Last updated 14 September 2026
Your medical bills are read and analysed entirely on your iPhone. They are never uploaded, never sent to us, and never seen by anyone but you.
When you photograph a bill, the image is processed on your device. Text recognition uses Apple's built-in Vision framework, which runs locally. The billing rules that decide what to flag also run locally, inside the app.
The photograph, the recognised text, and the findings are stored only in Lime Shield's own storage on your device. They are not backed up to any server we control. Deleting a scan removes it. Deleting the app removes all of them.
Lime Shield has no server that receives bills. There is no account to create in order to scan, and no upload step to opt out of, because there is no upload.
Nothing. We operate no analytics, no crash reporting, no advertising identifiers, and no tracking of any kind. We do not know how many bills you have scanned or what they contained.
Lime Shield offers an optional subscription, Lime Shield Pro. Purchases are handled by Apple. We never see your payment details.
To manage subscriptions we use RevenueCat, a third-party service. When you buy, restore, or renew a subscription, RevenueCat receives the purchase receipt from Apple along with an anonymous identifier generated for your installation, and, from your device, basic technical details such as the app version and device type.
RevenueCat does not receive your bills, your name, your email address, or anything you have scanned. It only knows that an anonymous installation holds a subscription. You can read RevenueCat's privacy policy at revenuecat.com/privacy.
Lime Shield offers Sign in with Apple. It is optional, and the app works fully without it. If you use it, Apple provides an anonymous identifier, and optionally the name you choose to share. That identifier is stored on your device so a subscription can be recognised if you reinstall or use another device. We do not receive your Apple ID or your real email address, and we store nothing about you on any server.
Lime Shield asks for camera access so you can photograph a bill. The camera is used only when you tap Scan. Photos taken in the app are not added to your photo library and are not transmitted anywhere.
Lime Shield is not directed at children under 13 and does not knowingly collect information from them. Since the app collects no personal information from anyone, there is nothing for us to hold or delete.
Because we hold no personal data about you, there is no account to close and no data for us to export or erase on request. Everything the app knows about you is on your own device and under your control. Clearing your scans in Settings, or deleting the app, removes it.
If this policy changes, the revised version will be posted at this address with an updated date. Material changes will also be described in the app's release notes.
Questions about privacy, or about anything in this policy, can be sent to bbandarpalli@gmail.com.