Privacy Policy
HSA Receipts collects no data. There is no server to collect it with.
Last updated 26 August 2026
The short version. Everything you put into this app — receipts, photos, amounts, notes, your email address if you enter one — stays on your iPhone. None of it is sent to us, because there is nowhere to send it. We operate no server, no account system, and no analytics. We cannot see your data, and neither can anyone else unless you choose to share a file yourself.
What the app stores, and where
HSA Receipts keeps your records in a database inside the app's own private storage area on your iPhone. Receipt photographs are copied into that same private area — not into your camera roll. This storage is protected by iOS and is not readable by other apps.
The information the app holds is:
- The receipts you enter: date, provider, description, amount, category, notes, and any text you type or paste from the receipt
- Photographs of receipts you choose to add
- The date you opened your HSA, if you enter it
- Whether you have marked a receipt as reimbursed, and when
- An email address, only if you choose to save one for backups
- A numeric passcode, if you turn on the app lock — stored as a one-way hash in the iOS Keychain, never as the number itself
What we collect
Nothing. The app makes no network requests. It contains no analytics, no crash reporting, no advertising identifiers, no tracking pixels, and no third-party SDKs that transmit data. We do not know how many receipts you have, whether you opened the app today, or that you installed it at all.
The email address
If you save an email address in Settings, it is stored on your iPhone and used for one thing: to fill in the "To" field when you tap the button that emails a backup to yourself. The email is composed by Apple's Mail app and you press Send. We never receive that address and never receive that message. Leaving the field blank costs you nothing else in the app.
When data leaves your phone — only when you send it
The app can produce three files: a spreadsheet (CSV), a PDF reimbursement packet, and a full backup file. Each one is handed to the standard iOS share sheet, where you choose what happens to it — save it to iCloud Drive, Google Drive or Dropbox, email it, or send it to another app.
Once you send a file somewhere, that destination's own privacy policy governs it. We are not a party to that transfer and receive no copy of it.
Notifications
The backup reminder and the weekly fact are local notifications, scheduled by the app on your own device. They are not push notifications, no server sends them, and turning them on does not register your device with us or anyone else.
Deleting your data
Deleting the app from your iPhone deletes the database and every receipt photograph with it. There is nothing left behind on our side to delete, because nothing was ever there. Settings also contains an "erase everything" option if you want to clear the app without removing it.
Because there is no backup on our servers, deleting the app is permanent. Export a backup file first if you want to keep your records.
Children
HSA Receipts is a personal record-keeping tool for adults managing a Health Savings Account. It is not directed to children under 13, and we knowingly collect no information from anyone, of any age.
Changes to this policy
If a future version of the app ever collects anything, this page will say so plainly and in advance, and the App Store privacy label will change to match on the same day. As long as this page reads the way it reads today, the app collects nothing.
Contact
Questions about this policy: Brandon.Goldfine@gmail.com