Take a photo or upload an image from the Capture screen. Podupu reads the provider, service date, total, and line items automatically. If a receipt has more than one page, add each page before saving — Podupu combines them into a single record rather than double-counting anything that carries over. If automatic reading fails, you can always enter the details by hand instead.
Every line item is checked against your household's HSA/FSA/LPFSA eligibility rules. When Podupu can't confidently match an item to a rule, it's marked Needs Review instead of guessing. Open the receipt and choose the correct category yourself — the item then carries the eligibility of whichever category you pick, the same as an automatic match would.
Each line item's description is matched against a set of eligibility rules, and each rule knows whether it qualifies for HSA, FSA, and/or LPFSA — an item can be eligible for more than one account type at once. An item that clearly doesn't qualify for any of them is marked ineligible; one that can't be matched with confidence is marked Needs Review instead of being guessed at.
A captured receipt's line items move through a simple lifecycle: unclaimed, submitted, then reimbursed. You can see where every receipt and line item currently stands from the Receipts and Withdraw screens.
Every receipt, claim, and account is isolated at the database level by household — access is enforced there, not just by the app's screens, so one household's records are never reachable from another household's login, even by directly querying the underlying data.
Yes. Receipt images are stored privately and are never given a public URL — every time an image is displayed, it's through a link that's generated on the fly, tied to your session, and expires shortly after.
Yes — all traffic between your device and Podupu is encrypted in transit (HTTPS), the same standard used for online banking.
No. Podupu uses passwordless sign-in: you enter your email and get a one-time link, so there's no password for Podupu to store or for you to reuse from somewhere else.
No. Podupu is a personal tool you use to track and organize your own HSA/FSA/LPFSA-eligible expenses — it isn't a doctor's office, health plan, or insurance clearinghouse, so it isn't a "covered entity" under HIPAA the way those organizations are. We still design and operate the product with the same privacy expectations you'd want from anyone handling health-related information — see the Security section above.
For as long as your account is active — this is expense-tracking data you may need for years (e.g. IRS recordkeeping on HSA/FSA claims), so it isn't automatically expired. If you delete your account, your data is scheduled for permanent deletion 30 days later; signing back in during that window restores everything.
Yes. You can delete your account at any time from Account settings. This starts a 30-day window before your data is permanently and irreversibly deleted, giving you a chance to change your mind by signing back in.
No. Your data is never sold, and it isn't shared with third parties for marketing purposes.
No. Podupu uses an AI provider to read details off your receipt images automatically, but that data isn't used to train any AI model.