--- title: "On-Device Receipt Scanning and Privacy" description: "Receipts reveal where you go, what you buy, and how you live. Here is how on-device, local-first scanning limits unnecessary uploads." url: https://pktd.ca/blog/on-device-receipt-scanning-privacy/ locale: en-CA category: "Privacy" tags: ["privacy", "on-device", "OCR", "local-first"] published: 2026-06-16 updated: 2026-07-16 publisher: "Lumin Marketing Group" site: "The PKTD Ledger" alternate_fr: https://pktd.ca/fr/blog/confidentialite-numerisation-recus-sur-appareil/ --- # On-Device Receipt Scanning and Privacy **Quick answer:** PKTD scans on-device with Apple's built-in Vision OCR, so receipt images stay local by default and are not sent to PKTD or OpenAI for AI parsing. Optional AI parsing sends redacted receipt text only with your consent. If you enable iCloud sync, your data (which can include receipt images) syncs through your private Apple iCloud account; exports and sharing can also move data off-device. A receipt looks trivial. It isn't. Put a year of them together and you have a detailed map of someone's life: where they go, when, how much they earn and spend, what they eat, what medications they buy, where they travel. Some cloud-scanning workflows can send this data to a remote service as soon as you take a photo. PKTD is built the other way around. Here's why that matters. ## The hidden cost of "free" cloud scanning When a receipt app uploads your images to its servers, a few factors deserve attention: - Your spending history then lives on **a third party's computer** and depends on its security measures, incident handling, and business model. - Receipt images often contain **partial card numbers, names, and locations** — sensitive by anyone's definition. - Cloud data can be **retained, analyzed, or shared** under practices you should verify in the provider's privacy policy. These risks do not mean every service behaves the same way. They make it worth checking what is uploaded, why, and for how long instead of relying only on a general privacy promise. ## What "on-device" and "local-first" actually mean **On-device** means the heavy lifting — reading the text off your receipt — happens on your iPhone using Apple's built-in Vision OCR, not on a remote server. **Local-first** means your receipts, categories, and totals are stored on *your* device by default, not in a company database. With PKTD specifically: - Receipt **images are not sent to PKTD or OpenAI for AI parsing**. - Text is extracted **on device**; image metadata like GPS is stripped before the processed image is saved. - Your ledger lives locally by default. If you enable sync, data can go through **your private iCloud**; exports and sharing can also move data off-device. > **The principle:** collect and transmit only what a feature needs. PKTD does not receive receipt images for AI parsing, and optional AI receives redacted text only after you consent. ## "But doesn't AI need the cloud?" On-device OCR reads receipt text whether or not you use optional AI. If you enable optional AI parsing and consent, PKTD sends redacted receipt text for cloud processing as part of the normal scan flow. The receipt image is not sent. That design gives you a choice: use on-device OCR without optional cloud AI, or consent to cloud AI suggestions for structured fields while keeping receipt images out of AI parsing. ## Privacy is a tax feature too There's a practical upside beyond peace of mind. Because records are stored on your device by default, you can keep [organized receipts](/blog/how-to-organize-receipts-for-taxes-canada/) accessible without depending only on a third party. CRA generally requires records and supporting documents to be kept for six years from the end of the last tax year they relate to, but exceptions can require a different or longer period. GST/HST records have similar general retention requirements, with exceptions depending on the record and circumstances. ## The bottom line You shouldn't have to trade your financial privacy for a tidy expense list. On-device, local-first scanning gives you both. [See how PKTD works](/#features) or [download it on the App Store](https://apps.apple.com/ca/app/pktd-receipt-scanner-budget/id6764603940) — receipt images remain local by default, while optional AI, iCloud, exports, and sharing follow the boundaries described above. --- *This article describes PKTD's privacy-first design in general terms. For exactly what is and isn't processed, read our [privacy policy](/privacy/).* ## Frequently asked questions ### What does on-device receipt scanning actually mean? On-device means the heavy lifting of reading the text off your receipt happens on your iPhone using Apple's built-in Vision OCR, not on a remote server. Local-first means your receipts, categories, and totals are stored on your own device by default rather than in a company database. Together, these choices let the app extract receipt text without sending the image to a remote server for that step. ### Does PKTD upload my receipt photos to the cloud? PKTD does not send receipt images to its own servers or OpenAI for AI parsing. By default, receipt images stay local, text is extracted on-device, and image metadata like GPS is stripped before the processed image is saved. If you enable iCloud sync, your data (which can include receipt images) syncs through your private Apple iCloud account; exports and sharing can also move data off-device. ### Doesn't receipt scanning need the cloud and AI to be accurate? On-device OCR reads receipt text whether or not you use optional AI. If you enable optional AI parsing and consent, PKTD sends redacted receipt text for cloud processing as part of the normal scan flow; the receipt image is not sent. The cloud AI path is based on your choice and consent, not on whether PKTD decides a receipt is difficult. ### Why does keeping receipts on my phone matter for taxes? Because records are stored on your device by default, you can keep them accessible and readable without depending only on a third party. CRA generally requires records and supporting documents to be kept for six years from the end of the last tax year they relate to, but exceptions can require a different or longer period. GST/HST records have similar general retention requirements, with exceptions depending on the record and circumstances. This is general information, not tax advice; confirm your requirements with the CRA or a qualified professional. --- Source: https://pktd.ca/blog/on-device-receipt-scanning-privacy/ About PKTD: PKTD is a privacy-first iPhone receipt scanner and expense tracker built for Canadian freelancers, gig workers, sole proprietors, and small businesses. https://pktd.ca General information, not tax advice.