A receipt is personal. We treat it that way.

Who we are

Bagged is made by Dupi Technology Ltd, which is the data controller for everything described on this page. Questions, requests and complaints all go to founders@dupi.co.uk.

This site

This website has no accounts, no sign-in and no tracking cookies. It sets no cookies of its own.

It uses Vercel Analytics, which counts page views without cookies and without building a profile of you. It records things like the page, the country and the type of device, not who you are.

The receipt shown on the site is an example. It is not anybody's real shopping.

The app: what it collects

An email address or an Apple sign-in, so your history is yours and survives a new phone.

The photograph of each receipt you choose to take.

The line items read from that photograph: the product name as printed, the quantity, the price, and the processing classification worked out from the name.

That is the whole list. There is no address book access, no location, no advertising identifier and no third-party analytics inside the app.

Why, and on what legal basis

The photograph is processed to extract the lines. That is the only reason it is uploaded.

The line items are what the product is: they produce your figure, your trends and your suggested swap. Without them there is no product.

The lawful basis for all of it is performance of a contract, which is to say that you asked for an app that reads your receipts and this is what reading them requires. Analytics on this website relies on legitimate interests, and is limited to counting visits.

Never sold, never shared

Your receipts and your line items are not sold, rented, licensed or shared with anybody for their own purposes. Not with advertisers, not with data brokers, not with retailers, not with insurers, and not with anyone building a shopping dataset.

There is no advertising in the app, so there is nothing to target and nobody buying the means to target it.

The only companies that touch your data are the two suppliers listed below, and they act on our instructions rather than their own.

Who else sees it

Supabase hosts the database and file storage, in the European Union (Ireland).

Anthropic processes each receipt photograph to read the lines from it. The image is sent for that purpose only and is not used to train models. This processing takes place outside the United Kingdom, and that transfer is covered by the data protection terms in our agreement with them.

That is the whole list. No analytics SDK inside the app, no advertising networks, no social trackers.

How long it is kept

Receipt photographs are kept for 12 months from the day you upload them, and are then deleted. They are kept that long for one reason: the parser improves, and being able to re-read your old receipts with a better version is worth more to you than deleting the image the moment it has been read once.

Parsed line items are kept for as long as your account exists. They are the history, and the product is a comparison over time, so deleting them on a schedule would delete the thing you came for.

You can delete an individual receipt whenever you like, and both the photograph and its line items go immediately.

If you delete your account, everything attached to it goes with it.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for all of it to be deleted, or object to how it is being handled, and we will do it.

Email founders@dupi.co.uk. If you are in the UK and unhappy with how we have handled a request, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The app is not aimed at children and is not designed for people under 13.

Changes to this page

If any of this changes in a way that affects what happens to data already collected, you will be told in the app before the change takes effect rather than after it.

This page was last updated on 12 August 2026.