Privacy Policy

Last updated October 9, 2026

The short version. Your receipts live on your device and in your own iCloud account. We have no account system and no access to your library. We do not sell, rent, or share your data, and we run no advertising or analytics. Receipt content leaves your device only for the optional AI cleanup described below.

What Nestfold stores, and where

On your device. Receipt images, extracted details (merchant, amounts, tax, dates, categories, tags, notes), and your settings are stored locally on your iPhone.
In your iCloud. If iCloud is enabled on your device, this data syncs through Apple's CloudKit to your own private iCloud database, so it survives a lost or replaced phone. It is held under your Apple Account. We cannot read it.

There is no Nestfold server holding your receipts, and no account to create.

Camera and photo library

Camera access is used only to photograph receipts you choose to scan. Photo library access is used only to import images you select. Nestfold does not browse, scan, or upload your photo library.

Apple Pay purchases (optional)

If you set up the Wallet automation in Apple's Shortcuts app, each Apple Pay purchase you make with the cards you chose hands Nestfold three things: the merchant name, the amount, and the card's name. Nestfold saves them as a purchase on your device (and in your iCloud, like your receipts) and files it in your budget. Nothing is sent to us. You create the automation, choose which cards it watches, and can turn it off or delete it in Shortcuts at any time. Nestfold cannot set it up, and sees nothing without it.

On-device intelligence

Category suggestions, comparisons with your usual month, budget plans and forecasts, return-by dates and warranties, and answers to questions about your spending are worked out on your iPhone, using your own receipts and, where your device supports it, Apple's on-device language model. Return reminders are scheduled on your iPhone as local notifications. None of this sends your data anywhere.

Optional AI cleanup

Nestfold reads every receipt on your device first, using Apple's Vision framework. AI cleanup is a Pro option, and it is off unless you choose it. When a scan comes out unclear — a missing total, a low-confidence merchant, amounts that don't add up — the app offers to clean it up. Only if you say yes, or have turned on automatic cleanup in Settings (the gear on Home), does it send that receipt's data to our processing endpoint at api.dipops.com, which forwards it to OpenAI to correct the fields.

What is sent: the receipt's recognized text, and — unless you turn off "Send Receipt Image to AI" — a compressed copy of the receipt image.
What is not sent: your name, email, device identifiers, location, or any other receipt in your library.
On our endpoint: the request is processed and returned. Receipt content is held briefly in memory to serve repeat requests and is discarded within minutes. We do not write receipt content to durable storage, and we do not log receipt contents.
At OpenAI: under OpenAI's API data policy, requests may be kept for up to 30 days for abuse monitoring, unless the law requires longer, and are then deleted. They are not used to train OpenAI's models.
Your choice: nothing is sent unless you ask for cleanup on a scan, or turn on Settings → AI Enhancement → AI Receipt Enhancement, which you can turn off again at any time. Scanning works either way.

For abuse prevention and diagnostics, our endpoint records the requesting IP address, request timing, and whether an image was included. These operational records contain no receipt contents.

Merchant logos

To show a store's logo, Nestfold may request a small icon from that merchant's own website or from public icon services (Google and DuckDuckGo favicon endpoints). Those requests reveal the merchant's web domain to those services; they do not include your receipt, your amounts, or anything identifying you. Downloaded icons are cached on your device. You can turn this off in Settings → Merchant Logos → Download Merchant Logos.

What we do not do

No advertising, ad networks, or ad identifiers
No analytics or behavioural tracking SDKs
No selling, renting, or sharing of personal data
No accounts, passwords, or profile building

Your control

Delete any receipt in the app; deleting removes it from your device and your iCloud sync.
Uninstalling removes the app's local data. iCloud data can be removed in iOS Settings → your name → iCloud.
Export everything as CSV or PDF at any time.
Lock the app behind Face ID, Touch ID, or your passcode in Settings → Privacy & Security.

Children

Nestfold is rated 4+ and is not directed at children. It does not knowingly collect personal information from anyone.

Changes

If this policy changes, the date above changes with it, and the current version is always at this address.

Contact

Questions about privacy or your data: dipo@dipops.com