Two addresses, so the right thing reaches the right place.
Zilda is small enough that both of these reach somebody who can actually change the thing you are writing about. There is no ticket number and no form to fill in.
A receipt it read wrong, a claim form it would not fill, something that should exist and does not. Screenshots help more than descriptions, and the vendor and date of a receipt that misread is usually enough to find the problem.
What is held about you, a copy of it, or a request to delete it. Also the right address for anything you think this app is getting wrong about privacy — that is worth hearing about from the person who noticed rather than from somebody else later.
If what you want to know is what Zilda holds and what it cannot see, the security page answers most of it without an email — including the one place where receipts do leave your own cloud, which is the part worth reading before you decide to trust it.