Consent to health information in pharmacy receipts
Version of October 7, 2026
By ticking “I explicitly consent to Tratobor processing health information that my pharmacy receipts may contain” and saving a receipt, or pressing “Give consent” under Account, you give your explicit consent under Article 9(2)(a) of the GDPR to the processing described below. It is separate from your account (which runs on our contract with you, see the privacy policy) and entirely optional.
Who
The controller is Andrei Kramarenko, who runs Tratobor (tratobor.com). Contact: kramarenych@gmail.com.
What information
The lines of pharmacy receipts — names of medicines, medical devices and other pharmacy products, their quantities and prices — and lines that look like medicines (dosage form, strength) on receipts from other shops. They aren't a diagnosis, but they can reveal something about your health. We never ask for diagnoses or prescriptions.
Why
To keep those lines in your records and show them to you like the lines of any other receipt: your receipts list, price comparisons and price tracking. Nothing else — no advertising, no profiling, no assessment of your health, no sharing with anyone.
Where it goes
The same places as the rest of your records: our own servers in Helsinki, Finland (Hetzner), with requests passing through our website host Vercel in the USA, and a copy in your browser. If you chose to track a product's price, its name may appear in the weekly Plus email, delivered by Resend. Details and safeguards are in the privacy policy.
If you don't consent
Everything else works the same. A pharmacy receipt photo is read on our server in memory only, to find the total, date and store; the medicine names are dropped right there — they aren't sent to your device and aren't stored. The receipt is saved with its total, date and store, and the spending goes under Pharmacy. Medicine-like lines on other receipts aren't kept either; the other lines and the total stay.
How long and how to withdraw
Until you withdraw it or delete your account. To withdraw: Account → “Pharmacy receipts” → “withdraw consent”. Lines of pharmacy receipts already saved are erased at once on that device and in your account, and on your other devices at their next sync; totals, dates and spending stay. You can also delete the account or email us from its address. Withdrawing doesn't affect the lawfulness of processing before it (Art. 7(3) GDPR) or anything else in the app.
How consent is recorded
Only when you're signed in: the box is never pre-ticked. Your account stores the date and time you consented and the version of this page; on withdrawal, the date you withdrew.
Version of October 7, 2026. A new version is published on this page; if the purpose or the information changes, we will ask for your consent again.