Your chats stay yours.
Last updated 2 November 2026
The short version: your chats are stored only on your iPhone. When you ask Receipts to analyse a chat, and only after you agree on the "Before we read your chat" screen, the app sends the text of the messages, with the chat's names replaced by codes, to a third-party AI service run by OpenRouter, Inc. to label each message. Nothing is stored on our server, nothing is used to train AI, nothing is sold, and there are no ads or tracking.
Who we are
Receipts: Chat Analyzer ("Receipts") is made by Streamline Studios (Pty) Ltd, Cape Town, South Africa ("we", "us"). We are responsible for the personal information described here. Contact: support@pullreceipts.tech.
What we collect, how, and why
The chat you import (a WhatsApp export or a screen recording)
- How it is collected: you choose the file, or share it to Receipts.
- What it is used for: building your results.
- Where it goes: it stays on your iPhone. Screen recordings are read on the iPhone with Apple's Vision framework and never uploaded.
- Kept: until you delete the chat or the app.
Message text for AI analysis
The text of each message, a code for who sent it (P1, P2…), when it was sent, the kind of chat (for example a couple or a group) and which code is you.
- How it is collected: prepared on your iPhone from the chat, after you agree on the consent screen.
- What it is used for: only to label each message (for example warm, a question or an apology) so the app can build your results.
- Where it goes: our server passes it to OpenRouter, Inc. (United States), which provides the AI language model and may use the company hosting the model to process it.
- Kept: not stored by our server; not used to train AI.
Your results, profile name and photo
- How it is collected: created in the app.
- What it is used for: showing your results.
- Where it goes: stays on your iPhone, excluded from iCloud and device backups.
- Kept: until you delete them or the app.
Anonymous usage events
For example "a report was opened", "the upgrade screen was shown", "a purchase was completed", with a random install ID, the app version, and short labels such as the chat type and a size range.
- How it is collected: sent by the app while you use it.
- What it is used for: understanding how the app is used and improving it.
- Where it goes: our server (Cloudflare).
- Kept: up to 24 months.
A device check from Apple's App Attest
- How it is collected: created on your iPhone by Apple.
- What it is used for: making sure analysis requests come from the genuine app, to stop misuse.
- Where it goes: our server and Apple.
- Kept: not stored with any content.
Your IP address
- How it is collected: seen by our hosting provider when the app contacts our server.
- What it is used for: delivering the request and limiting abuse (rate limits).
- Where it goes: Cloudflare.
- Kept: not stored by us; short-lived in Cloudflare's systems.
Purchases
- How it is collected: handled by Apple.
- What it is used for: unlocking what you bought.
- Where it goes: Apple tells the app which purchases are active; we never see payment details.
- Kept: managed by Apple.
Before anything is sent: names are coded on your phone
Before message text leaves your iPhone, the app replaces the names of the people in the chat with codes like P1 and P2 and removes phone numbers, email addresses and links. Those names never leave your device. Coded text can still contain other names or details someone typed in a message (a friend's name or a street, for example), so only import chats you are comfortable having analysed this way.
Your permission, and how to withdraw it
The first time you start an analysis, the app shows a screen titled "Before we read your chat". It says what is sent, who it is sent to, what it is used for and what stays on your phone. Nothing is sent unless you tap Agree and analyse; if you tap Not now, nothing is sent. The app checks this permission before every request that sends message text, including reading the rest of a chat after a purchase. You can withdraw it at any time in Profile › Allow AI analysis; the app then sends no message text and asks again before the next analysis.
Who we share data with
We share data only with these service providers, and only for the purposes above:
- OpenRouter, Inc. (United States): provides the AI language model that analyses the coded message text, and may use the company hosting the model to process it on its behalf, under the same terms. It receives only the coded message text described above. Our OpenRouter account is set so that the text is not used for training.
- Cloudflare, Inc. (United States, global network): hosts our server, which passes analysis requests on without storing message content, and stores the anonymous usage events.
- Apple Inc.: App Store payments and App Attest.
Each of these providers processes the data only to provide its service to us, under a contract and privacy terms that protect it at least as well as this policy does: no sale, no advertising use, and no use of message content to train AI. We do not share data with anyone else, and we never sell or rent personal information.
What we don't do
- We don't store your chats or message content on our servers.
- We don't use your chats to train AI models.
- We don't show ads or use advertising or tracking SDKs, and we don't track you across other apps or websites.
- We don't contact anyone in your chats.
- This website (not the app) uses a lightweight analytics script from our marketing tool, Fastlane, to count visits.
International transfers
Our providers may process data outside South Africa, including in the United States, with safeguards that give it the same level of protection as this policy.
Your choices and rights
Your chats and results stay on your device, so you control them directly: delete a chat in the app, use Profile › Delete all my chats, or delete the app. You can switch off AI analysis in Profile › Allow AI analysis. Depending on where you live (including South Africa's POPIA and the EU/UK GDPR), you may have the right to access, correct or delete personal information, to object to processing, and to complain to a regulator; in South Africa that is the Information Regulator (inforegulator.org.za). For anything else, email support@pullreceipts.tech.
Children
Receipts isn't intended for children under 13, and we don't knowingly collect information from them.
Changes
If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app.
Contact
Streamline Studios (Pty) Ltd, Cape Town, South Africa · support@pullreceipts.tech