Privacy policy

What we know about you is nothing.

Last updated 2 September 2026 · Applies to Product Guard for iPhone

The short version

Your warranties live on your device, and in your own iCloud account if you're signed in. There is no account to create with us, no analytics, and no database of users. We never see your receipts, your photos, or what you paid for anything.

Some features do look things up online — product details, prices, and the assistant. Those send a search term, never your records. The next two sections say exactly which is which.

What never leaves your device

  • Your receipt images and product photos.
  • What you paid, where you bought it, and when.
  • Your serial numbers.
  • Your claim drafts and the faults you describe in them.
  • The documents and manuals you attach to a product.
  • Your list of products, including when you search it.

Reading a receipt, filling the form from it, detecting a category, summarising coverage, drafting a claim, answering questions about your own open claims, and searching your own products all run on your device through Apple's on-device foundation models and the Vision framework. None of that text or imagery is transmitted.

What goes online, and when

Every network request the app makes is one you started. There is no background sync to us, no telemetry, and no crash reporting that carries your content.

  • Looking up product details sends the brand, model or barcode you're searching for to UPCitemdb. Product images come from Wikipedia and Wikimedia Commons.
  • “What's it worth?” sends the brand and model to eBay's listing search.
  • Adding a product by sharing a web page fetches that page so the app can read its details.
  • The assistant, which is off until you turn it on, sends the question you type and the search terms it produces to those same catalogues and, on devices without Apple Intelligence, to a hosted language model that writes the reply. It is never given your warranty list.
  • iCloud sync, when you're signed in, copies your warranty records to your own private iCloud database.

The app talks to those services directly from your device. We do not run a server in between, which means there is no request log of yours for us to hold, and equally that those third parties see the request as coming from your device's IP address. Their own policies apply to what they do with it: UPCitemdb, eBay, Wikimedia.

What the app stores

Product details you enter (name, brand, model and serial numbers, retailer, purchase date, price, warranty length), any photos, receipt images or documents you attach, the warranty claims you draft, your categories, and your reminder and currency preferences.

All of it is written to a database inside the app's own storage on your device, and synced to your private iCloud database when you're signed in to iCloud. We hold no copy.

iCloud sync

Sync follows your device's iCloud account, the same way Photos and Notes do. There is no switch in the app because there is nothing for us to switch: when you're signed in, records go to your private iCloud database, and Settings reports whether that is happening.

Apple provides that storage and it is governed by Apple's privacy policy. We have no access to it and cannot read, restore or delete anything in it.

Camera and photos

The camera is used to scan barcodes and capture receipts. Photo library access is used when you pick an existing image. Images are saved with the product they belong to and are never uploaded. You can replace or remove an attached image at any time by editing the product.

Both permissions are asked for at the moment you first use the feature, and refusing either leaves the rest of the app working.

The assistant

The assistant is off until you switch it on, and you can switch it off again at any time in Settings. With it off, nothing about it runs and no request is made.

With it on: your question is turned into search terms, those terms are sent to a product catalogue and — when you asked about price — to a marketplace, and the results are used to write the reply. On a device with Apple Intelligence the reply is written on your device and only the lookups go online. On a device without it, the question and the fetched results are sent to a hosted language model that writes the reply. The assistant's header tells you which is happening.

No account or identifier is attached to any of this. The assistant is never given your product list, your receipts, your prices or your claims.

Claim help — the assistant that answers questions about your own open claims — is a different feature and runs only on your device. It makes no network request at all, on any device.

On-device intelligence

Receipt reading, smart fill, category detection, coverage summaries, search over your own products, claim drafting and claim help run through Apple's on-device foundation models and the Vision framework. The text and images they process stay on your device.

Suggestions are always shown for you to confirm, marked with a sparkle, and only ever fill a field you left blank — the app never saves a value on your behalf and never overwrites something you typed.

Notifications

Warranty reminders are scheduled locally by your device. They do not involve a server and no push notifications are sent to you. If you deny or later revoke notification permission, the rest of the app continues to work.

Exporting your data

Export Data writes your products and claims to a JSON file and hands it to the iOS share sheet. Once you choose where to send it, that copy is governed by whichever app or service you sent it to, not by this policy. Images are not included in the export.

Deleting your data

Deleting a product removes it and any claims linked to it, on this device and from your iCloud database. Deleting the app removes the local copy; iCloud data is removed by signing out or deleting it from iCloud storage in the iOS Settings app.

Because we hold no copy of your warranty data, there is nothing for you to request from us and nothing for us to delete on your behalf. If you want that in writing for a data request, ask us and we'll confirm it.

Children

The app is not directed at children. It collects no personal information and requires no account.

Changes to this policy

This policy is updated whenever a feature changes what the app sends off your device, and the date at the top changes with it. Where a change adds a new destination for your data, it ships switched off — as the assistant does — so nothing new leaves without you choosing it.

Contacting us

Questions about this policy, or about anything the app does with your data: [email protected].