Privacy Policy

Moj Račun (“the app”, “we”) is a Telegram Mini App that lets you scan Serbian fiscal receipts, keep a digital archive of them, and see analytics of your spending. This policy explains what data we process and your rights over it.

Who is responsible

The data controller is the operator of Moj Račun. For any privacy request, contact us at y.s.serebriakov@gmail.com.

What data we process

• Telegram account data — your Telegram user ID and display name, received from Telegram when you open the app. We do not receive your phone number or password.
• Receipt data — when you scan a receipt QR code, we fetch its contents (merchant, address, items, prices, VAT, date, total) from the Serbian Tax Administration portal (suf.purs.gov.rs) and store them in your account.
• Spending analytics — categories and totals derived from your receipts.
• Attribution tag — if you open the app through a campaign link, the campaign label (e.g. startapp) so we can understand where users come from.
• Subscription status — whether you have paid access to analytics. Payments are made in Telegram Stars and handled by Telegram; we do not receive your card or bank details.

How we use it

Solely to provide the service: to store and display your receipts, compute spending analytics, and manage paid access. We do not sell your data or use it for advertising profiling.

Third parties

• Telegram — the platform we run on, provides authentication and processes payments.
• Serbian Tax Administration (suf.purs.gov.rs) — the source we fetch receipt contents from, based on the QR you scan.
• OpenRouter (AI provider) — to assign a category to a product, we send the item name only (e.g. “Mleko 2.8%”) for classification. We do not send your identity or receipt totals.
• Hosting — our server runs in the EU (Frankfurt, Germany).

Data retention & deletion

We keep your data until you delete it. You can erase your account and all receipts at any time from Settings → Data → “Delete all my data” inside the app — this removes your data immediately and permanently.

Your rights

Under the GDPR you have the right to access, correct, export, and delete your personal data, and to object to or restrict its processing. You can delete your data yourself in the app, or contact us for any other request. You may also lodge a complaint with your local data protection authority.

Security

Traffic is served over HTTPS. Access to the app is authenticated through Telegram. We store only the data described above.

Children

The app is not intended for persons under 16.

Changes

We may update this policy; the “Last updated” date above reflects the current version. Material changes will be reflected here.

---

Contact: y.s.serebriakov@gmail.com