Privacy Policy

Receipts to Email

Last updated: August 6, 2026

This Privacy Policy explains how Lion, LLC ("Lion," "we," "us," or "our") handles information in connection with the Receipts to Email mobile application (the "App").

1. The Short Version

You photograph a receipt, optionally say a sentence about why it mattered, and the App emails the result to addresses you have confirmed. We do not keep your receipts. There is no receipts database on our servers: the App's backend accepts your receipt, sends the email, and discards it. Your inbox is the archive.

There is no artificial intelligence in this App and no AI provider involved. Reading the text on your receipt, pulling out the merchant, amount, and date, and transcribing your spoken note all happen on your phone. Nothing is sent anywhere to be interpreted. (Until August 6, 2026 some of that text was sent to Anthropic for processing. That is finished: the integration was removed and no data goes there any more.)

That statement is about us. It would be misleading to leave it there, so read Section 5: the service that actually delivers the email keeps a complete copy of each message, including the receipt image, for 45 days before deleting it. We would rather you learn that here than discover it later.

2. Your Account

The App signs you in anonymously. There is no username, no password, and no email address collected at signup. Your device is issued a random identifier, and that identifier is what associates your confirmed recipient addresses, your delivery history, and your subscription status with your device. We do not know your name, and we do not ask for it.

3. What Happens to a Receipt

When you send a receipt, the following happens in this order:

The photo is taken and processed on your device. Text is read from the image using your device's own text recognition. The image itself is resized and compressed locally.
Your spoken note is transcribed on your device. Speech recognition runs on-device. The audio recording never leaves your phone and is never sent to us or to anyone else. The transcribed text leaves the phone only as part of the email itself, which is the whole point of the App.
The merchant, amount, and date are worked out on your phone, from the text your device recognized. That text is never sent anywhere to be interpreted.
The email is assembled and sent through our delivery provider to the addresses you have confirmed, with the receipt image attached. See Section 5.
Our server discards the receipt. The image, the extracted fields, and the transcript are not written to any database of ours.

4. No Artificial Intelligence, and No AI Provider

The App does not use artificial intelligence and does not send your receipts, your receipt text, or your spoken notes to any AI service.

Text recognition on the receipt image, extraction of the merchant, amount, and date, and transcription of your voice all run on your device. Your spoken note is emailed to you exactly as you said it; nothing rewrites or summarizes it.

Earlier versions of the App sent recognized receipt text and note transcripts to Anthropic for processing. That integration was removed on August 6, 2026. No data is sent there now, and our credentials for that service have been destroyed.

5. Email Delivery, and the 45 Days

We send email through Postmark, a transactional email provider.

Postmark keeps a complete copy of every message it sends for you, including the receipt image attached to it, for 45 days, and then deletes it. During those 45 days the message and its attachment can be retrieved from Postmark using our account credentials. This is not something we can switch off; retaining sent messages for a period is part of how the provider detects abuse of its network.

We verified this ourselves rather than relying on documentation, and we are stating the real number rather than a vague one. If you are deciding whether to trust this App with financial documents, that is the fact you need.

We do not enable open tracking or click tracking. There are no tracking pixels in your receipt emails.

Once the email arrives, the receipt lives in your email account and in the account of anyone you chose to copy, under those providers' own policies and retention periods. That is outside our control, and it is the point: the archive is yours.

6. Confirming Recipients

Every destination address must be confirmed by clicking a link sent to it before the App will deliver anything there. This exists to protect you: a mistyped address would otherwise send your financial documents to a stranger indefinitely. We store the addresses you add and whether each has been confirmed.

An address you have confirmed keeps receiving your receipts until you remove it. If you add your accountant and later change accountants, remove the old address.

7. What We Store, and What It Does Not Contain

We keep a small amount of operational data, none of which contains the contents of a receipt:

Confirmed recipients. The email addresses you have added and their confirmation status.
Delivery records. Whether a send succeeded or failed, how many recipients it went to, the provider's message identifier, and the time. No image, no merchant, no amount, no transcript.
Subscription status. Whether your subscription or trial is active, and its renewal state.

It is a standing rule of this App that receipt details never appear in server logs, analytics, crash reports, or notifications. Merchant names, amounts, and transcripts are not written to any surface that we or a vendor can browse.

8. On Your Device

The receipt list inside the App, including the images and your notes, is stored only on your phone. It does not sync to us or anywhere else. Deleting the App deletes it. If you lose the phone, that local list is gone, and the emails in your inbox are what remain. That is a deliberate consequence of not keeping a copy.

9. Subscriptions and Payment

Subscriptions are sold through Apple and managed with RevenueCat. We never see your card details. Apple handles the transaction; RevenueCat tells our servers whether your subscription is active so the App can unlock. Apple's and RevenueCat's own privacy policies govern their handling of that data.

10. What We Do Not Do

We do not sell your data, and we never will.
We do not serve advertising, and there are no advertising identifiers in the App.
We do not read, analyze, categorize, or profile your spending. Nothing in this App looks at what you buy in order to build a picture of you.
We do not share your information with anyone except the providers named in this policy, and where required by law.

11. Data Retention

Receipt content on our servers: not retained.
Sent messages at our delivery provider: 45 days, then deleted.
Confirmed recipients, delivery records, subscription status: kept while your account is active.
Your local receipt list: on your device, until you delete it or the App.

12. Your Choices and Rights

You can remove any confirmed recipient at any time in Settings. You can delete the App, which removes everything stored on the device.

Settings also contains "Delete my data," which erases everything described in Section 7 except your subscription status, plus every receipt stored on your phone. Specifically it deletes your confirmed recipient addresses and your delivery records, and it wipes the local receipt list and its images.

It leaves your subscription records in place, on purpose. Those are the record of a purchase you made through Apple, and deleting them would revoke access you have paid for while Apple and RevenueCat still consider you subscribed. If you want your subscription cancelled, do that in your Apple account settings; if you want those records removed after it ends, write to us.

There are two honest limits on deletion. We cannot recall an email that has already been delivered to an inbox, and we cannot reach inside our delivery provider's 45-day copy. Deletion applies to what we hold.

You can also write to us at [email protected] with any request about your data.

13. Children

The App is a tool for adults managing business and personal expenses. It is not directed to children under 13, and we do not knowingly collect information from them.

14. Security

Traffic between the App and our servers is encrypted in transit. Our backend validates that every request comes from your own signed-in session, so a request can only ever send to your confirmed recipients. Because we do not keep a database of receipts, there is no store of receipt images or amounts on our side to be exposed.

15. International Users

The App is operated from the United States, and the providers described here process data in the United States. If you use the App from elsewhere, you are sending your information to the United States.

16. Changes to This Policy

We may update this Policy. Material changes will be posted on this page with a new "Last updated" date. If the 45-day figure in Section 5 ever changes, this page is where it will be corrected.

17. Contact

Lion, LLC
Email: [email protected]