Short version

TillShot does not require an account, does not connect to banks, and does not include analytics, advertising, or crash-reporting SDKs. Receipt images and details are stored locally on your iPhone unless you choose to export, back up, share, or send information to support.

Information stored on your device

TillShot stores receipt data locally so the app can work without an account or app backend. This may include:

  • Receipt images, thumbnails, OCR text, and reviewed field evidence.
  • Merchant, date, total, currency, tax, payment method, category, folder, notes, and review status.
  • Local folders, categories, preferences, recognition quota state, and purchase entitlement state.
  • Local exports and backup files you choose to create.

You control these records from the app. Deleting the app removes the app's local container from the device according to iOS behavior.

Recognition and model downloads

On-device recognition is optional and requires a user-initiated download of about 363 MB. The downloaded files are machine-learning model weights and data files, not executable code. TillShot verifies their size and SHA-256 hash before using them.

Model files download from static hosts listed in the app's bundled manifest, currently including Hugging Face and the TillShot model mirror at models.tillshot.com. Those hosts may receive standard network information such as IP address, request time, and user-agent through normal web server operation. TillShot does not upload receipt images or receipt details to those model hosts.

Network activity

TillShot's planned network activity is limited to:

  • User-initiated recognition package downloads.
  • StoreKit purchase, restore, and subscription management flows handled by Apple.
  • Links you choose to open, such as this website, support, privacy, terms, or third-party notices.
  • Email you choose to send to support.

TillShot does not operate an app backend for receipt content.

Purchases

TillShot uses Apple's StoreKit for purchases. Apple processes payment information. TillShot receives purchase and entitlement status needed to unlock Pro features, but not your full payment card details.

Apple's privacy policy and App Store terms apply to Apple purchase flows.

Exports, backups, and sharing

Exports and backups are created locally. When you use the iOS Share Sheet, choose a file provider, send an email, or move a backup elsewhere, that destination is controlled by you and may have its own privacy practices.

Encrypted backups protect the backup payload with a password you choose. TillShot cannot recover a forgotten backup password.

Support email

If you contact support, we receive the email address and any information you include. Please do not send sensitive receipt images unless they are necessary for the issue and you are comfortable sharing them.

We use support messages to respond to you, investigate issues, and improve documentation or product behavior.

Children

TillShot is not directed to children under 13. If you believe a child has contacted us with personal information, email [email protected].

Your choices

  • Create, edit, export, back up, restore, soft-delete, restore, or permanently delete receipts in the app.
  • Remove downloaded recognition files without deleting receipts.
  • Use manual receipt entry instead of recognition.
  • Manage purchases and subscriptions through Apple.
  • Contact support to ask about support-email data.

Changes and contact

We may update this policy as TillShot changes. The "Last updated" date will change when the policy changes.

Questions: [email protected]