Loxley Labs

Privacy Policy · Loxley Receipts

Version 1.0 · Effective October 10, 2026

This policy covers the Loxley Receipts Android application (the "App"), published by Loxley Labs, LLC, a Colorado limited liability company. Questions and requests: support@loxleylabs.net. The loxleylabs.net website has its own privacy policy; this document is the authoritative policy for the App.

The whole policy in one sentence: the App has no internet permission, collects nothing about you, has no accounts, analytics, or advertising, and keeps your receipts, their photos, and your mileage log encrypted on your phone. Everything below is detail on that sentence.

1. What we collect: nothing

The App has no accounts, no sign-in, no analytics, no advertising, no crash reporting, no tracking, and no third-party SDKs that profile you or report your activity. It does not collect, transmit, sell, or share your personal or financial data, and we run no server that receives it.

The App does not hold the Android INTERNET permission, so it cannot connect to any network. Reading a receipt (the text recognition) runs on your phone. You can confirm the permission list yourself on the App's page in your phone's Settings. We cannot see your data, and we cannot be compelled to hand over what we never receive.

2. What stays on your device

The App stores what you capture and enter so it can work as a receipt and mileage record:

each receipt's original photo or PDF, exactly as captured or imported, and the cropped copies made from it,
the fields read from it or typed by you (merchant, date, amounts, payment method, the last four digits of a card if printed, category, business purpose, client or project, notes) and its line items,
an edit log of every change made to each receipt,
mileage trips (date, places, odometer readings, miles, purpose) and any odometer photos you add,
your merchant aliases, categories, client names and corrections, and
your settings.

The records live in an encrypted database (SQLCipher), and the photos and PDFs in encrypted files (Tink, AES-256-GCM). Their keys are held by the Android Keystore on your phone. Nothing is saved to your gallery or shared storage, and the App's data is excluded from Android's automatic cloud backup.

The optional app lock asks for your fingerprint, face, or screen lock before the App opens. It controls who can open the App; the encryption above is separate and always on.

Deleting your data is in your hands: delete a receipt or trip in the App, or uninstall the App, which removes everything it stored. When you import a photo or PDF, the App can also delete the file you imported it from, if you ask it to.

3. When data leaves your device

Two features can move data off your device, and both run only when you choose to use them. The App never sends anything on its own.

Encrypted backup (.lxrb). Protected by a passphrase you choose, using PBKDF2-HMAC-SHA256 (600,000 iterations) and AES-256-GCM. If you keep the optional recovery code, the code can also open the file. The passphrase is not stored anywhere, and the recovery code is shown to you once and kept on your phone only, sealed by the Keystore. We cannot open, recover, or reset a backup; nobody can without the passphrase or the code.
Exports. Spreadsheets (CSV, and the column layouts for QuickBooks Online, FreshBooks, and Xero), a PDF report, and a ZIP of your original photos. These are plain, unencrypted files for you and your accountant. Temporary copies made for an export are deleted from the App's storage after an hour, or the next time the App starts if it was closed before then.

You save these files through the Android file picker to a place you choose, or hand them to another app through the Android share sheet. If you choose a cloud-synced folder or send a file with another app (for example email), that copy is governed by that service's terms and privacy policy, not by us.

4. Android permissions the App uses

Permission	Why
`CAMERA` (asked at runtime)	Takes the receipt and odometer photos you choose to take. A phone without a camera can still import photos and PDFs.
`USE_BIOMETRIC`, `USE_FINGERPRINT`	The optional app lock (Section 2). Your fingerprint or face is checked by Android; the App never receives it.

The App uses no internet, network state, location, microphone, contacts, photo library, or storage permission. It reads only the files you pick or share to it.

5. Purchases

Payment is handled by the store you buy from, not by the App:

Google Play: Google processes the transaction under Google's own terms and privacy policy.
loxleylabs.net: Lemon Squeezy, as merchant of record, processes payment and any order emails under its own terms and privacy policy.

The App itself receives nothing from checkout. There are no license keys and no activation step: once you have the App, it simply runs. Buying it creates no account in the App and sends nothing to it.

6. Links that leave the App

The Privacy policy and Terms of Use buttons on the About screen open those pages in your web browser. The browser does the fetching, not the App. What happens in your browser is governed by the sites you visit, and the App receives nothing back.

7. Children

The App is a business record-keeping tool for adults and is not directed to children. Our Terms of Use require users to be at least 18. Because the App collects no data from anyone, it also collects no data from children.

8. Your rights

United States privacy laws give consumers rights over personal data that businesses hold about them: access, correction, deletion, portability. Our answer to every such request is the same: we hold nothing about you. There is no server-side record to access, correct, delete, or port. Your records exist in one place, on your device, under your control:

Access and portability: use the exports or the encrypted backup.
Deletion: delete receipts and trips in the App, or uninstall it.
Correction: edit any receipt or trip in the App; the edit log keeps a line for each change.

If you contact support@loxleylabs.net, we will receive your email address and the contents of your message, and we use them only to respond to you.

9. Changes to this policy

If this policy changes, the new version will be posted at loxleylabs.net/privacy/receipts with an updated version number, date, and a changelog entry below. Because the App collects nothing about you and keeps your records on your device, changes to this policy cannot retroactively expose past data; there is none to expose.

10. Contact

Loxley Labs, LLC (Colorado, USA)
support@loxleylabs.net · loxleylabs.net

Changelog

v1.0 (October 10, 2026): first published version.

← Back to loxleylabs.net

Google Play and the Google Play logo are trademarks of Google LLC.