Privacy Policy

Where your data lives

Your records, photos, and scanned documents are stored on your device and synced through your own private iCloud account (Apple CloudKit), using Apple's standard end-to-end iCloud protections. PaperTrail has no servers of its own that store your records or images — the developer cannot see, access, or recover your data. If you use Family Sharing inside the app, records are shared only with the household members you explicitly invite, through Apple's iCloud sharing.

On-device scanning & extraction

Document scanning (VisionKit) and text extraction (Apple Vision, and on supported devices Apple's on-device FoundationModels language model) all run locally on your device. No receipt image or extracted text is sent anywhere as part of normal scanning and saving.

Optional: crash & error reporting

PaperTrail can send crash reports and error diagnostics to Sentry, a crash-reporting service, to help fix bugs. This is controllable in Settings and defaults on, since it's what keeps the app reliable. What's sent:

• Stack traces from crashes and handled errors
• Device model and OS version
• App version and build number

Crash reports do not include your receipts, records, photos, or any purchase data.

Optional: community learning

When you correct a field PaperTrail extracted (e.g. fixing a merchant name), the app can share that correction to help improve extraction for everyone. This is off by default — a one-time prompt on first launch asks for explicit consent, and it can be turned on or off anytime in Settings ("Share anonymous learning data"). When enabled:

• Contributions are keyed by a random install ID generated on your device — never your Apple ID, iCloud identity, or device identifier.
• Only the corrected field (merchant name, category, etc.) is sent — never a full receipt, image, or transcript.
• Values are automatically scrubbed of email- and phone-number-shaped text and length-capped before upload, so personal information typed into a field doesn't leave the device even by accident.

What PaperTrail doesn't do

• No advertising, and no ad networks or ad SDKs.
• No tracking across apps or websites, and no data broker relationships.
• No sale or rental of your data, ever.
• No account or sign-in required to use the app.

Notifications

Warranty and return-window reminders use local, on-device notifications scheduled by iOS — nothing is sent to a server to generate a reminder.