Last updated: 2026-11-11
This policy is maintained in English so that there is always one current version. It applies to users in every country.
Privacy Overview
- Receipt text and the receipt photo are processed securely and deleted as soon as the result is returned.
- We do not keep your receipts, receipt photos or their contents on our servers.
- We never sell your personal information. Scan data is shared only with the AI service that reads it and returns the result (see Section 4).
- You control your data completely: it stays on your own devices.
1. Introduction
ReceiptIQ AI ("we," "us," or "our") values your privacy. This Privacy Policy explains how we handle your data when you use our iOS app.
2. Information We Collect and Send
When you use ReceiptIQ AI's AI-powered features, the following data is sent from your device to our servers, where it is read by our AI service (AI models run by a third-party cloud AI provider or by us):
- Receipt Text and Receipt Photo: When you scan a receipt, the text read by your iPhone's on-device OCR and the receipt photo are sent to our servers and read by our AI service. The structured result is returned to your device straight away; no copy of the text or the photo is kept on our servers. If the receipt prints how it was paid, the app keeps only the payment type, the card brand and at most the last 4 card digits, never a full card number; they are saved on your device with the receipt.
- Pay Stubs and Cheques: From app version 2.6.0 you can scan, share or forward a pay stub (pay slip) or a cheque, including a bank app's cheque deposit screen, to record it as income. It is processed exactly like a receipt photo: our servers read it, send the result to your device and keep nothing, neither the document nor anything read from it. The result sent to your device holds only who paid (the employer, or whoever wrote the cheque), the pay date or cheque date, and the net amount, and that is all the app saves, on your device. Your name and address, account and cheque numbers, pay rate, gross pay, deductions, taxes and year-to-date figures are never part of the result. If you keep receipt images on, the picture of the document is saved on your device like any receipt photo.
- Voice Input Transcriptions: When you use voice input to add a transaction, the transcribed text is sent to our servers and read by our AI service for parsing into structured receipt data.
- Bank Statement Text: When you scan or import a bank statement, the text of its transaction rows is sent to our servers and read by our AI service for parsing into individual transactions. For a PDF, only the transaction rows, the statement period and the printed totals are sent; the rest of the document stays on your device. Card and account numbers are masked on your device before anything is sent, and a PDF password is used only on your device to open the file and is never stored or sent.
- Item Names: Names of items on your saved receipts may be sent to our servers to sort them into categories. Nothing is stored on our servers.
- Device Language & Country: Your device's language and country settings are sent to provide localized AI responses.
- Device Identifier: A unique device identifier is sent for rate limiting and fair usage enforcement. This identifier cannot be used to identify you personally.
- Anonymous Usage Counts: With each scan the app also sends simple counts: how many receipts this device has scanned, the day the app was installed, how often the plan page was opened and how often the free limit was reached (from version 2.5.5 also whether the app or you opened the plan page, and whether a plan button was tapped there), if you use Family Sharing in the app, an anonymous family number (a one-way code made from your family's identifier, the same on every device of the family) and whether the device is the family's owner or a member, so devices sharing one subscription are counted once (from version 2.5.5) and, from version 2.6.2, a free family's 30 AI scans are counted together for the whole family, how often the Charts and Calendar screens were opened (from version 2.4.6, which also sends these counts when the plan page opens, when the free limit is reached or when you leave the app, not only with a scan), the phone's time-zone offset (for example UTC+9, used only to count scans by your local day rather than by UTC), and, if you answer the one-time question about what you mainly use the app for, that answer (tax, household budget, keeping receipts or just trying). From version 2.5.7 the counts also include on how many days the app was opened and the last such day, on how many days a saved receipt was opened, how often a scan was started and how often one was cancelled, and how often you corrected the total or the category of a receipt the AI read: numbers only, never the receipt, the amounts or the categories themselves. From version 2.5.9 a device in a Family Sharing group sends these counts even if it has not scanned a receipt yet (for example a family member who only views the shared receipts), together with the number of devices in the family (reported by the family owner's device) and the last day the device finished a family sync. When you subscribe, the purchase carries an anonymous token derived from the device identifier, which Apple returns to us with the purchase notification, so we can see, for example, how many scans people make before subscribing. These counts contain no receipt content, name, email or payment details, are not used for advertising, and are not shared with anyone.
- Daily fair-use limit (app 2.5.7 and later): To keep the service fast for everyone, our server counts how many receipts each device has read today, by your local day (from the time-zone offset above), and tells the app how many are left. The count is kept with the device identifier and contains nothing about the receipts. If you need more, for example to enter a backlog, you can contact us from the message the app shows, and we can raise the limit for your device.
- One-time messages from support (app 2.5.7 and later): If you have written to us, we can leave a short message for your device on our server (for example "your daily limit is raised" or "the problem you reported is fixed"). It is delivered with the app's next request to our server, shown once, and then marked as delivered. The text is one of the app's own prepared, translated messages; we cannot send free text, links or anything personal this way.
- Support emails (app 2.5.7 and later): When you write to us from the app (Report a Problem, Contact Us), the email includes a short Device ID: a 12-character code made one-way from the device identifier. It lets us find this device's anonymous usage counts and fair-use limit so we can help you, and it is only sent when you choose to send the email. We keep the link between your email address and that Device ID only to answer you and help with your device, and you can ask us to delete it at any time at the address in section 10.
- Apple Ads Attribution (app 2.5.4 and later): Once, after your first successful scan, the app asks Apple's AdServices framework for an attribution token and sends it with the device identifier to our server, which asks Apple whether this install came from a tap on one of our own Apple Ads. We keep only Apple's answer: yes or no and, for an ad install, the campaign, ad group and search keyword IDs of our ad, the country or region of the ad, whether it was a new download or a re-download, and the date we asked. We do not keep the token or the date of the ad tap. We use this only to see which of our own Apple Ads lead to installs and how those installs use the app, compared with everyone else. It is not tracking: the AdServices framework gives us no advertising identifier (IDFA) and nothing about other apps or websites, which is why the app does not show Apple's tracking permission prompt. The answer is kept with this device's anonymous usage counts above, is never combined with data from other companies, and is never used for advertising in other companies' apps or shared with anyone.
What We Do NOT Send: Manual entry sends nothing. On-device AI (reading receipts on the phone itself) is in research and testing and is not available in the app right now. We do not collect your name, email address, or any other personal identity information through AI processing.
Website demo ("Try one receipt"): The pages receiptiq.me/try-receipt-scanner (also in Japanese and German) let you try the scanner in your browser without installing the app. Here a receipt photo is sent to our server only when you choose a photo and start the demo; the page says so before you do. When you use it:
- A resized copy of the photo (max 1600 px, JPEG) is sent to our server and read by our AI service. The result is shown to you on the page.
- The photo and the result are not stored. We do not log, retain or back up them. Our AI provider may not use the photo to train its models.
- We count each demo use without its content: the day and hour, the country (from the connection), the page language, whether reading succeeded, and a random identifier your browser keeps (so we can count visitors, not identify them). A hashed copy of your IP address is kept for two days only to limit the demo to a few tries per day.
- To keep the demo for people rather than automated scripts, the page runs Cloudflare Turnstile, a check that is usually invisible. Cloudflare sees your browser's connection for that check; it sets no tracking cookies and we receive only a yes or no.
- The iPhone app works the same way: when you scan, the photo and its text are read and not kept, as described above.
Email receipts (optional, app 2.5.1 and later): In Settings > Receipts & Money > Email receipts you can turn on a personal forwarding address (for example r-k7m2x9pq4d@in.receiptiq.me). It is off unless you turn it on, and you can turn it off at any time. When you forward an order confirmation or invoice to that address, or set up a rule in your mail service that forwards such mail automatically:
- Our server reads the message once with our AI service to extract the receipt (the store, date, items and amounts), using a PDF attachment when there is one, otherwise the text of the message. The message itself is deleted immediately: no mail, attachment, sender address or subject is stored or logged.
- The extracted receipt, and the PDF attachment when there was one, waits for your device encrypted with a key that exists only on that device. We cannot read what is waiting. It is deleted when your device fetches it, or after 30 days at the latest.
- Your device shows the fetched receipts for review before anything is saved; what you decline is deleted. Saved receipts are stored only on your own devices, and on the devices in your Family Sharing group if you use it, like a scanned receipt.
- We count messages per address and day without their content, to limit abuse (at most 50 a day, 10 MB each). The address is random and cannot be guessed from anything about you, unless you choose your own name for it (a chosen name can be guessed, which is why nothing is saved without your review); turning the feature off deletes the address and anything still waiting.
- We never read your mailbox: nothing reaches us except what you, or a rule you set up, forward to your address.
Android waitlist (website): ReceiptIQ is not available for Android yet. When you open an App Store button on this website with an Android phone, we offer to email you once when an Android version is available. Only if you enter your email address, tick the box and send it:
- We store your email address, the language of the page, the page you were on, the country of your connection and the date, on our own server. We send one email to confirm the address; if you do not confirm within 7 days, the address is deleted.
- A confirmed address is used for one thing only: one email when ReceiptIQ for Android is available (or, if we decide not to build it, one email saying so). No newsletter, no other mail, and it is never shared with or sold to anyone.
- Every email has a link that deletes your address immediately; you can also ask us at the address in section 10.
- To limit abuse, a hashed copy of your IP address is kept for two days. We count how often the panel is shown and how many people sign up, per country, without any address.
You Are Informed Before Anything Is Sent: The app explains exactly what data is shared for AI processing and who receives it: the first-run guide points to it, and the full disclosure is always one tap away in Settings > About > Data & Privacy. Nothing leaves your device until you scan, dictate or import a receipt, turn on Email receipts, or join a family in Family Sharing (a family device then sends only the anonymous counts described in this policy). Adding an expense by manual entry sends nothing; scanning, voice and statement import are read by our AI service.
Data Storage: Your data is processed in real time and is not stored on our servers. Any third-party AI provider we use may not use it to train its models, and may keep it only for a limited period for security and abuse monitoring. Your receipts and photos stay on your own devices. If you back up a device with Apple's own backup features, the backup is governed by your Apple settings and is not stored on our servers.
3. Use of Your Information
- AI Classification: Receipt text, voice transcriptions, and bank statement text are sent to our servers, which pass them to our AI service for classification into structured expense data (store name, date, items, categories, totals).
- Providing Services: We process your data solely to categorize expenses and present them in a structured format. Data is not used for advertising, profiling, or any purpose other than providing app functionality.
- Support Services: If you request technical support, we might briefly access your data strictly to resolve your issue, with your explicit consent.
4. Third-Party Data Sharing
- We do not sell your personal information to any third parties.
- AI Service: To read your receipts we use AI models, run either by a third-party cloud AI provider or by us; which models and providers we use may change over time. Any third-party provider processes scan data under its terms for paid business customers: it may not use the data to train its models, and keeps it only briefly for security and abuse monitoring.
- ReceiptIQ AI and any AI provider we use maintain strict data protection standards.
- Apple: For Apple Ads attribution (Section 2) our server sends Apple only the attribution token the app received from Apple; nothing else.
- Apart from the AI provider that reads your scans and the Apple Ads check above, we do not share your data with any other third parties.
5. Data Security
- We implement robust security measures to protect your data during processing.
- However, we cannot guarantee absolute security. Use the app at your own discretion and risk.
6. Fair Use Policy
- This app is designed exclusively for personal receipt management. Excessive or commercial use may trigger usage limits.
- To maintain fair usage, a paid plan allows at most 100 AI scans per 24-hour period, which should be enough for typical personal and family expenses. The free plan includes 30 AI scans in total, for life.
- Please contact us if you're interested in commercial or high-volume plans.
7. Your Data, Your Control
- You may stop using ReceiptIQ AI at any time without penalty.
- For questions about data handling or requests regarding data privacy, contact us at receiptiq.me@gmail.com.
8. Receipt Contribution Program (outside the app)
From October 2026 we invite a small number of users in selected countries (first Germany and Japan) to send us photos of their own paper receipts by email, so that we can test and improve recognition for that country's receipt formats. This is separate from the app, and nothing in this section changes how the app works.
- Participation is voluntary and happens by your own email. You choose which receipts to send and may black out any personal information first (names, addresses, card or loyalty numbers, medication names).
- We use the photos and the data read from them only to test and improve receipt recognition, including the recognition models we train. They are kept in our private test collection, never sold or shared, and never stored on the servers that process scans from the app.
- As a thank-you, contributors receive a one-time offer code for 6 months of Premium. Apple ties the code to your Apple ID; we never link it to your receipts.
- You can ask us to delete your receipts at any time by email (support@receiptiq.me).
9. Updates to This Policy
We may update this Privacy Policy periodically. Continued use of ReceiptIQ AI following any changes means you accept those changes.
10. Contact Information
If you have any concerns or questions about this Privacy Policy, please reach out to us at receiptiq.me@gmail.com.
