Privacy policy

Records and evidence

The app stores item details, dates, notes, optional amounts and links, receipts, return proof and refund information you choose to enter or import on your device. Text extraction uses Apple's Vision and PDFKit locally. The app does not upload your receipts to developer-operated servers. It has no account, inbox connection, third-party analytics SDK, ad SDK or automatic cross-device sync.

Original supported images and PDFs are retained separately from previews. Device backups and anything you choose to export may create copies elsewhere. Local storage does not mean copies can never leave your phone, and is not a claim of custom end-to-end encryption.

Permissions and reminders

The app requests notification permission when you choose to track a return. Reminders use dates you confirm. Device settings, Focus and notification summaries may affect when you notice them. Camera access is requested only when you select the camera. Photos are selected through the system picker without broad library access. The app does not request contacts, location, tracking, microphone, email or banking access.

Purchases and links

Apple processes the optional non-consumable lifetime purchase. The app keeps a local verified entitlement cache to apply the active-return allowance. Restoring a purchase restores the unlock, not deleted local records. Apple services have their own data handling.

Shared web links are stored as provided; the app does not automatically fetch order pages. Opening a link or using the system share interface can send information to another app or service you select. Review the recipient and selected files before sharing.

Export and deletion

Per-record export includes a readable summary and original attachments you select. JSON export contains record metadata, not images, and is not a complete backup. Exports can contain personal or financial information.

Deleting a return removes its local evidence and reminders. Confirmed deletion of all local data removes local records, drafts and inbox items, evidence, caches and owned notifications. This also turns off usage/error collection and clears queued counts. It does not erase an App Store purchase, remove prior exports or historical backups, or erase already merged aggregate counts. Deletion is not a promise of forensic secure erasure.

App usage and error counts

Starting with version 1.0.0 build 3, we collect limited aggregate counts to understand which features work and improve app reliability. Collection is enabled by default based on our assessed legitimate interests in improving the app. Open Settings and turn off Share app usage and error counts at any time to object. This stops new collection and sending and clears queued counts without affecting return tracking, reminders or purchases.

Counts cover app opens, drafts created, confirmed activation, returned/refunded transitions, evidence added, paywall views, verified unlock/restoration and fixed error categories. Apple MetricKit can provide delayed native crash/hang counts; reports are not guaranteed. We send the app version/build, counters and a random identifier for one upload batch to our Cloudflare endpoint. There is no persistent installation, device, advertising or account identifier. We do not send receipt or proof content, merchant/item names, filenames, links, notes, return dates, amounts, transaction IDs, raw error messages, screen recordings or call stacks. We do not use these counts for advertising or combine them with other companies' user data.

Cloudflare processes network metadata, including your IP address, to deliver and secure requests. Our application database stores daily aggregate counters and temporary upload-batch identifiers, not IP addresses or individual user profiles. Aggregate counters have a 90-day retention target; batch identifiers have a seven-day retention target, with expired rows removed on the next successful upload. Cloudflare database recovery backups can retain prior versions for up to seven additional days. Local queued batches expire after six days. Already merged counters cannot be attributed to you or selectively removed; switching off prevents subsequent submissions. Contact support@myparsec.com about this processing or your privacy rights.

Cloudflare acts as our service provider and may process connection metadata internationally under its applicable data-processing arrangements. Apple processes its platform services separately. The support website does not include analytics scripts or cookies.

Policy changes and contact

This policy will be updated if the app's data handling changes. Contact support@myparsec.com with privacy questions. Please avoid sending receipts or financial details unless needed and requested.