Shoebox Privacy Policy

Last updated: 3 August 2026

Shoebox is a private receipt-keeping app. You photograph paper receipts and the app stores them, along with the details you record, so you can find them later for bookkeeping, tax, or audit purposes. This policy explains exactly what is stored and what is not.

What we collect

• Account information — the username you choose and a cryptographically hashed version of your password. We never store your password in readable form.
• Receipt images — the photos you choose to capture or import.
• Receipt details — merchant, date, subtotal, tax, total, currency, category, and any notes you enter. These are pre-filled by automatic text recognition and then confirmed or corrected by you.
• Email address (optional) — only if you choose to switch on the monthly archive. It is used for that one email and nothing else: no newsletters, no marketing, and it is never shared. Remove it in the app at any time and the monthly email stops.
• Basic technical data — your IP address is recorded temporarily for sign-in attempts, solely to rate-limit abuse. It is not linked to your receipts.

What we do not collect

• No location data.
• No contacts, photos other than the receipts you explicitly choose, or device identifiers.
• No advertising or tracking identifiers. Shoebox contains no analytics or ad SDKs.
• No phone number, ever. An email address is optional and only used for the monthly archive.

How your data is used

Your data is used only to provide the app: to show you your receipts, search and total them, and export them at your request. We do not sell, rent, or share your data with anyone, and we do not use it for advertising or profiling.

The monthly archive

If you switch it on, once a month we email you an archive of the previous month's receipts — the images plus an index file. Large archives are sent as a download link that expires after 14 days rather than as an attachment. This is the only email Shoebox ever sends you, it goes only to the address on your own account, and switching it off or clearing your email address stops it immediately.

Text recognition

Receipt text is recognised on your device using Apple's built-in Vision framework. Your receipt images are not sent to any third-party text-recognition service.

Where your data is stored

Receipts and account records are stored on a private server operated by the developer at shoeboxreceipts.com. All traffic uses HTTPS. Receipt images are stored outside the public web directory and can only be retrieved with your authenticated session — they are never publicly accessible by URL. Each account's data is isolated; no user can access another user's receipts.

Retention and deletion

Your receipts are kept until you delete them, because receipts are often needed for several years for tax purposes. You may:

• Delete any individual receipt in the app, which also deletes its image.
• Delete your entire account from within the app (Account → Delete Account). This permanently erases your receipts, your stored images, your sessions, and your account record. This cannot be undone.
• Export a complete copy of your data at any time (CSV, PDF, or a full archive containing every image plus an index).

Encrypted server backups may retain deleted content for a short period before being rotated out, and are used only for disaster recovery.

Children

Shoebox is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, the updated date above will change and the new policy will be posted here.

Contact

Questions or requests about your data: support@shoeboxreceipts.com