Expiry Privacy Policy

Effective date: 20 October 2026 · Applies to the Expiry apps for iPhone and Android and to this website.

The short version

Expiry keeps your records on your phone. On iPhone it can also keep an encrypted copy in your own iCloud, unless you turn that off; Big Helpers does not receive the copy or its key. There is no Expiry account or sign-in, advertising, tracking or remote crash-reporting service. Optional Expiry AI sends the document text or record context you preview and choose to send to self-hosted Big Helpers AI. No other AI provider is used for either (since 20 October 2026). Original photos and PDFs are not uploaded by these features. After you enable AI, device checks also send security proof and an installation identifier. Big Helpers retains security, usage and operational records as explained below. Turning AI off does not erase previously retained records.

What Expiry processes on your device

To remind you before something runs out, Expiry works with information you give it:

• Items you add, such as warranties, returns, renewals, subscriptions and documents, with their labels, merchants, notes, folders, serial numbers, dates of purchase and dates.
• Reminder settings, snoozes, follow-ups and notes about support cases you record.
• Pages you scan, photos you choose, and files, links, text or saved emails you share into Expiry. The iPhone app keeps the original you capture so you can open it again. The Android app reads shared text; it records shared images, PDFs and other binary files by name without reading or keeping their original bytes.
• Text read from those sources to suggest dates and details. On iPhone, text in images is recognised on the device.

This processing happens on your device. Expiry does not upload it for processing, except the text of a single document you choose to send with Read with Expiry AI, and what you choose to send when you ask Expiry AI about your records, both described next.

Read with Expiry AI (optional)

Some receipts and documents are hard to read on the device. For those, versions with Read with Expiry AI can send selected text for help. It is off until you turn it on, and document reading never runs by itself. The reading goes only to self-hosted Big Helpers AI, operated by Big Helpers Software and Solutions Private Limited. Since 20 October 2026 no other provider is used: if that service is busy or cannot answer, the app says Expiry AI is busy and nothing else is tried.

• What is sent: only the text that Expiry has already read from one document on your device, which you see in full before sending. The photo, the PDF or file itself, your other records and your notes are never sent by document reading.
• When: only when you tap the send button for that document.
• Where it goes: to Big Helpers' own server, which passes it to the AI service's API and returns the answer. The app relay logs operational metadata rather than document or answer bodies. Besides the text, the app sends only a retained random number that identifies this app installation; it is pseudonymous rather than anonymous, and, in versions with the device check, that check's pass for the day. To limit daily use, the server counts each day's readings per installation and per network address; it keeps the network address only as a one-way hash, keeps only the current day's counts, and deletes earlier days' counts the next time the service is used. Like any website, the server's access log also records the time, network address and app or browser name of each request, never its contents.
• The AI services: Big Helpers' server sends the text only to self-hosted Big Helpers AI, operated by Big Helpers Software and Solutions Private Limited. If that service is busy, does not answer in time or gives an answer the server cannot use, the app says Expiry AI is busy and the text is not sent anywhere else. Before 20 October 2026, in that case the server sent the same text to Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China, which processed it under DeepSeek's Open Platform Terms; Big Helpers cannot recall text that was sent there. The app relay logs operational metadata rather than document or answer bodies. This policy does not make a zero-retention guarantee for the complete processing stack.
• What comes back: suggested dates and, where the document states them, the product's serial number, model number, date of purchase, product name, merchant, and customer care phone numbers and email addresses. A second coverage, such as "5 years on compressor", comes back as a second warranty date with its own label. Each suggestion quotes the line it came from, and nothing is saved until you confirm it. A date of purchase is never turned into a reminder; where a document says, for example, "one year warranty", the app works out the warranty's end from the purchase date and shows you that working for you to check.
• Turning it off: Settings, Expiry AI. Nothing is sent while it is off.

Reading with Expiry AI sends text, not original photos or PDFs.

Ask, arrange, remind and review with Expiry AI (optional)

Versions of Expiry that include Expiry AI also let you chat with it about your records, ask it to arrange them into folders and archive finished ones, ask it to plan reminders, and ask it to review what is due. Like reading, this is off until you turn Expiry AI on, and it never runs by itself: something is sent only when you send a question or tap one of these actions.

• What is sent: your question and the conversation so far, today's date, your folder names, and the records the request needs: for each, its label, status, merchant, model number, serial number with all but its first four and last four characters hidden (unless you are asking about that one record), date of purchase, folders, dates and their kinds, phone numbers and email addresses saved with it, whether it has an open support case, when you last opened it, and its note, cut to 300 characters. Before sending, the app tells you how many records Expiry AI will see and lets you view exactly what will be sent. Photos, scans, PDFs and other kept originals are never sent.
• Where it goes: to Big Helpers' own server, which passes it to self-hosted Big Helpers AI, and returns the answer. These requests are never sent to DeepSeek or to any other backup provider: if that service is busy or cannot answer, the app says Expiry AI is busy and nothing else is tried. (Since 20 October 2026 the same is true for reading a document, described above.)
• What the app relay records: operational metadata rather than question, record or answer bodies in its logs. This does not establish a retention guarantee for the complete self-hosted processing stack. Besides the request, the app sends only the same random installation number described above and, in versions with the device check, that check's pass for the day. To limit daily use, the server keeps per-installation and per-network-address counts for the current day only, under one-way hashes, and deletes earlier days' counts, and it keeps a short technical log of each request (the kind of request, whether it worked, how long it took and its size), with no text, no address and no installation number. The web server's access log records each request as described under This website.
• What comes back: an answer, the records it relied on, and, where you asked for a change or for arranging or reminders, suggested changes such as renaming a record, adding a date, filing it in a folder, archiving or restoring it, deleting it, or reminder days for a date. Expiry AI never changes your records by itself: a suggestion changes nothing until you tap to apply it, deleting always needs a separate confirmation and is never offered for a record with an open support case, and an archived record can be restored unchanged.
• Turning it off: Settings, Expiry AI. Nothing is sent while it is off, and the rest of the app works without it.

Device check for Expiry AI

Expiry AI has daily limits so that everyone gets a fair share. So that copies of the app that are not genuine cannot use up those limits, versions of Expiry released from 10 October 2026 (build 27 on iPhone, 0.1.0 (7) on Android) check, about once a day and only after you have turned Expiry AI on, that their Expiry AI requests come from a genuine copy of Expiry on a real phone.

• How: on iPhone, with Apple's App Attest: the phone makes a key that only this copy of Expiry can use, and Apple confirms it. On Android, with Google Play Integrity: Google Play gives the app a token that says whether this copy came from Google Play and whether the phone passes Google's device checks, and Big Helpers' server asks Google to read it. Google handles that request under its own privacy policy.
• What is sent: a one-time code from Big Helpers' server, combined with the random installation number, and Apple's confirmation or Google's token. None of your records, documents, questions or contact details are part of it.
• What Big Helpers keeps: on iPhone, the key's identifier, its public key and a counter that stops a request being replayed; for both, the result of the last check and its dates. These are pseudonymous security identifiers filed under a salted hash of the installation number. They can identify repeated use by the same installation. The current service does not enforce an automatic expiry for its iPhone key records. Turning Expiry AI off clears the local session but does not erase the server record. Big Helpers also keeps daily totals of results with no installation number. Raw one-time codes, Google's tokens and Google's full answers are not retained in these records. A hash of a challenge is stored until it is consumed or later housekeeping removes it.
• What it changes: the server gives the app a pass for the day, which it sends with each Expiry AI request. Today a check that fails or cannot run (for example on an older phone) changes nothing. Later, copies that cannot pass it may get a smaller daily allowance; Expiry AI will not be switched off for them without this page saying so first.

Copy in your iCloud (iPhone)

So that your records survive a lost or replaced iPhone, the iPhone app keeps an always-current copy of them in your own iCloud. It is on unless you turn it off.

• What is copied: your records: items, dates, notes, folders, support cases, recurring payments, and the text Expiry read from what you captured. Scanned pages, photos, PDFs and other kept originals are not copied; they stay on your iPhone.
• Where it goes: to Expiry's private folder in your own iCloud Drive, stored by Apple as part of your iCloud storage. It does not appear in the Files app. Big Helpers runs no server for it and has no access to it.
• How it is protected: the copy is encrypted on your iPhone, end to end, before it leaves. The key that opens it is kept in your iCloud Keychain, which Apple also encrypts end to end, so neither Big Helpers nor Apple can read the copy. It is a different key from the one that encrypts the records on your iPhone, which never leaves that device.
• On a new iPhone: when you sign in with the same Apple Account, Expiry finds the copy and asks before bringing the records back; they are merged with anything already there. If iCloud Keychain is off, you can enter the copy's recovery key instead; you can see it on your current iPhone in Expiry under Settings, iCloud, Show recovery key. Anyone with that key and access to your iCloud copy could read your records, so keep it private.
• Turning it off: in Expiry, Settings, iCloud, Keep a copy in iCloud. Nothing new is copied while it is off. The copy already in iCloud stays until you delete Expiry's data from your iCloud storage, in your iPhone's Settings under your name and then iCloud. Deleting it there does not touch the records on your iPhone.

The Android version does not offer this feature.

How it is stored

Your records are stored in an encrypted file inside the app's own storage on your device. On iPhone, the kept originals are encrypted too. They sit in a storage area shared only with Expiry's own share extension and widgets. The encryption key is held by your device's secure key storage and is kept on that device.

On iPhone, Expiry also keeps the separate, end-to-end encrypted copy of your records in your iCloud described above, under its own key in your iCloud Keychain. Your device or iCloud backup may also include the encrypted file on the device; the key that opens that file is not included, so that copy of the file cannot be opened on another device. On Android, Expiry excludes its data from cloud backup and device-to-device transfer.

Permissions

• Camera (iPhone): only when you scan a document or card.
• Photos (iPhone): only to import an image you choose.
• Notifications (iPhone): to show reminders scheduled on the device. No push service is used.

The Android app requests none of these permissions. Versions with Expiry AI use the internet for the AI requests you choose to send and for device checks after you enable AI.

When information leaves the app because you choose it

Some features hand information to another app only when you ask:

• Export and backup: readable exports, such as PDF, CSV or a text copy, are not encrypted. An encrypted backup file (iPhone) needs your recovery key to open. You choose where either one goes.
• Emails to a company: Expiry can prepare a draft. Your mail app sends it, and only if you send it.
• Copy: copying a value puts it on your device's clipboard.

Once you share, save or send something to another app, person, backup or cloud service, that recipient's own policies apply.

If you add Expiry widgets or Live Activities, item names and dates can appear on your Home Screen or Lock Screen.

Retention and deletion

Your records stay on your device until you uninstall Expiry. In the app you can mark items done, dismiss Inbox entries, delete pages before you keep a scan, and delete folders and recurring payments. Versions that include Expiry AI also let you archive, restore and delete individual items (deleting needs a separate confirmation); earlier versions cannot delete an individual item. Uninstalling removes the app's data from the phone, subject to your device's own backups described above. On iPhone, the copy in your iCloud follows the records on the phone each time Expiry saves it; if the records on the phone become empty, Expiry keeps the last copy rather than replacing it with an empty one. That copy stays in your iCloud after you uninstall Expiry, until you delete it as described under Copy in your iCloud. There is no named Expiry account, but Big Helpers retains the installation/security identifiers, usage counters and operational logs described above. Older daily counter files are removed when the service is next used. Technical logs contain request time, feature, outcome, duration and token counts, rather than document or answer bodies; files older than the 14-day threshold are pruned on later log writes. These cleanup operations are not guaranteed timed erasure. Turning AI off or uninstalling does not itself erase server key records, hosting logs or third-party processor records. For a privacy or deletion request, use the contact below; do not send passwords, session tokens or recovery keys.

This website

This website (expiry.bighelpers.in) sets no cookies and runs no analytics, advertising or tracking scripts. It loads no fonts, scripts or images from other companies; everything, including the video, is served from Big Helpers' own server. Like any web server, it keeps an access log of each request: the time, your network address, the page or file requested and your browser's name. We use these logs only to run and secure the site, and they are archived with the server's other logs.

If you email us, we receive your email address, your message and anything you attach. We use them to answer you, provide support and keep necessary business records.

Your rights and grievances

Because your records live on your device, you can see, correct, export and delete them yourself in the app at any time. For anything Big Helpers holds about you, such as support emails or server logs, you can ask us to tell you what we hold, correct it or delete it, subject to the law. Write to admin@bighelpers.in with "Privacy" in the subject. This address is also the contact for grievances about how your personal data is handled, including under India's Digital Personal Data Protection Act, 2023. If you are not satisfied with our answer, you may have the right to complain to the Data Protection Board of India.

Children

Expiry is a general utility and is not directed to children.

Changes

If a future version adds sign-in, sync or any other feature that sends information off your device, we will update this policy before that version is released. The effective date above shows the current version.

Questions

For privacy questions or requests, email admin@bighelpers.in.