Privacy Policy

Last updated: July 2, 2026

LaterPile helps you scan household mail, pull out deadlines, and remember what to pay and what is safe to shred. We built it to need as little of your information as possible. Here is exactly what happens to your data.

Your scanned images stay on your phone

When you scan a piece of mail, the photo is saved only on your device, in storage that iOS encrypts. We never upload your scanned images to our servers or anyone else's. If you sign in on a second device, your details show up there, but the original photo stays on the phone that took it.

Reading your mail happens on your device

Your phone reads the text on each scan itself, using Apple's on-device text recognition. To turn that text into a due date, amount, and document type, the text (not the image) is sent to our extraction service, which uses an AI model to return the structured fields. That request is used only to produce your result and is not stored. In the rare case a scan is too blurry to read on device, LaterPile asks your permission first before sending that one photo to be read; it is used for that single request and is never stored.

Email bills (only if you connect Gmail)

You can optionally connect your Gmail account so LaterPile can find bills, statements, and renewal notices in your email. This is read-only access: LaterPile can never send, delete, label, or change anything in your inbox. The connection tokens are stored in your phone's secure storage, never on our servers.

The searching happens on your phone. Your phone checks message details (sender, subject) to spot likely bills, and only for those does it fetch the email's text — on your device. Like scanned mail, that text is sent to our extraction service only to produce the due date, amount, and document type, is used for nothing else, and is not stored. Your email messages are never stored on our servers, and the full text of an email never leaves your phone except for that one transient extraction request. The optional subscription finder looks only at message details (sender and subject line) from known merchants — it never reads email contents. Disconnecting Gmail in Settings revokes LaterPile's access with Google and deletes the connection from your phone; documents you already filed stay in your library.

LaterPile's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features described here — it is never used for advertising, never sold, never used to train AI models, and never read by humans except with your permission for support or security reasons.

Backing up and syncing (only if you sign in)

LaterPile works fully without an account. If you choose to sign in with Apple or your email, your extracted text and details (document types, amounts, due dates, account names, your corrections, predicted bills) back up to your own account so you can pick up on another device. This data is stored in your own access-controlled space, encrypted at rest, and is not readable by other users. Because it lives in your account, we are able to access it to operate the service; we do not sell it, rent it, or use it for advertising. Your scanned images are never part of this backup.

Reminders

Reminders are scheduled and delivered on your device. They are not sent through our servers.

Analytics and crash reports

To understand whether the app is working, LaterPile records a small, fixed set of product events: that a scan happened, that an extraction succeeded (and whether it had a due date), that a reminder was set, that the paywall was shown, that a trial started, and that a membership became paid. These events never include your document content, amounts, names, or due dates. They are tied to a random user id, never your email. We do not use automatic event capture, session recording, or location. Crash reports include the technical error and device and OS information, with personal data and request contents stripped out.

Membership

Subscriptions are handled by Apple and by RevenueCat, our subscription provider, which receives your purchase and a random user id so your membership follows you across your devices. Apple processes the payment; we never see your card details.

No tracking, no ads, no selling

LaterPile does not track you across other apps or websites, does not contain advertising, and does not sell or share your personal data with data brokers. There is no advertising identifier and no cross-app tracking.

Your controls

In Settings you can export all your extracted text and details (document types, amounts, due dates, account names, your corrections, predicted bills) at any time. Your scanned images stay on your phone and can be shared one document at a time. You can also delete everything: this removes your papers from the phone, and if you are signed in it permanently deletes your account and all of your synced data. You can sign out and remove your papers from a shared phone while keeping your cloud backup. These export and delete controls are how you exercise your rights to access and erase your data; you do not need to contact us first.

Children

LaterPile is not directed to children, and we do not knowingly collect data from children.

Changes

If this policy changes, we will update the date above and, for material changes, note it in the app.

Contact

Questions about your privacy: support@laterpile.app

← Back to LaterPile