Handler
Legal
Privacy Policy
Effective October 12, 2026
The short version
- Handler does not collect your data. There is no Handler account, server, analytics or advertising.
- Everything you add is stored in an encrypted database on your iPhone.
- Nothing leaves your iPhone unless you turn on Private Cloud Compute, and then only text, never images or amounts.
- Deleting the app deletes your Handler data.
What Handler stores
Handler keeps the information you choose to give it, so that it can organise it for you:
- Receipts and documents you scan, photograph, import or share into the app, and the text recognised from them.
- Line items, merchants, dates, amounts and the categories you or Handler assign.
- Transactions from bank statement files (CSV, OFX or QFX) that you import.
- Deadlines such as return windows, warranties, renewals and subscriptions.
- Your settings.
None of this is sent to the developer of Handler. We do not collect, receive, sell or share it, and we have no way to see it.
Where it's stored
Handler stores your records in a database on your iPhone that is encrypted with a 256-bit key. The key is kept in your iPhone's Keychain, is tied to this device, and is never synced to iCloud or included in backups. Scanned documents are stored with Data Protection, so they can't be read while your iPhone is locked.
Handler's database is deliberately excluded from iCloud and device backups. This means it can't be recovered on another device. If you lose or replace your iPhone, your Handler records will not move with you.
What leaves your iPhone
By default, nothing. Text recognition and categorisation run on your iPhone using Apple's on-device frameworks and Apple Intelligence. Handler has no analytics, no advertising or tracking SDKs, no third-party AI services, and no Handler-operated backend. The app is tested so that unapproved network code fails the build.
Private Cloud Compute (optional, off by default)
If you turn on Private Cloud Compute in Handler's Settings, Handler may ask Apple's Private Cloud Compute to finish categorising items the on-device model couldn't. In that case only text is sent: a merchant name and line description, or numbered lines of recognised receipt text. Images, amounts and account identifiers are never sent. Private Cloud Compute is operated by Apple and is designed so that requests are not stored or made accessible to Apple or to us. You can turn it off at any time.
If a future version of Handler adds a feature that sends data off your iPhone, this policy will be updated before that version is released.
Permissions
| Permission | Why Handler asks |
|---|---|
| Camera | To scan receipts and documents. Scans stay on your iPhone. |
| Photos | Only for the photos you choose to import. |
| Notifications | To remind you about upcoming deadlines. Notifications are scheduled on your iPhone. |
You can change these at any time in the Settings app.
Apple features
Handler works with Siri and Shortcuts, widgets, Live Activities and notifications. These never show amounts, balances or transactions. Spotlight indexing is off by default; if you turn it on, document titles become searchable on your iPhone. Your use of Apple's features is covered by Apple's Privacy Policy.
Your control
- Delete data: deleting an item in Handler removes it from the database. Deleting the Handler app removes all of its data from your iPhone.
- Access and correction: your data is on your device, so you can view and edit it directly in the app. Because we hold no data about you, there is nothing for us to export or delete on our side.
- Children: Handler is not directed at children under 13, and it collects no information from anyone.
This website
This website uses no cookies, analytics, advertising or third-party fonts and scripts. It is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information such as IP addresses to deliver and secure the site; see Cloudflare's Privacy Policy.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date.
Contact
Questions about privacy are welcome. See the Support page for how to reach us.