Fyrabe Privacy Policy

Last updated: 12 November 2026 · Version 0.3 (private beta)

In short

• Fyrabe stores your data in Switzerland (Microsoft Azure, Switzerland North region).
• We don't sell data and we don't show ads.
• Receipts are sent to Anthropic in the USA for automatic recognition. Anthropic does not use them to train AI models. We remove location data from photos first.
• If you sign in with Google, we receive only your name, email address and Google account ID, and use them only to log you in.
• You decide what gets booked. Recognised values are only recorded once you confirm them.
• You can export your data and delete your account at any time.

1. Who we are

The controller responsible for processing your data is:

Matteo Locher, Off-Grid by Matteo Locher (sole proprietorship)
Beundenweg 7
3800 Matten b. Interlaken
Switzerland
Email: hello@fyrabe.app

Fyrabe is in a private beta. Access is by invitation only.

2. Scope

This policy covers the Fyrabe web app (including the version you can install on your phone), Sign in with Google, if you use it, and the FlyApp connection, if you turn it on. It follows the Swiss Federal Act on Data Protection (FADP).

3. What data we process

Account data: name, email address and login details.

Sign in with Google (optional): name, email address, Google account ID and, if available, the address of your profile picture (see section 6).

Company data: your company's name and address, IBAN or QR-IBAN, logo, and settings such as invoice numbers, categories and private-use shares.

Bookkeeping data: invoices, income, expenses, categories and accounts, year-end closings (Jahresabschluss) and the PDF and ZIP files created from them.

Receipts: photos and PDFs you upload or forward to your receipt address, and the values recognised from them (vendor, date, amount, currency, VAT). For forwarded emails we store the attachments or, without attachment, the email's text as a PDF, and the subject. Receipts may contain personal data of third parties, such as a name on a receipt.

Customer data: names, addresses and email addresses of your customers that you enter for invoices.

Data from FlyApp (optional): if you connect FlyApp, completed flights are imported as income, with date, amount and customer.

Technical data: IP address, time of access, browser and device type, and error messages. We never write receipt contents, IBANs or customer addresses to logs.

We don't collect location data, your device's contacts, or login details for your bank. Photos may contain details embedded by your phone, such as where they were taken. We don't use them; the original is kept unchanged as the receipt.

4. What we use the data for

• to provide Fyrabe: creating and sending invoices, capturing receipts, producing year-end closings
• to read receipts automatically (see section 5)
• to log you in, including with Google (see section 6)
• to find bugs and improve Fyrabe
• to tell you about important changes to the service and to answer your questions
• to meet legal obligations

We process your data because it is needed to provide Fyrabe, because we have a legitimate interest in a secure, working service, or because you have consented (for example to the FlyApp connection).

5. Automatic receipt recognition

When you upload a receipt, we send the image or PDF to Anthropic (Anthropic, PBC, USA). The AI model Claude reads the vendor, date, amount, currency and VAT and suggests a category. So give the recognised values a quick check before you confirm them.

• What is sent: only the receipt file and the names of your categories. Before sending, we remove details embedded in the photo, such as the location (GPS), the device and the time it was taken. Your name, your company and other bookkeeping data are not sent.
• Where: recognition runs in the USA.
• No training: Anthropic does not use the receipts to train AI models.
• Retention at Anthropic: Anthropic deletes the data within 30 days. Exceptions: content flagged as violating its usage policy may be kept for up to 2 years, and legal obligations take precedence.
• No automated decision: recognised values are only booked once you have checked and confirmed them.
• The original image stays with us in Switzerland and is not changed after confirmation.

6. Sign in with Google

Instead of an email address and password, you can sign in to Fyrabe with your Google account ("Sign in with Google"). This is optional. Fyrabe uses Google for login only.

• What data we receive from Google: your name, your email address, whether Google has verified it, your Google account ID and, if available, the address of your profile picture. To get these we request only the permissions "openid", "email" and "profile". We get no access to Gmail, Google Drive, contacts, calendar or any other data in your Google account. We never see your Google password.
• What we use it for: only to create or find your Fyrabe account, to log you in and to write to your email address, for example about important changes. An account is only created if you have been invited.
• How we store and protect it: we store your name, email address and Google account ID with your account in Switzerland (Microsoft Azure), encrypted and protected by the measures in section 12. We don't store Google access or refresh tokens.
• Sharing: we don't sell this data and don't share it with third parties, including Anthropic or other processors for their own purposes. We don't use it for advertising or to train AI models.
• Retention and deletion: as long as your account exists. If you delete your account, we delete it within 30 days, and backups after a further 35 days at the latest. You can remove Fyrabe's access to your Google account at any time at myaccount.google.com/permissions and then log in with your email address and password. To have your data deleted from Fyrabe, write to us at hello@fyrabe.app.
• Limited Use: Fyrabe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in, Google processes your data itself, under Google's privacy policy.

7. Your customers' data

You are responsible for your customers' data and for personal data on your receipts. Fyrabe processes this data only on your behalf and only to provide the service.

8. Processors

We use the following service providers. They are contractually bound to process data only on our behalf and to protect it.

Google is not a processor for Fyrabe: when you sign in with Google, Google processes your data as an independent controller (see section 6).

9. Transfers abroad

Your data is stored in Switzerland. The connection between your device and Fyrabe runs through Cloudflare's network (a US company); data is decrypted and re-encrypted on the way but not stored. Emails are sent and received (forwarded receipts) through SendGrid in the USA, and receipts are processed by Anthropic in the USA for automatic recognition. If you sign in with Google, Google (Google LLC, USA, or Google Ireland Limited) processes the login as an independent controller. We only transfer data abroad where adequate protection is in place, for example under the Swiss-U.S. Data Privacy Framework or standard contractual clauses recognised by the FDPIC.

10. How long we keep data

Before you delete your account, we offer you a full export. We then delete your data within 30 days, and backups after a further 35 days at the latest. After deletion, keeping your business records for the legal period is your responsibility.

11. Your rights

You have the right to:

• ask what data we hold about you,
• receive your data in a common format or have it transferred,
• have incorrect data corrected,
• have your data deleted, unless there is a duty to keep it,
• object to processing and withdraw consent, for example for the FlyApp connection or Sign in with Google.

Write to us at hello@fyrabe.app. You can use many of these rights directly in Fyrabe, for example with the export or by deleting your account.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

12. Security

• Connections are encrypted with TLS, and stored data is encrypted too.
• Each company sees only its own data.
• Only the operator has access to the systems, protected by two-factor login.
• Confirmed receipts are stored with a checksum, so any change can be detected.

If a data breach poses a high risk to you, we report it to the FDPIC as soon as possible and inform you directly.

13. Cookies

Fyrabe uses only technically necessary cookies and local storage, for example to keep you logged in. We don't use analytics or advertising trackers.

14. Changes

We update this policy when Fyrabe or the law changes. We tell you about significant changes in the app or by email, in particular if we change how we use data from your Google account.

15. Contact

Privacy questions: hello@fyrabe.app
Matteo Locher, Off-Grid by Matteo Locher, Beundenweg 7, 3800 Matten b. Interlaken, Switzerland