ReceGuardPrivacy Policy
ReceGuard · Last updated 20 October 2026
Who we are
ReceGuard ("the app") is developed and operated by DigitalBox ("we", "us"). This policy explains what happens to information when you use the app. If you have questions, contact us at support@receguard.com.
What stays on your device
Everything you create in the app is stored locally on your device:
- Scanned receipt images and page scans
- Text recognized from receipts, and the merchant, date, amount, currency, and tax values parsed from it
- Categories, folders, tags, notes, business purpose, and tax classifications you enter
- Tracked purchases, warranty and return dates, serial numbers, and inventory details
- Mileage trips: date, distance, odometer readings, route description, and business purpose
- App settings and preferences
Text recognition (OCR) runs on-device using Apple's Vision framework. No receipt image or receipt text is transmitted to us or to any third-party service for processing.
iCloud sync
If you enable sync, your receipt data is synchronized through your own Apple iCloud account using Apple's CloudKit private database. This data lives in your personal iCloud storage. We have no access to it and cannot retrieve, read, or restore it. Apple's handling of that data is governed by the Apple Privacy Policy. You can disable sync at any time in the app's settings, or in iOS Settings under your Apple Account.
Sign in with Apple
If you choose to sign in with Apple, we store the anonymous user identifier Apple provides, and a display name if you choose to share one, in your device's local storage. Apple's Hide My Email option is fully supported. We do not build a profile from this and it is not transmitted to any server we control.
Subscriptions and purchases
Optional Pro subscriptions are sold through Apple's In-App Purchase system. Apple processes all payments - we never see or receive your payment card, billing address, or Apple Account credentials.
Apple processes subscription payments. RevenueCat manages subscription access using a randomly generated, pseudonymous app user ID and Apple transaction data, including product, purchase and expiration dates, and subscription status. It does not receive the contents of your scanned receipts or expense records. With your tracking permission, matching identifiers and subscription events are also used for Meta advertising measurement as described below.
Apple Search Ads attribution
If you install ReceGuard after tapping an Apple Search Ads ad, the app may send Apple's privacy-preserving AdServices attribution token to RevenueCat. RevenueCat uses it to obtain campaign-level attribution data from Apple and report which Apple Search Ads campaigns lead to installs, trials, or subscriptions. This does not use your IDFA, does not request App Tracking Transparency permission, and does not include receipt images, receipt contents, expense data, contact information, or a browsing profile.
What we collect
| Data | Collected? | Purpose |
|---|---|---|
| Receipt images and content | No | Stays on device / your iCloud only |
| Name, email, phone | No | - |
| Location | No | Used on-device for GPS mileage only, if you turn it on; never transmitted or stored |
| Contacts, photos library metadata | No | - |
| Analytics or usage tracking (PostHog) | Only if you opt in | Anonymous feature-use events only; never receipt contents, search terms, account data, or advertising IDs |
| Advertising identifiers and Meta measurement | Only with tracking permission, in versions with this feature | Match app activation and subscription events to advertising; no receipt or expense contents |
| Apple Search Ads campaign attribution | Only for eligible Apple Search Ads installs, via RevenueCat | Measure the campaign, ad group, or keyword that led to an install or subscription; no receipt or expense data |
| Pseudonymous subscription data | Yes, via RevenueCat; Meta forwarding only with tracking permission | Manage subscriptions and, with permission, measure advertising |
| Crash diagnostics | Only if you opt in with Apple | Delivered by Apple, aggregated |
Optional Meta advertising measurement
Versions with Meta advertising measurement request Apple's App Tracking Transparency permission on the paywall. This choice is separate from usage analytics and is not required to use the app or subscribe. If you allow tracking, Meta receives app activation signals, device identifiers (including IDFA and a Meta anonymous ID), IP address and app/device metadata. RevenueCat forwards confirmed trial starts, subscription purchases, conversions and renewals, with pseudonymous customer/transaction identifiers, subscription product, revenue and currency. Meta uses these signals to match events to accounts, measure advertising and improve campaign delivery.
If permission has not been granted, this integration does not initialize the Meta SDK or forward subscription events to Meta. You can withdraw permission in iOS Settings; the app rechecks it on foreground and before purchase. Withdrawal does not erase previously delivered events. Receipt images, recognized receipt text, merchants, expense amounts, notes and searches are not included. We do not explicitly provide your name, email address or phone number to Meta.
Mileage tracking and location
ReceGuard can measure the distance of a drive using GPS so you can claim a mileage deduction. This is entirely optional, and the way it works matters:
- Location access is requested only at the moment you start a recording - never at launch, and never if you log your trips manually.
- We ask only for "while using the app" access. The app does not track you in the background and does not detect drives automatically.
- Location samples are used to add up a distance and are then discarded. No coordinates, routes, addresses, or map data are saved to your device or transmitted anywhere.
- What gets saved is what you would write in a paper logbook: the date, the mileage total, and whatever route description and business purpose you type in.
You can revoke location access at any time in iOS Settings, and every mileage feature except the GPS recorder keeps working - trips can always be entered by hand or from odometer readings.
Device permissions
- Camera - required to scan receipts. Images captured are saved only to the app's local storage.
- Photo library - only if you choose to import an existing image. We access only what you pick.
- Location - optional, and requested only when you start recording a drive. See the section above.
- Notifications - optional, used to remind you about return windows and warranty expirations. All notifications are scheduled locally on your device; there is no push server.
- Face ID / Touch ID - optional app lock. Biometric matching is performed by iOS; the app only receives a success or failure result and never sees your biometric data.
Sharing and exports
When you export a report, a CSV, a tax package, or email a receipt, the file is created on your device and handed to the iOS share sheet. You choose the destination. We are not a party to that transfer and receive no copy. Once you send a file to another app, service, or person, this policy no longer governs it.
Children
ReceGuard is not directed at children under 13, and we do not knowingly collect personal information from children.
Your rights
You control the receipt records on your device and in your own iCloud account and can delete them there. Subscription records and, if you consent, advertising measurement data are also processed by RevenueCat and Meta as described above; deleting the app does not automatically delete those providers' records. For privacy requests, contact support@receguard.com. You can withdraw tracking permission in iOS Settings and use the privacy controls provided by Meta and RevenueCat.
Security
Receipt data on your device is protected by iOS file protection and your device passcode. Optional Face ID or Touch ID locking adds a further barrier. iCloud sync is encrypted in transit and at rest by Apple.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for material changes we will note the change in the app's release notes.
Contact
Questions, requests, or concerns: support@receguard.com
Website measurement
This website counts App Store link clicks and QR-code visits as daily totals by page, language and placement. The counter uses no cookies or visitor identifiers and stores no IP addresses, receipt data or browsing histories. These totals measure visits and clicks, not app installs.