Privacy Policy

Last updated November 1, 2026

The short version

Death & Taxes: HSA Receipt Archive is made by Garrett Nichols, called "the developer" here. The app runs no accounts of its own and no servers that hold your records. Your expenses and receipts stay on your device unless you choose to move them, by saving a file or, where it's available, by signing in with Google, which keeps a copy in your own Google Drive.

What the app stores

The app stores what you enter: expenses, the people you list as patients, withdrawals, settings, and the receipt photos and documents you attach. It keeps these in the app's storage on your device. They can include health and financial information, so protect your device with a screen lock.

What the developer can see

Nothing you enter in your records. The app does not send your records to the developer, and the developer does not sell personal information. The app contains no analytics, advertising or tracking.

The one exception is a message you choose to send through the contact form, described below.

The Android app's files are part of the app itself. If you use the web version instead, its files are downloaded from a web host, and like most websites, that host may keep routine technical logs such as your IP address and when you connected.

Reading receipts

Receipts are read on your device. They are not uploaded for this.

When data leaves your device

Only when you choose:

• Downloads: ZIP, CSV and PDF files are saved to your device, usually in your Downloads folder, unencrypted. Anyone with the file can read it.
• Contact form: if you send a message, the message, the reply email you choose to add, and the app's version go through Web3Forms, a form delivery service, to reach the developer. Nothing else from the app is included, so please leave out health details and account numbers.
• Sign in with Google, where it's available: if you sign in, your records and receipts are copied, unencrypted, to a folder in your own Google Drive, and Google's terms and privacy policy apply. The app can only access files it created there. It also reads your Google name and email address, keeps them on your device to show who is signed in, and doesn't send them to the developer. In a web browser, signing in also loads Google's sign-in script.

Messages you send

The developer reads contact form messages and any reply email you add, and uses them only to answer you and improve the app. They're kept as long as they're useful for support, and you can use the form to ask for yours to be deleted. Web3Forms handles them under its own terms and privacy policy.

The developer may share a message if the law requires it. If the app is ever sold or transferred, messages may go to the new owner, who must follow this policy until it's changed as described below.

Security

Your records are protected by your device's own security. The app has no separate password or lock, so anyone who can open your unlocked device may be able to open them. No app or device is perfectly secure, and the developer can't guarantee that your information will never be lost or seen by someone else.

HIPAA

The developer isn't a health care provider, health plan or health care clearinghouse, and doesn't offer the app on behalf of one. The app is a personal record keeper, and HIPAA generally doesn't apply to what you keep in it.

Deleting your data

To delete your account: this applies if you've signed in with Google. Open the app, sign in if you need to, go to Settings, and use Delete account. This permanently deletes your backup from Google Drive, skipping the trash, removes the app's access to your Drive, and erases everything from that device. It can't be undone. The developer holds no copy of your records, so there is nothing else to delete and nothing that can be recovered. Your Google account itself isn't affected.

To delete your account without the app: in Google Drive, delete the folder named Death and Taxes Backup and empty your trash. Then, in your Google Account's list of third-party connections, remove this app's access. The developer can't see or reach your Drive, so only you can do this.

To erase only this device: in Settings, use Delete all my data. That can't reach copies you've already saved, including downloads and anything in Google Drive, so remove those yourself. Clearing the app's data or uninstalling it can also erase your records, as can clearing site data in a web browser, so keep a backup.

Children

The app is meant for adults managing their own health savings accounts and isn't directed to anyone under 18. You may record expenses for dependents, and you're responsible for that information.

Changes

If this policy changes, the new version will appear here with a new date. Major changes will also be mentioned in the notes for the app update.

Contact

Questions? Use the contact form.