Receipts privacy policy

Last updated: October 5, 2026

In short

Your chat is read on your phone and your stats are calculated on your phone.

For AI insights, and only if you allow it, selected messages and stats from the chat are sent. Before sending, names are replaced with codes, and phone numbers, email addresses, links and IBANs are removed. The message content can still contain personal information.

Chat content is sent without being linked to your purchase identity and is not stored on our server. No provider uses it to train models.

What we read

The WhatsApp chat export you share with Receipts is read on your phone. All stats, such as message counts, reply times and top words, are calculated on your phone. The copy of the file that iOS hands to the app is deleted after it is read.

What leaves your phone

For the AI cards (flags, insights, key moments), the app asks for your explicit permission before the first send. If you don't allow it, nothing is sent and you keep using your stats; purchasing paid AI cards also doesn't start without permission.

When you allow it, we send: a sample of selected messages (sender code, time and text), the calculated stats, the app language and the relationship type you chose. Participant names become codes P1, P2…; other people named in messages become codes [K1], [K2]…. Phone numbers, email addresses, links and IBANs are removed. Only your phone knows who the codes stand for; when the AI answer arrives, names are put back on your phone.

This cleanup can't catch everything: messages can contain sensitive information such as health or beliefs, or details that identify a person. That is why we treat the content we send as personal data.

Sending happens in two separate requests: first your purchase is checked and a single-use ticket is issued (this request has no chat content), then the chat sample is sent with that ticket (this request has no purchase identity). So the request that carries your chat never contains your identity, and the content is never stored together with your identity.

Who receives it

Receipts server (Vercel, USA): checks the request and forwards it to the AI service; it doesn't store chat content.

Vercel AI Gateway (USA): routes the request to the AI provider; it doesn't store prompts or responses and doesn't train on them.

Anthropic (Claude, USA): generates the AI insights. Under its commercial terms it doesn't train models on the content; it may keep API data for up to 30 days.

Google (Gemini, backup only): used if Anthropic can't respond. It doesn't use the content to improve its products; it may keep logs for a limited time only to detect abuse.

On every request we technically require AI providers to have model training turned off.

RevenueCat (USA): checks your purchases using an identifier created by the app; we don't receive your name, email or payment details. Payments are processed by Apple.

Upstash (Redis database): stores analysis records and abuse limits.

What we store

Our server doesn't store chat content.

For each AI analysis we keep a record: your purchase identifier, the time, the purchase type and transaction number, the version and date of your permission, the app version and whether it succeeded. It contains no chat content, chat name or anything derived from the content. Its purpose is to prove permission and purchase and to prevent abuse. It is deleted automatically after 2 years.

If you bought a one-time unlock, we keep a content-free record with the transaction number and a request ID so the same purchase can't be used twice; it is deleted after 2 years or with your data request.

Your IP address is used briefly for a 60-second rate limit and isn't recorded; it may appear in our hosting provider's (Vercel) short-lived request logs.

On your phone: your receipts' stats and AI results. Until a receipt's AI part is printed, the coded sample prepared for it is also kept on your phone and deleted when the AI part is printed or you delete the receipt. On devices with Apple Intelligence, an unlocked receipt's chat is kept encrypted on your phone so you can ask questions about it; it isn't included in backups and can be deleted from the receipt. App data may be included in your device backups.

Notifications

When an AI part is ready, your phone shows a local notification. By default notifications arrive quietly in Notification Center; you can allow visible notifications if you want. Notifications are not sent from a server.

Managing your permission and rights

You can withdraw AI analysis permission anytime with Settings › AI insights. Withdrawing stops future sends; it doesn't undo sends that already happened.

To access, correct, delete, object or use your other rights, use Settings › Send a data request; your support ID is added to the email so we can find your records on the server. We reply within 30 days at the latest.

You can remove all data on your phone with Settings › Delete all receipts, or by deleting the app.

Children

Receipts is not directed to children under 13.

Regional supplements

Türkiye (KVKK): The Privacy Notice and the Consent Statement are on separate pages. You can use your rights under KVKK Article 11 and complain to the Personal Data Protection Board if your request is refused or unanswered.

Availability: Receipts is not offered in the European Union or the European Economic Area, the United Kingdom or Switzerland.

Brazil (LGPD): Our contact channel is the email below; you have the right to petition the ANPD.

USA: We don't sell your personal data or share it for advertising.

Other countries (including Korea and Japan): data is transferred to the recipients above in the USA when you request AI insights, for the purposes and periods stated.

Contact

Controller: Arda İpek, independent developer, Istanbul. Email: developer.ardaipek@gmail.com