My COL: Privacy Policy

Last updated: 7 October 2026

My COL is a budgeting app that helps you understand your cost of living by reading your receipts and bank statements. This policy explains what information the app collects, why, who it is shared with, and your rights.

My COL is currently in testing. Features may change, and this policy will be updated if they do.

Who is responsible for your data

My COL is run by MY MIX LTD, a company registered in England and Wales (company number 16825521), registered office: 3 Danby Street, Bristol, BS16 1QB. MY MIX LTD is the data controller for your information.

Contact: support@mycolapp.com

What information we collect

Account details

• Your email address and password. Your password is stored in a scrambled (hashed) form and cannot be read back, even by us.
• Technical sign-in records, such as when you last signed in, and IP addresses recorded in security logs.

Receipt information

When you scan a receipt (using up to 4 photos for a long receipt), we store the shop name, purchase date, total, and each item's name, price, pack size and spending category. If an item can't be read clearly, we keep the text printed on the receipt so you can rename it.

Your item names and lists

• Item names you save or edit, and items you choose to merge (for example, two names for the same product).
• Items you add to your shopping list and monthly list.

Bank statement information

When you upload a statement, we store each transaction's date, description, amount, whether money came in or went out, its spending category, and any receipt it is matched to. Transaction descriptions may include the names of people or businesses you have paid, such as a landlord or a friend.

On your device

A login token is kept on your phone (or in your browser, if you use the web version) so you stay signed in. The app may briefly keep copies of photos or files you choose in your phone's temporary storage, which your phone clears automatically.

What we don't collect

We do not collect your name, home address, phone number, location or device identifiers. We do not use cookies for tracking, advertising or analytics.

Receipt photos and statement files

Receipt photos and statement files (CSV or PDF) are not stored on our servers. They are sent for processing, the useful details are extracted and saved, and the photo or file itself is then discarded.

If a photo cannot be read, a short description of the problem may be recorded in our technical logs for troubleshooting. These logs are kept for a limited time.

Why we use your information

We use your information to:

• create and secure your account
• read your receipts and statements and organise your spending by category, item and shop
• remember the item names you save or merge, and build your shopping and monthly lists
• send you account emails, such as email confirmation and password reset
• fix problems and keep the service secure

Under UK data protection law, we rely on performing our contract with you (providing the app you signed up for) and our legitimate interests in keeping the service secure and working properly.

We do not sell your data, show you adverts, or use your data for marketing.

Who we share information with

We only share information with companies that help us run the app, and only for that purpose:

• Supabase stores your account and spending data, runs sign-in, and sends account emails. Your data is stored in London, United Kingdom. Some processing runs on Supabase's global network.
• Anthropic (the provider of the Claude AI model) reads your receipt photos and statement text to extract items, prices and transactions, and suggests spending categories and product names. We do not send Anthropic your email address or account ID. Anthropic processes data in the United States. Under its commercial terms, Anthropic does not use this data to train its AI models, and deletes it after a limited period set out in its data retention policy, except where it must keep it longer to enforce its usage policies or comply with the law.
• Apple and Google distribute the app through TestFlight and Google Play, and may collect information under their own privacy policies.
• Google Forms: if you choose to send us feedback, your answers are collected through Google Forms. Any email address you give there is optional and only used to reply to your feedback.

International transfers

Because Anthropic processes data in the United States, some of your information is transferred outside the UK. These transfers are protected by Anthropic's data processing terms, which include the Standard Contractual Clauses together with the UK International Data Transfer Addendum approved by the Information Commissioner's Office.

How long we keep your information

We keep your account and spending data for as long as your account exists. When you delete your account, we delete your account and all your receipts, transactions, item names and lists.

Deleting your account

You can delete your account and all your data at any time from inside the app: open the ☰ menu and choose Delete account. Your data is deleted straight away.

You can also email support@mycolapp.com from the email address you use for My COL, with the subject "Delete my account". We will delete your account within 30 days and confirm when it has been done.

Phone permissions

• Camera: only to photograph receipts.
• Photos: only to let you choose receipt photos you have already taken.

The app does not use your microphone, contacts or location.

Security

Data is sent over encrypted connections. Each user can only access their own data; this is enforced by our database rules. No system is perfectly secure, but we take reasonable steps to protect your information.

Your rights

Under UK data protection law, you have the right to:

• access the information we hold about you
• correct information that is wrong
• have your information deleted
• object to or restrict how we use it
• receive a copy of your information in a portable format

To use any of these rights, email support@mycolapp.com. We will reply within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Age limit

My COL is for people aged 18 and over. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, tell you in the app or by email.