100% Private & Local-First

ShoeboxHSA Privacy Policy

Effective Date: September 19, 2026

Welcome to ShoeboxHSA. We designed ShoeboxHSA from the ground up for Health Savings Account (HSA) savers executing the long-term shoebox compounding strategy. Because medical receipts contain deeply sensitive personal health and financial data, ShoeboxHSA is built with a zero-knowledge, local-first architecture.

🔒 Zero-Tracking Guarantee: ShoeboxHSA does not collect, track, sell, or transmit your medical invoices, doctor records, diagnoses, prescription details, or personal identity. We have zero external servers, zero advertising SDKs, and zero telemetry trackers.

1. 100% Local-First Storage Architecture

All medical receipt images, scanned PDFs, dates of service, merchant details, IRS Pub 502 categories, reimbursement statuses, and expense notes remain exclusively on your device within Apple's encrypted application sandbox. We do not operate proprietary cloud storage or retain copies of your health records.

2. On-Device OCR & Document Parsing

When you scan a paper bill or import a multi-page PDF statement (such as an Explanation of Benefits or hospital statement), text extraction and optical character recognition (OCR) are executed entirely on your iPhone using Apple's native Vision framework. Your images and documents are processed on-device and never uploaded to cloud AI APIs.

3. Biometric Security Shield (Face ID / Passcode)

ShoeboxHSA offers an optional biometric security shield. When enabled, authentication is handled directly by Apple's LocalAuthentication framework. Your biometric tokens remain securely locked in your device's Secure Enclave; ShoeboxHSA never accesses, captures, or transmits your biometric data.

4. In-App Purchases & Subscriptions

All purchases (ShoeboxHSA Pro Lifetime Vault Access, Annual Pass, or Monthly Flex) are processed exclusively through Apple's native StoreKit 2 APIs. We do not collect, view, or process credit card numbers, billing addresses, or bank account credentials. All transactions are securely handled by Apple.

5. Complete Data Portability & Instant Deletion

Under the Shoebox Strategy, you may hold records for 20 to 40 years until retirement. You retain full ownership and control over your files:

Export Anytime: Export your complete records anytime to open-standard CSV spreadsheets or comprehensive multi-page IRS Form 8889 PDF audit packets with stamped receipt photos.
One-Tap Data Deletion: You can permanently delete individual receipts or purge the entire vault at any time in Settings > Clear All Vault Data. Once deleted locally, your records are completely erased.

6. Third-Party Analytics & Advertising

ShoeboxHSA contains no third-party advertising frameworks and no third-party analytics trackers (no Firebase, no Meta Pixel, no Mixpanel). Your activity within the application is private to you.

7. Contact & Inquiries

If you have any questions or feedback regarding our privacy practices, please contact:

Developer: Parth Darji
Email: [email protected]
Website: https://parthdarji.com