Receipt Privacy Policy

Last updated: 10 August 2026

Receipt is made by Pyrean B.V.

This policy is short because Receipt does very little with your data. There is no account, no sign-in, and no server run by us. We do not receive your photographs, your receipts, your card digits, your email, or anything else from the app.

What Receipt holds

A record of each receipt. The shop, the total, the tax, the date, the currency, and where you have sent it. This lives in a file inside Receipt's own storage on your iPhone.

A pointer to the photograph, not a copy of it. The photo stays in your Photos library where you can see and delete it. Receipt stores only the identifier Photos uses to find it again, so deleting a photo in Photos does what you would expect rather than leaving a hidden second copy behind. A photo you take inside the app is saved to your library for the same reason.

The last four digits of a card, when a receipt prints them. Only ever the last four — the rest is masked on the paper and is never read, stored or sent. They exist to answer one question: whose money was this, and therefore where does the receipt go. They never leave the device.

Your mail settings. The address a mailbox sends from and which provider it belongs to. The password is not kept with them — see below.

How receipts are read

Receipt uses Apple Intelligence. On your iPhone is where a library scan always happens: sweeping thousands of photos is done by the on-device model, and nothing is sent anywhere to be analysed.

Apple's Private Cloud Compute is used when you ask a single receipt to be read again and you have that switched on in Settings under Reading. Doing so sends the photograph itself to Apple's Private Cloud Compute and nowhere else, because the picture reads far better than the mangled text a phone pulls off faded till paper. Apple built it so that what is sent is not stored, and cannot be read by Apple, by us, or by anyone — a design that is publicly documented and independently inspectable. If the cloud is unreachable, the receipt is read on the device instead. It never touches a server run by us, because there isn't one.

Apple does not tell an app which of the two answered. Receipt therefore says what it asked for and never claims where a reading actually happened.

Estimates, not measurements

Totals, dates and shop names are worked out from a picture, and faded ink or a crumpled corner will trip it up. Every figure is editable, and nothing is sent anywhere until you have looked at it. Receipt moves paperwork: it does not decide what is deductible, does not file anything with anyone, and is not a substitute for an accountant.

Your mailbox and the email it sends

Receipt sends from your own mailbox, over SMTP, directly from your iPhone to your mail provider — iCloud, Gmail, Google Workspace, Outlook, or whatever server you give it. There is no relay of ours in the path, and no copy of your mail is made anywhere but your provider.

This is not a stylistic choice. Xero, Revolut, Dext and Expensify identify whose account a receipt belongs to from the address it arrived from, so a receipt sent from our address would match nobody's account. That single fact is why the app has no backend.

The password is an app-specific password that you generate and can revoke, not your account password. It is stored in your iPhone's Keychain, marked so that it never leaves this device and is unreadable while the phone is locked. It is used for one thing: signing in to your mail provider to send. We never see it.

What you send goes to the addresses you chose, and is then subject to the privacy policy of your mail provider and of whoever you sent it to.

What we receive

Nothing.

Receipt has no analytics, no crash reporting, no advertising, and no third-party SDKs of any kind. We have no way to see your photographs, your receipts, your card digits, your mailbox, or how you use the app.

Paying for it

Finding, reading and sending receipts is free, forever, unlimited. A subscription shows more than the last seven days of your record and lets you file a whole period in one go. It can be bought monthly or yearly.

Purchases go through Apple. We never see your payment details, your Apple Account, or your name. What Apple tells the app is one thing: whether this device is entitled. That check happens on the device itself — the app reads a signed transaction locally and verifies it there. There is no subscription server, because there is no server.

If you stop paying, nothing is deleted. The receipts outside the free week stay on your iPhone exactly as they were; the app simply stops showing them until you subscribe again.

Photo library access

Receipt asks for access to your photo library so it can find receipts without you having to pick them out. It reads photos to look for text; anything that is not a receipt is passed over and nothing about it is recorded. You can revoke this at any time in iOS Settings under Privacy & Security → Photos, and the camera the same way.

Children

Receipt is not directed at children under 13, and we do not knowingly collect information from anyone. Since we collect nothing at all, there is nothing for us to hold or delete.

Deleting your data

Deleting the Receipt app removes every receipt record and mail setting stored on your device, and removes the stored mail password from the Keychain. Your photographs are not affected — they are in your Photos library, which is yours. Emails you have already sent are with your mail provider and with whoever received them, and Receipt has no way to reach either.

Changes to this policy

If Receipt ever starts doing something this policy does not describe, we will update this page and note the date at the top. We will not quietly widen what the app does with your data.

Contact

Questions about this policy or about Receipt: Pyrean B.V., support@pyrean.com.