App Privacy Policy
This Privacy Policy explains how Receipt Maker, also marketed as “Rent Receipt Maker: Cash PDF” (the “App”), handles information. The App is designed to create, store, export, and share receipts and related PDF documents.
The short version
Your receipts stay on your device. No account is required, and the current iOS version displays no ads. Apple handles purchases and RevenueCat validates Pro access. Statistics, crash reports, the Firebase link, and Apple Ads attribution start only after consent. Feedback and optional survey answers that you choose to send are processed in a private Google spreadsheet.
1. Information stored locally on your device
The App may store the following information that you choose to enter or import:
- issuer or business details, such as name, address, tax identifiers, email, phone number, website, bank details, payment link, logo, stamp, and signature;
- payer or contact details, such as name, company, address, email address, phone number, and notes;
- receipt details, such as amounts, currency, dates, payment method, purpose, line items, tax information, receipt numbers, property or rent details, and notes;
- generated PDFs, local preferences, counters, and backup metadata.
This receipt and contact content is stored in the App’s local storage. We do not operate a developer server that receives or stores this content. It leaves the App only when you choose an action such as sharing a PDF, exporting a backup, saving a file to cloud storage, or sending a file through another app. The privacy practices of the destination you select then apply.
2. Device permissions
The App may request access to:
- Contacts: to let you select or import a payer. The App reads only the contact fields needed for this feature, including name, organization, postal address, email address, and phone number. Imported information is copied into the App’s local database.
- Camera and photo library: to take or select a logo or similar image for your receipts.
The current iOS version does not request App Tracking Transparency permission.
You can change device permissions at any time in your operating system settings. Some related features may not work after permission is withdrawn.
3. Purchases and subscriptions
On platforms where paid features are available, purchases are processed by the relevant app store. We do not receive or store your complete payment-card details.
The App uses RevenueCat to validate purchases, determine subscription or entitlement status, restore purchases, prevent fraud, and provide purchase analytics. RevenueCat may process an automatically generated anonymous App User ID, store receipt or purchase token, product and transaction information, purchase history, subscription status, entitlement status, locale, currency, and related technical request information. The current App does not send your receipt content, contacts, logo, signature, or issuer profile to RevenueCat.
RevenueCat’s privacy information is available at revenuecat.com/privacy.
3a. Optional usage statistics, crash reports, and advertising measurement
Google Analytics for Firebase, Firebase Crashlytics, the link between RevenueCat and Firebase, and Apple Ads attribution are off until you agree to the App’s statistics consent notice. This also applies when upgrading from a version without that consent notice. Declining does not affect receipt features, purchasing, or restoring purchases. Feedback and survey submissions that you choose to send are handled separately, as described in section 3b.
After you agree, Google may receive usage events (such as creating, exporting, sharing, or printing a receipt, opening the upgrade screen, and the outcome of a purchase attempt), categorical settings (such as receipt type, template, language, paper size, and currency), receipt counts rather than receipt numbers, an automatically generated app instance identifier, Firebase installation and Crashlytics installation identifiers, device and operating-system information, app version, language, general region derived from a masked IP address, and crash reports with stack traces and technical app state. Firebase’s dependent services may also process session and SDK-performance metadata to maintain service quality.
The App does not deliberately include receipt contents, payer or contact details, amounts written on your receipts, receipt numbers, issuer profiles, logos, or signatures in its statistics events or crash reports. This restriction does not refer to the price of Pro: after consent, RevenueCat can send App Store purchase and subscription events, product IDs, transaction information, currency, and in-app purchase amounts to Firebase/Google Analytics. The App supplies its Firebase app instance ID to RevenueCat for that purpose, so usage information can be associated with RevenueCat’s anonymous purchase record. The App does not send feedback email addresses to these services.
After consent, the App also enables RevenueCat’s collection of an Apple AdServices attribution token. RevenueCat sends the token to Apple to obtain standard Apple Ads attribution information, such as campaign, ad group, and keyword, and associates it with its purchase records so we can measure our own campaigns. The current iOS version does not request the advertising identifier (IDFA) or App Tracking Transparency permission and does not use this information for cross-app tracking or personalized advertising.
Our Analytics account also permits Google to use Analytics data for product and service improvement, aggregated modelling and business insights, technical support, and business recommendations. For data used under the Google products and services setting, Google acts as an independent controller under its applicable data-protection terms. These additional uses do not enable Google signals or advertising personalization. See Google Analytics data sharing settings.
Google’s privacy information is available at Google Privacy Policy and Privacy and Security in Firebase. Apple explains its advertising privacy practices at Apple Advertising & Privacy.
3b. Feedback, support, and the optional paywall survey
You can send feedback without allowing statistics. A feedback submission contains the category, the text you enter, an optional email address, the source of the form, a fixed error code when opened from an error message, a random installation ID used for abuse prevention, a unique submission ID, and the client-created and server-received times. No receipt file or content is attached automatically. Please avoid including sensitive receipt or payment information in your message.
The Include diagnostics switch is on by default. Before sending, you can view the exact values or switch it off. With it on, the submission also contains app version, build number, platform, operating-system version, device model, country selected in the App, interface language, device language, Pro status, subscription plan (none, monthly, yearly, or lifetime), and a receipt-count range (0, 1, 2–3, 4–10, 11–50, or 50+). Turning it off omits these diagnostic fields; the basic feedback fields, including the installation ID, still accompany your submission. We use this information to provide the support you request, investigate faults, improve features, and prevent abuse.
If you choose to answer the optional survey when closing the upgrade screen, we receive your selected reason and any text you enter, the paywall opening location and variant, the number of receipts created on this installation (capped at 100, not a receipt number), country, interface language, app version, installation ID, submission ID, and client-created and server-received times. Survey submissions do not include an email address or notification-consent fields. You can always skip the survey; it does not depend on statistics consent. Statistics about feedback or survey interactions are sent to Firebase only while statistics consent is enabled.
Submissions are sent over HTTPS to a Google Apps Script web application and kept in the developer’s private Google Sheets spreadsheet. Google provides the hosting, storage, and processing services. Message text is passed to Google’s Apps Script translation service to create a Chinese machine translation for the developer to read; the original and translation are stored together. The spreadsheet is not publicly shared, and the script offers no interface for reading submissions. The Google service terms and any data-processing terms applicable to the account used by the developer govern Google’s processing.
If you supply an email address, we can reply about your feedback. The separate Email me when this is fixed or added checkbox is off by default and is available only with an email address. If you check it, we record that choice, the consent-text version, the time you checked it, and the server receipt time, and use the address to notify you about the change you requested. You can withdraw this choice before a notification is sent by emailing [email protected] or sending new feedback. Any such notification email will include a way to unsubscribe.
If submission through the App is unavailable, you can choose the email fallback. It uses your selected email service; diagnostic details are included only while Include diagnostics is on.
3c. Withdrawing statistics consent
You can turn statistics off at any time in Settings → About → Share usage statistics. The following limits apply:
- New Firebase statistics collection is disabled immediately on the device. Events queued before withdrawal may still be transmitted after the device reconnects.
- Crashlytics automatic collection and the App’s error reporting are disabled, and unsent crash reports are deleted. Reports already uploaded are not automatically deleted.
- The App sends an empty Firebase app instance ID to RevenueCat to remove the association. If offline, it stores a pending removal and retries on the next launch or return to the foreground. Server-side purchase events may continue reaching Google Analytics until RevenueCat receives the removal.
- RevenueCat’s Apple AdServices collection cannot be disabled during the same running App process. It stops being enabled from the next App launch; during the current process, the SDK may still obtain and send attribution tokens, including retrying after an earlier failure. Attribution already received remains part of RevenueCat’s purchase record.
- Withdrawal does not automatically erase previously received data. To request deletion, use the contact address below. Purchasing, restoring purchases, and feedback or survey submissions that you choose to send remain available.
4. Advertising
The current iOS version does not display ads. Although Google Mobile Ads and consent-management code is retained in the project for a possible future release, it is disabled: the App does not initialize the advertising service, request an advertising identifier, request tracking permission, or send information to Google for advertising.
If advertising is enabled in a future version, this policy and the App Store privacy information will be updated before release, and any consent or permission required by law or platform rules will be requested at that time.
5. How information is shared
We do not sell your receipt or contact content. Information may be shared only in the following circumstances:
- with Apple, RevenueCat, and their service providers as needed to process purchases and maintain paid access;
- with Google (Firebase) and RevenueCat for consent-based statistics, crash reporting, and purchase-event measurement, and with Apple for consent-based Apple Ads attribution, as described in section 3a;
- with Google (Apps Script, Sheets, and translation services) to receive, store, and translate feedback and survey submissions that you choose to send, as described in section 3b;
- with a destination or app that you deliberately select when exporting, backing up, printing, or sharing content;
- when required by law, legal process, or to protect users, the public, or our legal rights.
Third-party providers are responsible for their own systems and privacy practices. We require service providers used by the App to handle information consistently with applicable law and the protections described in this policy.
6. Retention and deletion
Local receipt, payer, profile, image, signature, PDF, and preference data remains on your device until you delete individual content, use Settings → Delete all data, or uninstall the App. Files or backups you exported to another location must be deleted separately from that location.
Purchase records are retained by Apple and RevenueCat according to their legal obligations and retention policies. To ask about information controlled by the App operator or to request assistance with a RevenueCat customer record, contact us at [email protected]. We may need an anonymous App User ID or transaction information to locate the relevant record. App-store purchase records may need to be handled directly by the store.
The App does not currently require an account. Therefore, there is no separate in-App account to delete.
Feedback and survey rows, including original text, translation, email if supplied, and diagnostics if attached, are kept for no longer than 24 calendar months after receipt. A daily cleanup is configured to delete rows two days before their individual expiry. To request earlier deletion, email the contact address or submit new feedback with the full submission ID copied from the App; the eight characters displayed in the interface are only an abbreviation. We locate the row by the full ID or email address and delete it, together with its translation, within 30 days. Deleting a local feedback record does not delete a row already delivered to the spreadsheet.
The App keeps at most 20 recent feedback records locally for up to 30 days. Retryable submissions are retried for up to seven days; you can cancel pending feedback in My feedback. Google’s retention rules apply to Firebase statistics and crash-report data; the retention setting configured for Google Analytics is separate from the 24-month feedback limit. To request assistance locating or deleting service-held data, contact us; information such as an anonymous App User ID, transaction details, or submission ID may be needed.
7. Security
We use the security features provided by the operating system and use encrypted network connections supported by our service providers. No storage or transmission method is completely secure. You are responsible for protecting your device and any PDFs or backups that you export, especially because receipts may contain financial or personal information.
8. Children
The App is a general-purpose productivity tool and is not directed to children, including children under 13. We do not knowingly ask children to provide personal information to the developer.
9. International processing
Apple, RevenueCat, Google, and their service providers may process information in countries other than the country where you live. Their legal safeguards and privacy notices apply to that processing.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, or to withdraw consent. Most receipt and contact content is controlled directly on your device and can be edited or deleted in the App. For other requests, contact [email protected]. You may also complain to your local data-protection authority.
11. Changes to this policy
We may update this policy when the App, service providers, or legal requirements change. We will update the effective date above and, when appropriate, provide additional notice.
12. Contact
Receipt Maker Support
[email protected]
App Privacy Labels
Disclosure prepared for iOS version 1.0.2. Publishing this web page does not publish or verify the App Store Connect privacy label. The label on the App Store may reflect a different released version.
Linked means associated with an installation, device or purchase identifier; it does not require a real-name account. Feedback may include an optional email address. Survey answers share the installation ID with feedback; Firebase can be linked to RevenueCat purchases after consent. Feedback email addresses are not sent to Firebase or RevenueCat.
| Data type | Source / examples | Purposes | Linked to you | Used for tracking |
|---|---|---|---|---|
| Contact Info — Email Address | Optional feedback email and requested feature-update notification | App Functionality; Developer’s Advertising or Marketing (requested update notification) | Yes | No |
| User Content — Customer Support | Feedback text, category, error source and support handling | App Functionality; Analytics | Yes | No |
| User Content — Other User Content | Optional paywall-survey reason and free text | App Functionality; Analytics | Yes | No |
| Identifiers — Device ID | Random installation ID; Firebase app instance / installation ID; Crashlytics installation UUID | App Functionality (abuse prevention / diagnostics); Analytics; Developer’s Advertising or Marketing (attribution) | Yes | No |
| Identifiers — User ID | RevenueCat anonymous App User ID, linked to purchases and Firebase | App Functionality; Analytics; Developer’s Advertising or Marketing | Yes | No |
| Purchases — Purchase History | Pro purchases, trials, renewals, restores, refunds and purchase status | App Functionality; Analytics; Developer’s Advertising or Marketing | Yes | No |
| Usage Data — Product Interaction | Usage events, paywall source / plan / receipt count and survey behavior | Analytics; App Functionality (survey processing); Developer’s Advertising or Marketing | Yes | No |
| Usage Data — Advertising Data | Standard Apple Ads campaign, ad group and keyword attribution | Analytics; Developer’s Advertising or Marketing | Yes | No |
| Diagnostics — Crash Data | Crashlytics crashes, nonfatal errors and stack traces | App Functionality; Analytics | Yes | No |
| Diagnostics — Performance Data | FirebaseSessions / GoogleDataTransport session and quality metadata | App Functionality; Analytics | Yes | No |
| Diagnostics — Other Diagnostic Data | System, device and app information; optional feedback diagnostics | App Functionality; Analytics | Yes | No |
| Location — Coarse Location | General region inferred by Analytics from a masked IP; no location permission | Analytics; Developer’s Advertising or Marketing | Yes | No |
Data used to track you
None in this disclosure: the app does not use IDFA or cross-app tracking. This assumes standard Apple Ads attribution, with Google signals, advertising personalization, remarketing and cross-app targeting kept off. The app currently displays no ads. Optional statistics, crash reporting, the Firebase purchase link and Apple Ads attribution require statistics consent; core purchases and feedback are handled separately.
Receipt content stays local
Receipt amounts, payer/contact information, addresses, photos, logos and signatures are not automatically uploaded. Pro purchase amounts are separate and can be measured after consent. Apple handles payment-card details; the developer and RevenueCat do not receive full card details. See the policy for providers, retention, deletion and consent withdrawal.