Privacy policy

Last updated 3 October 2026

The short version

Boletto only sees the receipts you add. It never looks through your photos or email.
Each receipt you add is sent to be scanned in the cloud. The date, shop, total and VAT come back to your phone.
Your scans are saved to the folder you choose. We don’t keep copies.
No account. No ads. No analytics or tracking in the app or on this website.

Who we are

Boletto is made by David Alexander in the UK. We are responsible for your data under UK data protection law. If you have a question about this policy, email support@boletto.co.uk.

What happens to a receipt

You add it. From the camera, Photos, Files or the share sheet. Boletto only gets the receipts you choose. Photos come through Apple’s picker, so Boletto can’t see the rest of your library.
Your phone cleans it up. A photo is cropped, straightened and turned into a black and white scan on your phone. The scan is what gets sent, not the original photo. So the photo’s location and camera details are not sent. A PDF is sent as it is, with anything saved inside it.
It’s scanned in the cloud. The scan goes through Boletto’s server to Anthropic, the company that makes the Claude AI model, which finds the date, shop, total, VAT and currency. With it we send the shop names you’ve corrected before, so names are spelt your way. Nothing else goes with it: not your name, email, location or any ID for your phone.
It’s saved to your folder. If you change the details later, Boletto renames the file in your folder.

Boletto’s server

Receipts pass through Boletto’s server on their way to Anthropic. The server runs on Cloudflare. It doesn’t keep your receipts.

To count your free scans, it keeps a random number for your copy of Boletto and how many receipts it has scanned this month. Nothing else. It can’t tell who you are.

The server uses Apple’s App Attest and DeviceCheck to check that requests come from the real app, and that reinstalling it doesn’t reset the free scans. Apple doesn’t tell us who you are.

What Anthropic does with it

Anthropic scans receipts only for Boletto. It doesn’t use them to train its AI models. It deletes them within 30 days. If its safety systems flag something as misuse, it can keep it for up to 2 years. It also keeps data when the law requires it.

Anthropic is in the United States. Sending receipts there is protected by the standard contract clauses in Anthropic’s data processing terms, which UK law approves for this.

What stays on your phone

To work well, Boletto keeps a few things on your phone. We can’t see any of them.

Shop names you’ve corrected.
Details printed on receipts that identify a shop, such as its VAT number or phone number.
A list of the receipts you’ve saved (date, shop, total and file name), to spot possible duplicates.
The answers from each scan, so the same receipt is never sent twice.
Scans you haven’t saved yet.
Your settings.

These are part of your phone’s backup, like other app data. Deleting Boletto deletes them.

Your folder

You choose where your scans are saved, in iCloud Drive or another folder in the Files app. Once a scan is there, the company that runs that storage looks after it under its own privacy policy.

Notifications, subscriptions and ratings

Notifications are made on your phone, to say when receipts are scanned. Nothing is sent to us.
Subscriptions are handled by Apple. We never see your name or payment details. The server only checks that your subscription is active.
Ratings use Apple’s own prompt. We don’t see who rated.

If you email us

We use your email address and what you send only to reply to you. We delete emails once they’re no longer needed. If you ask, we delete them straight away.

This website

boletto.co.uk sets no cookies and uses no analytics. It’s hosted by Cloudflare, which handles each visit (including your IP address) to deliver the page and keep the site secure.

Why we’re allowed to use your data

We send your receipts to be scanned because that’s the service you’ve asked Boletto for.
We reply to emails because you’ve asked us to.

Your rights

You can ask for a copy of any data we hold about you. You can also ask us to correct it or delete it. Most of your data is only on your phone, so deleting Boletto deletes it. To ask about anything else, email support@boletto.co.uk. We’ll reply within a month.

If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

Boletto is made for businesses. It isn’t meant for children under 13.

Changes

If this policy changes, we’ll update the date at the top. If a change affects what happens to your receipts, we’ll say so in the app first.