Privacy Policy

Effective October 8, 2026

Who we are

Stubly is made by Michael Berinshteyn and Elijah Wellington in Erie, Pennsylvania, USA ("we" or "us"). This policy explains what the app handles, where it is kept, who can see it and how you control it. We are the data controller only for the limited information described below that actually reaches us.

The short version

Stubly has no servers, no advertising, no analytics and no tracking. Your receipts, photos and conversations are stored on your device and, if you sign in, in your own private iCloud account, which we cannot open. We never sell or share your personal information.

Sign in with Apple

Signing in is optional. Without an account, everything you add stays on your device and nothing is synced. When you sign in, Apple gives the app an identifier unique to Stubly, plus your name and email address if you choose to share them. You can hide your email with Apple's relay service. This information stays on your device and is used only to greet you and keep your account separate on shared devices.

What you keep in Stubly

The app stores what you add: receipt details such as store, date, amounts, tax, tip, currency, category, payment method, line items, warranty lengths and sources, return dates, notes and the business or personal tag; the text read from each receipt; receipt photos if you keep them; your profile photo; your conversations with the assistant and the name you give it; and your settings. Settings stay on the device, and everything else syncs through your iCloud.

Apple Intelligence and the assistant

Reading receipts, sorting them, estimating warranty lengths, writing insights, answering questions and making reports use Apple's on-device language model through Apple's Foundation Models framework. Your data is processed on your device and is not sent to us, to Apple for this purpose, or to any other AI provider. On devices without Apple Intelligence the app uses simple on-device rules instead. Assistant answers, estimates and reports are generated automatically and can be wrong, so check anything important against your receipts.

Camera and photos

The camera is used only while the scanner is open, to find and photograph a receipt. Photos you import or pick for your profile are chosen with the system photo picker, so the app receives only the images you select. You can change camera and photo access at any time in the Settings app.

Microphone and voice

The microphone is used only while the mic button is on, so you can describe a purchase or ask the assistant by talking. What you say is turned into text on your device by Apple's speech recognition, the audio is never recorded, stored or sent anywhere, and only the resulting text is kept, like anything you type. Answers you asked for by voice are read aloud with a voice built into your device. You can turn microphone access off at any time in the Settings app.

iCloud storage

Once you sign in, receipts, photos, conversations and your profile photo, including anything you added before signing in, are stored in your private iCloud database through Apple's CloudKit, so they sync to your other devices signed in to the same Apple Account. That database belongs to your Apple Account, we cannot access it, and Apple handles it under Apple's own privacy policy, which may involve storage in other countries.

Sharing and usernames

Sharing is optional. If you turn it on, the username you choose is saved in Stubly's public iCloud database with a random Apple identifier for your account, so other Stubly users can find you by that exact username; it is never listed or searchable any other way. Invitations are stored there too, addressed to a scrambled form of the username rather than the username itself, with the inviter's username and a link that only the invited person can open; they are deleted once answered or after 14 days. If you allow notifications, iCloud tells you when someone invites you. Your list of the invitations you sent is kept in your private iCloud so the app can limit how many go out, and usernames you block are kept on your device. A project you share is kept in your own iCloud through Apple's CloudKit sharing, and the people you invite can see its receipts, photos, notes and member list and do what their permissions allow. A project you join lives in its owner's iCloud, so its owner and admins decide what happens to it. Asking the assistant about a project reads that project's receipts on your device only. We cannot open any of it.

Siri, Shortcuts and Spotlight

If you use Siri, Shortcuts or Spotlight with Stubly, the app shares receipt names, totals, dates and warranty details with the system on your device so it can answer. Apple handles Siri requests under Apple's privacy policy.

Warranty lookups

Warranty lengths for many makers come from their own published warranty pages, which we collect and check before they're included in the app. When you tap Check Coverage, the app opens the maker's warranty page if it has one, or otherwise a Google search in Safari; only the product name, brand and the words "warranty coverage length" are sent in that search. Searching the web for a store's website or an item sends only the store's or item's name. Google's own privacy policy applies to those searches. The app may download an updated list of makers' warranties about once a week, and that request contains nothing about you or your receipts.

Notifications

Warranty, return and weekly reminders are scheduled on your device from your own receipts. Nothing about them is sent to us. Silent notifications from iCloud are used only to keep your devices in sync.

Exports

PDF, Excel and CSV files you export are created on your device. They leave it only when you choose to share or save them, and whoever receives them handles them under their own terms.

What we don't do

We do not sell or share personal information, show ads, use analytics or tracking tools, include third-party SDKs, or use your data to train AI models. Because we don't track people across apps or websites, the app does not change its behavior in response to Do Not Track signals.

Legal bases

Where laws such as the EU and UK GDPR apply, we rely on providing the service you asked for to run the app's features, and on your consent for camera, microphone, photo and notification access, which you can withdraw in the Settings app at any time.

Keeping and deleting your data

Your data stays until you delete it. You can delete any receipt or conversation in the app. Settings > Delete Account erases every receipt, photo, conversation and your profile photo from this device and from iCloud, deletes the projects you host, leaves the ones you joined, releases your username so someone else can use it, cancels all reminders and signs you out. Without an account, Settings > Delete All Data erases everything from this device. You can also stop using Sign in with Apple for Stubly under Settings > Apple Account > Sign in with Apple. Apple may keep iCloud backups for a limited time under its own policies.

Your rights

You can see, correct, export and delete your data yourself in the app, and Export Data gives you a copy in PDF, Excel or CSV. Depending on where you live you may also have rights to restrict or object to processing and to complain to your data protection authority. California residents: we do not sell or share personal information as those terms are defined in California law.

Children

Stubly is not directed to children under 13, or under the age of digital consent where you live, and we do not knowingly collect their information. If you believe a child's information has reached us, contact us and we will delete it.

Security

Data travels between your device and iCloud over encrypted connections and is protected by your Apple Account. No method of storage is perfectly secure, so keep your device passcode and Apple Account safe. If we ever learn of a breach affecting you, we will notify you and the authorities as the law requires.

Changes

If this policy changes we will update the date above and point out material changes in the app. Using the app after a change means you accept the updated policy.

Contact

Questions or requests about privacy, including deletion requests: Michael Berinshteyn and Elijah Wellington, Erie, Pennsylvania, USA, at berinshteyn@gmail.com. We aim to reply within 30 days.