Privacy Policy

The short version

DeductiBee keeps your donations, item values, charities, and photos in its own database on your iPhone. There is no DeductiBee account, and Parra runs no server that holds a copy of any of it. If you turn on iCloud sync, records move through your private CloudKit database inside your own iCloud account, which nobody at Parra can read, because nobody at Parra has access to it. The app contains no analytics SDK, no advertising identifiers, and no third-party trackers.

What is stored on your device

• Donation records. Drop-offs, the organizations you gave to, the items in each bag with their condition tier and value, cash gifts, charitable mileage, and out-of-pocket volunteer costs. Stored in a local SwiftData database.
• Photo evidence.Photos you attach to an item or to a drop-off receipt. They are resized before they are saved and stored inside the app's own database, not written back to your photo library unless you ask for that explicitly.
• Your settings. Whether you finished onboarding, your notification preferences, your sync preference, and an optional tax-bracket estimate used only to show an approximate savings figure on your own screen.
• Files you generate.Exports (the Form 8283 worksheet, CSV, TXF, receipt PDFs) are written into a folder inside the app's own private container so they can be handed to the share sheet, and any left over from more than a day ago are deleted automatically the next time you open the app.

What leaves your device, and only these things

• iCloud sync, if you turn it on. Sync is optional and part of Pro. When it is on, your records replicate through the iCloud.com.parra.deductibee container in youriCloud account's private database. Apple's privacy terms govern it. Parra has no credentials for it, receives no copy of it, and cannot query it. Turning sync off leaves the complete set of records on the device where they already are.
• Your purchase, if you subscribe.Payment is handled entirely by Apple through the App Store. We never see your payment method or your Apple Account. StoreKit tells the app whether the Pro entitlement is active. Purchase history is the one data type the app's privacy manifest declares as linked to you, and it is used only to unlock features you paid for.
• A feedback email, if you write one and send it. The feedback screen composes a draft in your own mail app, addressed to the founder. Attached to it: the DeductiBee version and build, your iOS version and device model, and the edition of the valuation dataset. That block is shown on screen, in full, before it is placed in the draft. No donation records, no photos, and no identifiers are included, and nothing is transmitted unless you press send yourself.
• Anything you deliberately export or share.An exported worksheet, CSV, or raw data file goes wherever you send it, through iOS's own share sheet. That destination is your choice and outside this policy.
• Apple's diagnostics, if you opted in.If you have chosen to share analytics with developers in iOS Settings, Apple may make aggregated, non-identifiable crash and performance data available to us in App Store Connect. That setting is Apple's and yours; we cannot turn it on for you and it carries no donation data.

What DeductiBee never collects

• No account, no sign-up, no email address, no phone number, no password.
• No advertising identifiers, no third-party analytics SDK, no attribution SDK, no session recording. The app's privacy manifest declares tracking as false with no tracking domains.
• No location data. DeductiBee never requests location permission and does nothing in the background beyond letting iCloud sync your own database.
• No telemetry about which screens you open, how often you use the app, what you donated, or who you donated it to.
• No copy of your donation history on our servers, because there are no servers.

Permissions the app asks for

• Camera, only when you photograph an item or a receipt.
• Photo library, only to let you attach a photo you already took. iOS hands DeductiBee the photos you pick and nothing else, so the app never sees the rest of your library. A photo goes back the other way only if you share one of your own donation photos out of DeductiBee and choose Save Image.
• Notifications, if you opt in. DeductiBee sends a year-end reminder in late December, a filing-season reminder in late January, and, if you subscribe, one recap before your subscription renews. Every one of them is composed and scheduled on your own device and delivered by it: there is no push server on our side, and there are no marketing notifications. Two of them include your own running total for the year, which means that figure can appear on your lock screen; iOS Settings lets you hide notification previews when the phone is locked, and turning the reminders off in DeductiBee’s own Settings cancels them outright. Nothing about them is ever sent anywhere. The app does declare the remote notification background mode, and it exists for one reason: so CloudKit can tell the app that your own database changed on another of your devices.

Every one of these is optional. Declining any of them leaves the rest of the app working, and you can change your mind at any time in iOS Settings.

What the app declares to Apple

Apple makes every app ship a privacy manifest listing the data it collects and the handful of system APIs that require a stated reason. DeductiBee's is short enough to quote the whole of it.

• Collected data: purchase history, and nothing else. Linked to you, used only for app functionality, never for tracking.
• Tracking: false, with an empty list of tracking domains. DeductiBee never shows the App Tracking Transparency prompt because it has nothing to ask for.
• Two declared APIs.Reading and writing the app's own settings, and reading the modification date of the export files DeductiBee itself wrote into its own folder, so it can delete the stale ones. That is the entire list: no disk-space probing, no reading which keyboards you have installed, no device boot time. Those are the fingerprinting signals the rule exists to surface, and DeductiBee does not call any of them.

This website

This site is static and served from Cloudflare Workers. It sets no cookies, loads no analytics script, embeds no tracking pixel, and makes no third-party requests: fonts are served from this domain rather than fetched from a font host. There is no sign-up form and nothing on this site asks you for personal information. Cloudflare, as the host, processes ordinary request logs in order to serve the pages, which is the sum of what it has.

Links to the App Store carry Apple's campaign attribution parameters, so App Store Connect can tell us which page an install came from. That reporting is aggregate and arrives from Apple; it does not identify you.

Third parties

• Apple, for App Store distribution, In-App Purchases, and optional iCloud sync. Apple's privacy terms apply to those.
• Cloudflare, for hosting this website.
• No advertising networks, no analytics vendors, no data brokers, no CRM, no email list.

Your controls

• Export everything, free. The raw data export is never behind the paywall. It produces a complete, readable copy of every record the app holds, on any tier.
• Delete everything. Settings has a Delete All Data control with a typed confirmation. It erases the records on the device and, if sync is on, that deletion reaches your other devices. It cannot be undone, and we keep no backup of our own to restore from.
• Turn sync off at any time in Settings, or delete the app to remove its local data from that device.
• Revoke a permission at any time in iOS Settings.

Legal rights

If you are in the EU or the UK, the GDPR gives you rights of access, correction, deletion, portability, and objection. If you are in California, the CCPA and CPRA give you rights of access, deletion, correction, and to opt out of sale or sharing. We do not sell or share personal information, and we have never done so.

Because we hold no copy of your donation data, those rights are satisfied in practice by the controls above: you already have access to everything, the export is portability, and the delete control is erasure. For anything not covered by that, including a request about the small amount of information Apple provides us about purchases, email support@parra.io and we will respond.

Children

DeductiBee is a tax record-keeping tool for adults. It is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

This policy changes when the app changes. A material change is announced in the app and reflected in the date at the top of this page. The commitment we will not quietly walk back is the one this product exists for: your records stay on your device, and the free raw export stays free.

Contact

Questions about any of this, email support@parra.io. DeductiBee is published by Parra.