What stays on your iPhone
Scanning happens on your device. When you take a photo of a receipt, record a video of a long one or pick one from Photos, iOS recognizes its text on your iPhone. Videos are recorded without sound.
Your receipts are kept in the app, on your iPhone: their pictures, the recognized and tidied text, the original text, the title, the date, the total and the spending categories. Your statistics are calculated on your iPhone from them.
Your conversation with the assistant is held only in the app’s memory. It is cleared when you start a new chat or the app is closed, and it is never saved.
There is no account and no syncing between devices. Like other app data, your receipts are included in your iPhone’s backups if you make them. Deleting a receipt deletes its pictures; deleting the app deletes all of them.
What leaves it, and why
Tidying up a receipt
After a scan, and when you ask the app to improve a receipt’s text, the app sends the recognized text — never the picture — to our server. The server passes it to an AI model from OpenAI, which corrects recognition errors, finds the total printed on the receipt and splits the purchases into spending categories. The result comes back to your iPhone. If this fails, the receipt is kept with its original text.
Asking about your receipts
When you send a question to the assistant, the app sends your question and the conversation so far, together with your saved receipts: their titles, text, the dates they were added and their totals. They go through our server to OpenAI, whose model writes the answer.
Receipts can include details such as a shop’s address, the last digits of a payment card or a loyalty number. Whatever is printed on a receipt is part of its text.
Our server does not store receipt text, your questions or the answers. OpenAI processes them only to respond, does not use them to train its models, and may keep them for up to 30 days to detect abuse, unless the law requires it to keep them longer.
Nothing is sent while you browse your receipts or your statistics. Connections between the app and our server are encrypted, and the key to OpenAI stays on our server: the app holds none.
Records on our server
For each request, our server writes down a random request number, the date, the AI model used, the length of the text in characters and whether the request completed. Nothing that identifies you or your device, and never the content.
We use these records to keep total use within daily limits and to keep the cost of the service in check. They are deleted after 90 days.
Server logs
The web server in front of our service logs each request from the app: the IP address, the time, the address requested, the response status, and the identifier iOS sends with each request (the app’s name and build, and the iOS version). We use these logs to keep the service running and to investigate abuse. They are deleted after 90 days.
Analytics
We use Firebase Analytics, a service from Google, to understand how the app is used and to find problems. It receives events such as a receipt being scanned, imported or exported, and information it collects automatically: an identifier for this installation of the app, your device model, the iOS and app versions, your language, an approximate location (country or region) derived from the IP address, and when you use the app.
It never receives the pictures, text, titles or amounts of your receipts, or your questions to the assistant. The app does not ask to track you and does not use the advertising identifier, and analytics data is not used for advertising. Google keeps event data for up to 14 months.
Subscriptions
Purchases are handled entirely by Apple; we never see your payment details. The app checks your subscription on your iPhone with Apple’s StoreKit, and our server is not involved.
The number of free assistant replies you have used this week is kept on your iPhone, including in its keychain, so that reinstalling the app does not reset it. It is never sent to us.
Camera and Photos
The app asks for the camera the first time you scan, to take photos and record videos of receipts. When you import a receipt, you choose it in the system’s photo picker, and the app receives only what you choose; it has no access to the rest of your library. The app does not use the microphone, your location or your contacts.
You can change the camera permission at any time in the Settings app, under Apps.
Writing to us
If you email us, we receive your email address and what you write, and use them only to reply. Messages are kept in our mailbox, provided by Google, for as long as we need them to help you.
This website
sumsnap.app sets no cookies, runs no analytics and keeps no log of visits. The pages the app opens are these same pages.
Who handles your data
| Who | Why | What |
|---|---|---|
| OpenAI | Tidies receipt text and writes the assistant’s answers | Receipt text, your questions and the conversation |
| Google (Firebase) | App analytics | Usage events and device information, as in section 5 |
| Our hosting provider | Runs our server | What our server receives |
| Apple | The App Store, purchases and iOS itself | As Apple’s privacy policy describes |
| Google (Gmail) | Our support mailbox | Emails you send us |
They process data only to provide their service to us, under terms that protect it. Some of them process data in other countries, including the United States.
How long it is kept
| Data | Where | How long |
|---|---|---|
| Receipt pictures, text, totals and categories | Your iPhone | Until you delete them |
| Your conversation with the assistant | Your iPhone, in memory | Until a new chat, or the app closes |
| Receipt text, questions and answers | Our server | Not stored |
| Receipt text, questions and answers | OpenAI | Up to 30 days |
| Request records, with nothing about you | Our server | 90 days |
| Server logs, with IP addresses | Our server | 90 days |
| Analytics events | Google Firebase | Up to 14 months |
| Free replies used this week | Your iPhone’s keychain | Until the device is erased |
| Emails to support | Our mailbox | As long as needed to help you |
Your choices and rights
You can edit or delete any receipt at any time, and deleting the app deletes them all. Once you stop using the app, nothing more is sent.
Depending on where you live, you may have the right to access, correct or delete personal data about you, to object to how it is used, or to complain to a data protection authority. Write to us to exercise any of them. Our server’s records hold no name, email or device identifier, so they cannot be linked to you; they are deleted after 90 days in any case.
Children
SumSnap is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has used it, contact us.
Changes
When this policy changes, the new version is published here with a new date. Significant changes will also be announced in the app.