Last updated 23 September 2026
This page is about health-related information, and it exists because Washington's My Health My Data Act (RCW 19.373) requires a separate one. PriceSlip is made and run by MatchReach Technologies LLC, a Washington limited liability company ("MatchReach", "we", "us"), so the Act applies to us whatever our size. It gives Washington residents, and anyone whose health data we collect in Washington, the rights set out below. We extend the same rights to everyone who uses PriceSlip, because keeping two standards would be harder than keeping one.
PriceSlip is a price tracker. It is not a health app, it has no health features, and we do not want your health information. But a receipt is a receipt, and some of what is printed on one reveals health. The honest thing is to say where that happens rather than claim it never does. Our general Privacy Policy covers everything else we store.
Three things, all of which you hand to us yourself, and none of which we ask you to make health-related:
| Receipts you upload | We store the photo or PDF itself and keep it on your account until you delete it. When you upload a receipt, we send the image to OpenAI and ask it for every line item, price and date on it, and we store what comes back. A receipt from a supermarket or a warehouse club can name a prescription pickup, a test kit, a thermometer or contraceptives — so both the image and the text read from it are covered by this policy for as long as you keep them. |
| Photos you take to identify a product | The photo goes to Google to be identified. If you photograph a medication box, a glucose meter or a mobility aid, that image is health-related the moment it leaves your phone. |
| Products you choose to track | The name, store, price, purchase date and link you save. A tracked blood-pressure monitor or hearing aid says something about you that a tracked television does not. |
| Any location, ever | The app does not ask for location permission and there is no location code in it. We operate no geofence around any health facility — the Act forbids that, and we could not do it if we wanted to. |
| Advertising and analytics | The phone app contains no advertising, attribution or analytics SDK. Nothing about what you track is sent to an advertising network, because there is no advertising network in this product. |
| Health questions, diagnoses or conditions | We never ask. There is no field for a condition, a medication or a provider, and no place one could be entered. |
| Product categories | The product identifier returns a category, and we throw it away. It is not stored in any table, so we hold no record grouping your purchases into a kind of thing. |
All of it comes from you, in the app or on this website: a receipt you upload, a photo you take, a product you add. We do not buy data about you, receive it from data brokers, or collect it from other websites or apps you use.
We use it for one thing: to know what you bought and what you paid, so we can watch the price and tell you when it drops. We do not use it to build a profile of you, to advertise, to train our own models, or to work out anything about your health — and there is no feature in the product that would do any of those. We collect it only because you asked for a service that needs it; if we ever wanted it for anything else, we would ask you first, in plain words, and you would be free to say no.
These, by name, and no one else:
| OpenAI | Reads your uploaded receipts. It receives the image itself, or the text of a PDF, which means it sees every line on that receipt and not only the products you care about. OpenAI does not use data sent through its API to train its models, and deletes it within 30 days unless the law requires otherwise. |
| Google Gemini | Identifies a product from a photo or a description, only when you use the photo or link-finder features. Google keeps what it receives for up to 55 days to detect abuse. We currently use the free Gemini plan, under which Google may also use what it receives to improve its products and people at Google may read it — that use is not bounded by the 55 days, and it is the one place in this list where the recipient does something of its own with what we send. That is why the photo screen asks you to keep people and documents out of the frame, and why photographing a medicine cabinet is a bad idea. |
| Brevo | Sends our email. A price-drop alert names the product it is about, and if you tick the technical-details box on the Help form, the support message Brevo carries can include the name, store, link, price and purchase date of the product you picked. |
| Cloudflare | Routes email sent to our own addresses — including a support message you send us, with whatever the technical-details box attached to it — to our inbox at hello@matchreachapp.com. |
| Expo and Google Firebase Cloud Messaging | Deliver our push notifications to phones. The alert text names the product it is about, so they see that name along with a device identifier. |
| Railway | Hosts the database. The receipts you upload are stored in it as files, so Railway holds the images themselves. |
| A computer we own | Our own machine checks prices and holds the database backups. It is not a company; it is a computer in an office, and it is on this list because it touches the data. |
We do not sell it. Not for money and not for anything else of value, to anyone, ever — which under this Act would need your written authorisation on a specific form, and we have never asked anyone to sign one. We do not share it with advertisers or data brokers. We would hand it over if a valid court order or subpoena required it, and we would tell you unless the law forbade us.
You can ask us to confirm whether we collect, share or sell your health-related data, and to list the third parties it has gone to. You can withdraw your consent to us collecting or sharing it. And you can have it deleted, including from the companies above.
The fastest route needs no request at all: deleting a receipt in the app deletes the text read from it, and deleting your account removes everything. Use Profile & Settings in the app or on the website. If you cannot sign in, ask at matchreachapp.com/priceslip/delete-account: we email the account's address a link to confirm, and act only once it is followed, so nobody can have an account deleted by knowing its address.
For anything else, write to hello@matchreachapp.com. We answer within 45 days, and will tell you if we need the further 45 days the Act allows and why. Asking is free. If we refuse, we will say why, and you can appeal by replying to that answer; we will decide the appeal in writing within 45 days. If we still say no, you can complain to the Washington State Attorney General at www.atg.wa.gov/file-complaint.
Deleting a receipt removes the file and the text read from it. Deleting your account removes the account, the products you tracked, their price history, your notifications, your receipts and their files, your registered devices and the support messages you sent. It is immediate and cannot be undone. We also tell the companies above that store what we sent them to delete it; what each of them keeps meanwhile is in their row. The ones that carry a message rather than hold it for us — our mail provider, the mail router and the push services — keep delivery records of their own for a time, and an email or a notification already delivered cannot be recalled.
Two honest limits, the same ones the Privacy Policy sets out. We back up the database daily and each backup is deleted within 14 days, so an account can remain in a backup taken before it was deleted; when a backup is restored we delete again every account whose deletion we have on record. And our hosting provider keeps the service's logs, which record events by your account's internal id; deleting your account does not remove those, and they go when the provider's retention ends. Product names and search text are deliberately kept out of those logs, so what survives there says an account did something, never what it was.
One person reads this address, and it is the same address for privacy questions, health data questions and everything else.
MatchReach Technologies LLC · hello@matchreachapp.com
If we change this policy, the date at the top changes with it, and we will tell you before a change that widens what we collect or who sees it takes effect.