Privacy & your purchases · Last updated November 6, 2026

Privacy Policy

Slipbook is built so that your purchases, receipts and deadlines stay on your iPhone or iPad. We do not receive, sell or track that content. This policy covers the Slipbook app for iPhone and iPad, its share extension, and this website.

1. Controller

Johanna Hoppe
Baccumer Str. 19
49808 Lingen
Germany
Email: slipbook-support@hoppedev.app

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Your content stays on your device

Products, return and warranty deadlines, prices, stores, receipts, documents, product photos, refunds, reminder settings, unfinished drafts, statistics and app settings are stored only inside the app’s container on your device, protected by iOS file protection. Receipts you share to Slipbook from another app are kept in a container shared only between the app and its share extension until the app takes them over.

There is no Slipbook account and no server of ours. This content is not sent to us, to RevenueCat or to anyone else. It only leaves the app when you explicitly create a backup, turn on automatic iCloud backup (section 5), or share or export a file yourself, and then only to the destination you choose.

The answers to the optional questions during the first start (for example where you usually keep receipts) are not stored or transmitted.

3. Reading receipts on the device

Receipts are read with Apple’s text recognition (Vision framework), which runs entirely on your device. Receipt images and PDFs are never uploaded for this. Photos and receipt images you add are copied into the app as new image files without metadata, so location and camera information of the original is not kept; the original in Photos or Files stays untouched. PDF files are copied as they are.

4. Permissions on your device

The app asks for a permission only when you use the matching feature. You can change every permission in iOS Settings at any time.

Camera: only used when you scan a receipt. Scans are read and stored on your device.
Photos: Slipbook uses Apple’s photo picker, which gives the app only the photos you select. It does not ask for access to your photo library.
Files: only the file you pick or share is copied into the app.
Notifications: optional. If you allow them, reminders are scheduled by iOS on your device. Nothing is sent to a server to plan or deliver them. If you decline, the app keeps working without reminders.

5. Backups

Manual backups (Premium) are files encrypted with AES-256-GCM using a key derived from a password you choose. You decide where to save them, for example in Files or iCloud Drive. The password is never stored and cannot be recovered by us or anyone else.

Automatic iCloud backup (Premium) is off by default. If you turn it on, the app writes encrypted backup files to the app’s folder in your own iCloud Drive and keeps the newest three per device. iCloud Drive is a service provided to you by Apple under Apple’s terms and privacy policy; we have no access to your iCloud account or these files. A key derived from your backup password is kept in the Keychain on this device only (not synced through iCloud Keychain) and deleted when you turn automatic backups off. The password itself is never stored. This is a backup, not a live sync, and it does not send data to any server of ours.

6. In-app purchase (Apple and RevenueCat)

Apple processes payments, App Store purchases and your Apple Account as an independent controller under Apple’s own privacy policy. We do not receive your payment details or your name.

RevenueCat (RevenueCat, Inc., USA) is our processor for purchase management. To show the price, process and verify the one-time Premium purchase and restore it, the app connects to RevenueCat when it starts and when your purchase status changes, and transmits: an anonymous app user ID generated on your device, App Store purchase and transaction information (such as product, purchase date and transaction identifiers), app and system information (such as app version, iOS version, device type, language and App Store country) and, for technical reasons, your IP address. RevenueCat does not receive your products, receipts, deadlines, photos, statistics or backups.

Purposes and legal bases: providing, verifying and restoring your purchase (Art. 6(1)(b) GDPR, performance of a contract); preventing fraud and evaluating purchases in aggregated form (Art. 6(1)(f) GDPR; our legitimate interest is a reliable, secure purchase process and understanding the app’s commercial performance). RevenueCat is not used for advertising or cross-app tracking. Retention: RevenueCat keeps purchase data as long as needed to provide and restore the purchase and as required by law, and deletes it when we ask it to.

7. Feedback board (UserJot)

Settings → About → Feedback & Support opens our public feedback board, hosted by UserJot (LogSnag LLC, USA), in Safari’s in-app view. It opens only when you tap it, and the app sends nothing to it: the app cannot read what happens there. Whatever you write or sign in with on the board is processed by UserJot on our behalf to run the board (Art. 6(1)(f) GDPR; our legitimate interest is receiving and answering feedback). Posts on the board can be public.

8. Waitlist and launch email (Loops)

The pre-launch waitlist is now closed and this website no longer accepts sign-ups. The following describes how earlier sign-ups were handled and how existing subscriber data is processed. When you submitted the form, your email address and your consent are sent to a function on our hosting provider (section 11), which asks Loops (Astrodon Corporation, USA), our processor under a data processing agreement, to send you one confirmation email. The confirmation link is signed and contains your address, the time of your sign-up, the version of the consent text and the IP address used to sign up. Until you confirm, we do not store your address in our list; Loops keeps a technical log of the sent confirmation email.

Double opt-in: you are added to the waitlist only when you open the confirmation link (valid for seven days). Loops then stores your address on our Slipbook list together with the time of your sign-up and of your confirmation, the IP addresses used for both and the consent version, so that we can prove your consent. If you don’t confirm, nothing else happens and you won’t hear from us. We send at most one confirmation email per address and day.

What we send: an email when Slipbook is available on the App Store, and occasional news about Slipbook. We never sell or share your address and send no third-party advertising. Open and click tracking is switched off for these emails: they contain no tracking pixels and links are not tracked.

Legal basis and withdrawal: your consent (Art. 6(1)(a) GDPR). Sending the confirmation email and storing the proof of consent are based on our obligation to be able to demonstrate consent (Art. 7(1) and Art. 6(1)(c) GDPR). You can withdraw your consent at any time with the unsubscribe link in every email or by email to slipbook-support@hoppedev.app; this does not affect the lawfulness of emails sent before. After you unsubscribe, we keep only your email address and the time of unsubscribing for as long as needed to respect your opt-out and to prove that consent was given; everything else is deleted. Otherwise your data is kept until you unsubscribe or we close the waitlist.

9. No advertising, no tracking

The app contains no advertising, no tracking across apps or websites, and no third-party crash-reporting SDKs. RevenueCat processes Premium purchase data and provides purchase statistics, as described in section 6. You do not need an app account. If you have agreed in iOS settings to share analytics with app developers, Apple may provide us with aggregated usage statistics and crash reports that do not identify you, under Apple’s privacy policy.

10. Storage period and deletion

Content in the app stays on your device until you delete it. You can delete single products at any time, clear the statistics history separately, or erase all data in Settings → Data & Privacy. When you delete a product, the statistics keep only minimal aggregated entries (such as counts and refunded amounts) until you clear them. Deleting the app removes its local data, subject to normal iOS behaviour. Backup files you saved, including those in your iCloud Drive, remain until you delete them there.

11. This website

Hosting and server logs: this website is hosted by Netlify, Inc. (USA) as our processor. When you visit it, technically required connection data is processed, such as IP address, date and time, requested page, HTTP status, referrer and browser information, to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Server logs are kept only briefly and deleted regularly.

No cookies or analytics: this website sets no cookies, uses no local storage and no analytics or tracking tools.

Local resources: the font, app icon, screenshots and app recording are served from this domain. The website loads no Google Fonts, no third-party scripts and no embedded videos from other services. Links to other sites, such as the feedback board, only connect you to them when you click. The pre-launch waitlist form is no longer available (section 8).

12. Contacting us by email

If you email us, we process your email address, your message and any information you include to answer your request (Art. 6(1)(b) GDPR for questions about the app or a purchase, otherwise Art. 6(1)(f) GDPR). We delete this correspondence when it is no longer needed, unless statutory retention periods apply.

13. Transfers to the USA

RevenueCat, UserJot, Loops and our hosting provider are based in the USA. Transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Because your content is stored only on your device, you can view, export and delete it yourself at any time; we cannot access it.

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany. To exercise your rights, email slipbook-support@hoppedev.app.

15. Further information

You are not legally or contractually required to provide personal data. Without the purchase data described in section 6, Premium cannot be bought, verified or restored; all free features work without it. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. We update this policy when the app, the website or the law changes; the current version is always available on this page.