Expyr asks you to photograph identity documents, so it owes you a plain answer about what happens to them.
Everything you track is stored on your phone only. That means names, dates, reference numbers, notes and photos. None of it is ever sent to a server or kept on one. If you delete the app, that data goes with it, which is why the backup option exists. Expyr has no analytics that identify you.
Photos you scan or attach are written to Expyr's private app storage. They do not appear in your camera roll, are not added to iCloud Photo Library, and no other app can read them.
To read a date from a photo, the image is sent once to Expyr's scanning service and passed to Anthropic's Claude API, which returns the extracted details. The image is not written to disk on the server, is not used to train any model, and is discarded as soon as the response is produced. Only the image you choose is ever sent. Expyr never uploads anything in the background.
Asking Expyr to read a contract works the same way, with one addition. The document is sent once and transcribed, and that transcription is then kept on your phone alongside the photo. When you ask a question, the question and that stored text are sent to be answered, and neither is written to disk on the server. Keeping the text on your phone is what makes asking a second question cheap, and it means the document itself only ever leaves once. Delete the item and the transcription goes with it.
Scanning is always optional. You can add every item by hand, and attach photos without scanning them. Nothing leaves your phone in that case.
Reminders are scheduled locally by iOS. They are not push notifications sent from a server, so no one needs to know your dates in order for them to arrive.
Expyr's data sits in the app's own storage, which iOS includes in your iPhone backup. Set up a new phone from that backup and everything returns: items, dates and photos. You can also export a backup file yourself at any time, which is the belt-and-braces option if you would rather hold a copy you control.
A backup file contains your items and their photos. Once you save or send it, that file is yours to look after. Treat it like the documents themselves and keep it somewhere private.
Expyr works without an account and most people never make one. It is offered in one place only: after you have bought credits for Expyr AI, so that those credits follow you to a new phone. Credits are a consumable purchase and Apple keeps no record of one that has been used, so without an account they would be lost with the phone they were bought on.
If you sign in with Apple, we store two things: an anonymous identifier Apple gives us for you, and how many credits you have left. We do not ask Apple for your name or your email and we never receive them. That identifier is specific to Expyr and cannot be used to recognise you anywhere else.
Your documents are not part of this. Nothing you track is sent to us whether you sign in or not.
You can delete the account from inside the app at any time, under Settings. Deleting erases the identifier and the balance immediately. Any unspent credits are lost, and the app tells you so before you confirm. Your documents stay on your phone either way.
Turning on the app lock requires Face ID, Touch ID or your device passcode to open Expyr. The check is performed by iOS; Expyr never sees your biometric data.
Expyr is not directed at children and does not knowingly collect anything from them. Nothing you track is ever sent to us, so there is no record of any child to collect in the first place.
If this policy changes in a way that affects what leaves your phone, the app will say so before it takes effect. Questions are welcome at hashim.elsaeed@gmail.com.
Last updated 31 August 2026.