychain or payment services, or a destination you choose for an export. Those services have their own privacy terms.

2. Information Magpie handles

Account and authentication information

• Your Magpie account identifier, chosen username, account role and account timestamps.
• If you use Sign in with Apple, Apple’s app-scoped user identifier and any name or email address Apple makes available. The email may be an Apple private relay address.
• If you use a passkey, the public credential, credential identifier, authenticator metadata and sign counter needed to verify it. Your passkey private key and Face ID data do not leave Apple’s secure systems and are not available to Magpie.
• Session security information, including a hash of the session token, the device name you provide, and creation, use, expiry and revocation times.

Receipts and financial records

• Receipt images or PDFs you photograph, select, import or share into Magpie.
• Recognised text and confirmed receipt fields, which may include merchant, invoice number, date, category, total, GST, business-use percentage, status and a merchant website or email domain printed on the receipt.
• Images you attach to saved receipts, plus technical metadata such as file type, size and integrity hash.
• Receipt text can incidentally contain other information printed by a merchant, such as a store location, loyalty identifier or the last four digits of a payment card. Do not upload information you do not want processed.

Purchases and app operation

• SuperMagpie product, transaction and original-transaction identifiers; purchase, expiry, verification and revocation dates; App Store environment; and an account-linking token. Apple handles payment-card details—we do not receive them.
• A manual SuperMagpie grant if the operator has enabled one for your account.
• Network and security metadata such as IP address, request time, requested endpoint, response status and rate-limit activity. Application logs are designed not to include receipt content.
• Messages and details you choose to provide when contacting support.

Magpie does not request your contacts, precise location, microphone, health data or advertising identifier.

3. Why we use information

• To authenticate you, secure your account and sync your receipts across sessions and devices.
• To read receipt text, suggest structured fields, let you confirm or correct them, store your records, calculate summaries and create exports you request.
• To retrieve a merchant logo, operate SuperMagpie entitlements and provide subscription features described in the app.
• To prevent abuse, enforce rate limits, diagnose failures, maintain service reliability and respond to support requests.
• To comply with law, enforce our Terms of Use and protect users, Studio Duck and others.

Magpie does not use receipt content for targeted advertising or sell it to data brokers.

4. Receipt recognition and AI processing

Apple Vision first recognises text from the receipt image on your device. On compatible devices where the feature is available, Magpie may use Apple’s on-device models to turn that text into receipt fields.

AI output can be incomplete or wrong. Magpie asks you to review receipt details before relying on them. It does not make automated decisions that determine your legal rights, tax liability, eligibility for a benefit or access to employment, credit, insurance or essential services.

5. Who receives or can access information

Authorised Magpie administrators may access account metadata. An administrator with the additional content-access permission may access receipt fields and images when reasonably necessary for support, security, legal compliance or service integrity. Cross-user receipt access is recorded in an audit log.

We may also disclose information if required by law, to address fraud or security threats, with your direction or consent, or as part of a genuine business transfer subject to appropriate safeguards. We do not rent or sell personal information.

6. Overseas processing

Magpie is operated from Australia, but its service providers operate global infrastructure. Information may be processed in the United States and other countries where Cloudflare, Vercel, Meta, Apple or Brandfetch and their subprocessors operate. Privacy laws in those locations may differ from Australian law. We select providers and technical controls with the aim of protecting information throughout those transfers.

7. How long information is kept

• Receipt records and stored images: kept according to the 1–5 year period you choose in Magpie, calculated from the receipt date. The default is five years. An undated receipt cannot be expired by that rule and remains until you date it, delete it, or delete the account.
• Sessions: expire after 90 days unless revoked sooner. Authentication challenges are short-lived and are periodically removed.
• Subscription records and credentials: kept while needed to operate the account, verify entitlements and meet legal or accounting requirements.
• Operational and security logs: kept only as long as reasonably necessary to operate, secure and diagnose the service, subject to infrastructure-provider retention.

Deleting a receipt removes its database record and associated cloud image. Deleting your account removes its receipts, stored images, Magpie credentials and sessions. Deletion does not erase Apple’s independent App Store purchase history or automatically cancel an Apple subscription.

8. Security

Magpie uses HTTPS, account-scoped database queries, short-lived upload/download links, hashed bearer tokens, server-side roles, rate limits, restricted containers and audit logging. Receipt images are sent directly to private object storage using time-limited signed URLs.

No online service can promise absolute security. Keep your device and Apple Account secure, use Face ID protection if appropriate, and retain original receipts where the law or your own risk tolerance requires them.

9. Your choices, access and correction

• Camera, photo-library and Face ID use are optional and controlled through iOS Settings. Magpie can only read photos you select.
• You can review and correct extracted receipt fields, delete individual receipts, change your username and choose the receipt-retention period in the app.
• You can delete your Magpie account in the app. Manage or cancel SuperMagpie separately in Apple Account subscription settings.
• You may ask us for access to or correction of personal information we hold, or make a privacy complaint, by emailing the address below. We may need to verify your identity before responding.

Exports and shares go to the destination you choose. Once information leaves Magpie, the recipient or destination service controls its copy.

This legal website sets no cookies and contains no analytics or advertising scripts. Cloudflare may still process standard network metadata to deliver and protect the pages.

10. Children

Magpie is a general receipt and tax-record utility and is not directed to children under 13. We do not knowingly solicit personal information from children under 13. Contact us if you believe a child has provided information without appropriate authority.

11. Changes to this policy

We may update this policy when Magpie’s features, providers or legal obligations change. We will change the date at the top and provide additional notice in the app where a change is material and notice is reasonably practicable.

12. Contact and complaints

Email Studio Duck at [email protected]. Please write “Magpie privacy” in the subject and do not attach sensitive receipt material unless requested.

We will investigate privacy complaints and respond within a reasonable time. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.