ReceiptLog Privacy Policy
Last updated: July 28, 2026
ReceiptLog has no account, no analytics, no advertising, and no server of ours. Your receipts and their photos are stored on your iPhone. Two things do leave the device — a purchase, which Apple handles, and an optional scan — and both are described in full below.
What stays on your device
Every receipt — the photo, the merchant, the date, the totals, the category, the business justification, the attendees, and your business name and default attendees from Settings — is written to a database and a folder inside the app’s own storage. It is covered by your device passcode and included in your device backups if you have those on. We cannot read any of it.
Scanning a receipt
Automatic scanning is the one thing that sends a receipt anywhere, and it is only present in builds released with a scanning key. Where it is available and switched on, that photo is sent to Google’s Gemini API so the merchant, date and totals can be read off it. The result comes back and is filled into the form for you to check.
It does not pass through a server of ours, and nothing else about you is attached to it. Receipts you enter by hand, and receipts captured with scanning off, are never transmitted.
A receipt photo can show a card’s last four digits, a merchant address, and what you bought. That is worth knowing before you switch scanning on.
The purchase
ReceiptLog Pro is a one-time purchase sold through the App Store, using Apple’s own StoreKit. There is no purchase SDK and no third party in the middle: the app asks the App Store whether you own Pro, and the App Store answers. Payment is handled entirely by Apple — we never see a card, and nothing about the transaction reaches us.
Camera
The camera is used only when you tap to photograph a receipt. It is the only permission the app asks for, and declining it leaves manual entry working.
Exports and sharing
A PDF, CSV or ZIP export is written on your device and handed to the iOS share sheet. Where it goes next — mail, a cloud drive, a messaging app — is your choice, made in iOS rather than in ReceiptLog, and is then covered by whatever you sent it through.
Financial information
Receipts describe what you spend and where you go, which is sensitive. It is exactly because of that that there is no account, no analytics, and no server: outside the one optional scan, there is no copy of any of it anywhere but your phone, so there is nothing for us to lose, sell, or be compelled to hand over.
Deleting your data
Settings › Delete All Data removes every receipt, photo and setting. Deleting the app does the same. Because we hold nothing, there is no request to make of us and no account to close.