Privacy Policy

Receipts OnHand is local-first. Your receipts and expense records are stored in a folder you choose, on your own device or in your own cloud storage, not on our servers. We do not have an account system, we do not collect analytics, and we never receive your expense data. All receipt parsing happens on your device.

What data the app handles, and where it lives

• Your expense records and receipt images are written as Markdown, YAML, and WebP files into the storage folder you select (“bring your own storage”). That folder is under your control and we have no access to it.
• You choose where that folder lives. It can be local to the device, in iCloud Drive, or in another provider you already use such as Dropbox, Google Drive, OneDrive, Box or Nextcloud. If you put it in a third-party service, your copy is subject to that service’s terms and privacy policy as well as this one. We are not a party to that arrangement and still receive nothing.
• There is no account. You do not create a login, and you do not give us your name, email, or any identifier to use the app.
• The app stores some settings locally on the device: your chosen folder, your data sets, display preferences, and whether the app is unlocked. These live in the app’s own storage, not in your receipts folder and not with us.
• Some lists never leave memory. The import-problems list and the record of receipts waiting to be read exist only while the app is running. They are not written to your folder, not written to disk, and not sent anywhere. Quitting the app clears them.
• Receipts shared into the app from the share sheet or Finder are staged briefly in a private App Group container on your own device (group.com.interactivesound.receiptsonhand) so the main app can pick them up. That container is local, and the files move into your folder as soon as the app reads them.

What we collect

Nothing. We do not operate a server that receives your data, we do not embed analytics or advertising SDKs, and we do not track your usage. Because the app has no backend and no account, we have no database of users or expenses. The paid unlock did not change this: the purchase is processed by Apple, no SDK was added, and no user data reaches us. We do not know who bought the app, who is on a trial, or how many receipts anyone has. In App Store Connect the app is declared Data Not Collected.

When the app uses the network

Twice, and neither one carries your receipts. Nothing we build receives your data. We run no server that receives your receipts, your expense data, or anything you type into the app.

1. The AI model download. To read receipts on-device, the app downloads an open-source AI model one time during setup (approximately 1.5 GB). It has a short list of places to fetch it from and tries the next one if a host is unreachable:

• Hugging Face (huggingface.co), a third party, is tried first and is where the file normally comes from.
• models.apps-onhand.com is a mirror we operate, reached only if Hugging Face is unavailable. We host it so that a first launch still works when someone else’s service is down.

This is an ordinary, anonymous file download:

• We do not send any of your personal information, receipts, or expense data in this request. It asks for a fixed filename and nothing else. There is no account, so there is nothing for the request to be attached to.
• As with any web request, whichever host answers can see standard technical information such as your IP address, the time, and which file was asked for. When that host is Hugging Face, their privacy policy governs it, not ours.
• When it is our mirror, this policy governs it, and our answer is that we keep none of it. The mirror is a plain file store sitting behind Cloudflare, our infrastructure provider. We have not turned on request logging for it, so no record of who downloaded the model is collected, retained, or analysed by us. What reaches us is a count of how many times the file was fetched, and nothing that could be traced to a person. If you asked us whether you had downloaded the model, we would have no way to find out.
• After the download, no receipt data ever leaves your device. Parsing runs entirely on-device using the downloaded model. Your receipt images and extracted data are not transmitted to us or to any third party.

2. The App Store, if you buy the app or restore a purchase. This is Apple’s own StoreKit framework talking to Apple, and it is covered in the next section.

If your receipts folder is in a cloud service, that provider’s app syncs it on its own schedule. That is your arrangement with them, not a connection Receipts OnHand makes.

Buying the app

The unlock is a one-time in-app purchase. Apple takes the payment. The purchase is handled entirely by Apple’s StoreKit, the same as any other App Store purchase.

• We never see your payment details. No card number, no billing address, no Apple Account identity reaches us. There is no payment form in the app and no payment processor of ours behind it.
• We keep no record of who bought what. There is no purchase database on our side, which is also why Restore Purchases works from your Apple Account rather than from anything we store.
• The unlock is stored on your device. Whether the app is unlocked, which version that unlock is for, and how much of the fourteen-day trial is left are kept in the app’s local settings. None of it is written into your receipts folder, so buying, not buying, or letting the trial lapse changes nothing about your files.
• No purchase analytics. We do not measure who opened the paywall, who bought, or when. There is no SDK in the app that could.
• Apple’s own handling of the transaction is governed by Apple’s privacy policy, not ours.

Camera and photos

If you grant permission, the app uses your camera or photo library only to capture the receipts you choose to add. Those images are saved into your storage folder and are processed on-device. They are not uploaded to us.

Sharing and selling

We do not sell, rent, or share your data, because we do not collect or receive it.

Your control over your data, and your responsibility for it

Your data lives in your storage folder. You can view, move, edit, or delete it at any time using Finder, the Files app, Obsidian, or any tool you like. CSV export keeps working whether you buy the app or not. Deleting the app and/or that folder removes the data; we have nothing to delete on our end. Deleting the app also deletes its local settings, including the record that it was unlocked, which is what Restore Purchases is for.

The other side of that is worth stating plainly: because we never receive your data, we cannot recover it. We hold no copy, no backup and no history of your receipts, so we cannot restore a folder you deleted, retrieve a file a sync service lost, or tell you what a record used to say. Keeping backups of your folder is yours to arrange, and the Terms of Use say the same thing in section 4.

This website

The Receipts OnHand pages on apps-onhand.com carry no analytics, no advertising pixels, no third-party fonts or scripts, and no cookie banner, because there are no cookies to consent to. Our host keeps ordinary server logs, which record requests rather than people, and we do not build profiles from them. If you send us a message through the support form or join the launch-news list, we use that address only to reply or to send you the news you asked for; the list is not shared or sold, and one click removes you.

Children

Receipts OnHand is a general-audience productivity app and is not directed to children under 13. We do not knowingly collect information from children (and, as above, we do not collect personal information from anyone).

Changes to this policy

If we change this policy, we will post the updated version at this URL with a new effective date.

Contact

Questions about privacy: support@apps-onhand.com, Interactive Sound LLC.