Privacy Policy for HSA Expenses

Last updated: November 2, 2026

Who we are

The app is made by Sean Howard, an independent developer. If you have questions about this policy, email [email protected].

What information the app stores

When you use the app, you may enter:

• Expense details: amounts, dates, categories, notes, and whether an expense has been reimbursed.
• Reimbursements: the amount and date of each time you paid yourself back from your HSA and, if someone else in your family has their own HSA, whose HSA it came from.
• Patient details: names, relationships (for example "Self" or "Child") and, if you choose, dates of birth for you and your family members.
• Receipts: photos, scans and PDF files you attach to expenses.
• Places: the name and address of a provider or pharmacy you pick for an expense.
• Mileage trips: for each drive, where it started and ended (a place's name and address, the address of your current location if you chose it, or just the label of one of your saved places, such as "Home" or "Work"), the miles, and any parking or tolls.
• HSA deposits, if you track them: amounts, dates, who made each deposit (you, your paycheck or your employer), whose HSA it went into if someone else in your family has their own HSA, and your coverage type for each tax year. The app never connects to a bank or HSA account. You type these in yourself.
• Repeating expenses and deposits: the schedule and details of anything you set up to repeat.
• App preferences: such as your color theme and date format.

Some of this is health-related information. We have no account system, no servers of our own, and no way to view your data.

Where your information is kept

• On your device. By default, everything is stored only in the app's private storage on your device.
• In your iCloud account, if you choose. If you turn on iCloud Sync (during setup or in Settings), the app stores a copy in your own private iCloud database using Apple's CloudKit, so it can appear on your other devices. That copy belongs to your Apple Account and is protected by Apple. We can't see it. You can turn iCloud Sync off at any time, and while it's off you can delete the iCloud copy from Settings > iCloud Sync.
• Places you save for mileage, such as your home and work addresses. Each one has a label you choose and an address. They're saved on your device and in your own iCloud account (Apple's iCloud key-value storage), so they're available on your other devices signed in to the same Apple Account. They're never part of family sharing, and mileage trips record only the label (for example "Home" or "Work"), never the address. Your mileage settings are kept the same way.

Family sharing

If you create a family in the app and invite someone, the expenses, patients, categories and receipts in your family are shared with the people you invite, through Apple's iCloud sharing. Each person sees and can change the shared information according to the role you give them (Admin, Can Edit or View Only). The person who creates the family is its Owner. The people in the family can see each other's names as provided by Apple. You can change roles or remove someone at any time, and members can leave. We are not part of the family and can't see the shared information.

Receipts shared from other apps

When you share a receipt to HSA Expenses from Mail, Files, Photos or another app, or open one in HSA Expenses, the file is copied into storage on your device that only HSA Expenses and its share extension can open, and waits there until you add it to an expense or discard it. It is not sent anywhere.

Notifications

Reminders you turn on (for example, a weekly reminder about missing receipts or a repeating expense that is due) are scheduled on your device. Family alerts, when someone in your family adds, changes or deletes an expense, are sent by Apple's iCloud service. They carry only identifiers, and your device then reads the details from your own iCloud data to write the alert. In Settings > Privacy you can choose how much each notification shows.

Widgets, Siri and Shortcuts

To show widgets and answer Siri, the app keeps a small summary of your totals and counts on your device. It never contains names, and in Settings > Privacy you can hide amounts from widgets while your device is locked, or always.

App Lock

If you turn on App Lock, iOS checks your Face ID, Touch ID or passcode. The app only learns whether it succeeded. Your face, fingerprint and passcode are never available to the app.

Subscriptions (HSA Expenses Plus)

HSA Expenses Plus is an optional subscription sold through Apple's App Store. Apple handles the purchase and payment. The app asks Apple whether you have an active subscription, and we never receive your name, Apple Account or payment details. If you are in a family in the app and you subscribe, the date your subscription runs until is saved in your family's shared iCloud data so the people you invited can use Plus too. You can manage or cancel the subscription in your Apple Account settings.

Permissions the app asks for

The app only asks for these when you use the feature that needs them, and you can say no or change your mind at any time in the Settings app on your device.

• Location (while using the app): used to show nearby providers first when you search for where an expense happened, and, when you choose Current Location for a mileage drive or a saved place, to find where you are. That place's address is saved with the trip (or as your saved place). The app doesn't otherwise save your location. The place you choose for an expense (its name and address) is saved with that expense.
• Camera: used only to scan receipts.
• Notifications: used only for the reminders and family alerts you turn on.
• Photos: used only to attach a receipt photo you pick.

Apple services the app uses

• Apple Maps: when you search for a place, your search text and approximate area are sent to Apple to find matching places, as with any app that uses Apple Maps. When the app works out the miles for a drive, its start and end points (which can include your saved places, such as your home address, or your current location) are sent to Apple Maps to get the driving distance.
• iCloud: only if you turn on iCloud Sync or family sharing, as described above. The app also downloads the current IRS mileage rates from the app's public iCloud database. That's a download only; nothing about you is sent.
• On-device intelligence: reading receipts and the Insights summary use Apple's on-device text recognition and Apple Intelligence. This runs on your device and nothing is sent anywhere for it.

Apple's handling of data is covered by Apple's Privacy Policy: https://www.apple.com/legal/privacy/

What we don't do

• We don't collect analytics or usage data.
• We don't show ads or use advertising identifiers.
• We don't track you across other apps or websites.
• We don't sell or share your information with anyone.
• The app doesn't link to bank accounts or HSA accounts.

Exporting and sharing files

The app can create CSV or PDF exports of your expenses. An export is only shared when you choose to share it (for example, by email or saving to Files). Once you share a file, it is handled by the app or person you sent it to.

Importing expenses

If you import past expenses from a spreadsheet file, the file you choose is read on your device and the expenses are saved like any others.

Copies the app keeps on your device

• Unfinished expense: while you fill in an expense, the app keeps a draft on your device so nothing is lost if the app closes. The draft is never synced or included in backups, and it's deleted when you save or cancel the expense.
• Safety copies: when turning iCloud Sync on or off replaces one copy of your data with another, the app first saves a copy of what was replaced on your device. You can see and delete these in Settings > iCloud Sync > Backups.
• Backups you set up: if you set up Backups in Settings > Data & Storage > Backups, the app saves your expenses and receipt files to a folder you choose, such as one in iCloud Drive. Those copies are wherever you put them, and you can delete them there.

Device backups

Your data may be included in your device's iCloud or computer backups, if you have backups turned on. Those backups are managed by Apple and your own settings, not by us.

Keeping and deleting your data

The app keeps your information until you delete it. We hold no copy.

You can delete individual expenses, receipts and patients inside the app. Deleted expenses and receipts go to Recently Deleted first, where you can recover them, and are deleted for good after 30 days. Deleting the app removes its data from your device. If you used iCloud Sync, delete the iCloud copy from Settings > iCloud Sync (with sync turned off) before deleting the app, or remove it later in your device's Settings > [your name] > iCloud > Manage Storage. Information you shared with a family stays available to the family until you remove it or stop sharing.

Children

The app is not directed at children. A parent or guardian may enter information about their children as patients; that information is kept the same way as everything else, as described above.

Changes to this policy

If a future version of the app changes how data is handled, we'll update this policy and the "Last updated" date before that version is released.

This website

This website uses no cookies, analytics or tracking. It is hosted by Cloudflare, which may process standard technical data, such as IP addresses, to deliver and protect the site.

Contact

Questions? Email [email protected].