Privacy Policy
Receipt Rabbit
Last updated: June 2026
Overview
Receipt Rabbit is a receipt scanning app for iOS. We built it with privacy as a default: no account creation, no personal data tied to you as an individual. No email address is ever required — the email forwarding feature is strictly opt-in.
What Data We Collect
Receipt Images
Receipt images are captured by your camera and stored only on your device. They are never uploaded to any server. If you delete a receipt in the app, the image is permanently deleted from your device.
Receipt Text (OCR)
When you scan a receipt, the app extracts text from the image using on-device OCR. That text is sent to our Cloudflare Worker proxy and forwarded to Anthropic's Claude API for categorization. The text is used only to produce the categorization response and is not stored by us or by Anthropic after processing.
Anonymous Device Identifier
The app generates a random identifier (UUID) at first launch and stores it in your device's Keychain. This identifier:
- Is not tied to your name, email, or any personal information
- Is used solely for rate limiting (free tier: 20 categorizations/month) and, if necessary, blocking abusive usage
- Persists across app reinstalls so your subscription state and usage count are preserved
Subscription Data
If you purchase a paid subscription, the transaction is handled by Apple's App Store and RevenueCat. We receive only an anonymous subscription status (active/inactive) tied to your anonymous device identifier. We never receive your name, Apple ID, or payment information.
Forwarding Email Address (Optional)
If you enable the email forwarding feature, you provide an email address so that receipts forwarded to a unique address can be associated with your account. This address is stored in Cloudflare KV storage, tied to your anonymous device identifier. It is used solely to receive and process forwarded receipt emails. You can remove it at any time from Settings → Email Forwarding, which permanently deletes it from our servers.
Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare | API proxy and rate limiting | cloudflare.com/privacypolicy |
| Anthropic (Claude) | Receipt text categorization | anthropic.com/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Apple App Store | Payment processing | apple.com/legal/privacy |
| YNAB | Transaction sync (if connected) | youneedabudget.com/privacy-policy |
| Intuit (QuickBooks) | Transaction sync (if connected) | intuit.com/privacy |
| Lunch Money | Transaction sync (if connected) | lunchmoney.app/privacy |
Data We Do Not Collect
- Name or any account credentials (no login is ever required)
- Email address — unless you opt in to email forwarding (see above)
- Location data
- Contact list or any other device data
- Advertising identifiers (IDFA)
- Analytics or usage telemetry
GDPR / CCPA
The anonymous device identifier is a pseudonymous technical identifier, not personal data under GDPR Article 4 (it cannot on its own identify a natural person). If you provide a forwarding email address, that constitutes personal data under GDPR — you may request deletion at any time by removing it in Settings → Email Forwarding. We do not sell personal data. We do not engage in targeted advertising.
Data Retention
- Receipt images and line items: Stored on your device until you delete them in the app.
- OCR text sent for categorization: Not retained after processing.
- Anonymous identifier and usage count: Retained in Cloudflare KV for rate limiting; reset monthly.
- Forwarding email address (if provided): Retained in Cloudflare KV until you remove it in Settings.
Children
The app is not directed at children under 13 and does not knowingly collect any information from children.
Data Deletion
- Receipt images and line items: Delete them in-app at any time.
- Forwarding email address: Remove it in Settings → Email Forwarding. This permanently deletes it from our servers.
- Anonymous device identifier: Stored in your iOS Keychain and persists across app reinstalls (by design, to preserve your subscription state). To request removal from our servers, contact us. Note: this will reset your usage count and may affect subscription recognition.
Changes to This Policy
We may update this policy as the app evolves. Significant changes will be noted in the App Store release notes. The "Last updated" date above always reflects the current version.
Contact
Questions about this policy: contact us.