About Radish

Radish makes grocery totals explainable.

Radish is an iPhone app that turns reviewed grocery receipts into item- and category-level spending views without connecting a bank account. It is built around human review, explicit data choices, and a publicly inspectable privacy core.

Last updated: August 15, 2026.

See how receipt review works Inspect Radish Core

The problem

A bank shows the store total. Radish shows what was inside.

A grocery transaction can tell you where money went without explaining which products made up the purchase. Radish starts from the receipt, proposes line items, and asks a person to review the store, date, total, names, prices, categories, and essential-or-optional choices before saving.

Confirmed receipts become monthly item and category views. This is a record of the groceries a household chose to include, not a forecast, financial account overview, or promise to spend less.

Three product principles

Explain the total

Show reviewed items and categories, not only a merchant-level transaction.

Keep people in control

Recognition creates a draft. The household corrects it and decides what essential or optional means.

State privacy boundaries

No bank login, no ads, no selling grocery data—and clear disclosure when optional processing or Apple sync is used.

Public proof

The privacy and household-sync core is inspectable.

Radish Core is a public Swift package released under the Apache License 2.0. Its source and tests cover the narrow boundary used to seal saved record bytes, authenticate household sync bundles, preserve corrections and deletion tombstones, and validate versioned QR pairing payloads.

The repository has no network client. That makes its behavior reviewable without pretending it controls receipt processing, surrounding app code, cloud configuration, or provider operations.

Public package
Radish Core
License
Apache-2.0
Current release
0.2.0

What the public core does—and does not—establish

It makes these behaviors reviewable

  • Sealing bytes explicitly passed into the core with AES-256-GCM.
  • Authenticating and validating bounded sync bundles before state changes.
  • Preventing stale devices from restoring records covered by deletion tombstones.
  • Rejecting expired QR pairing payloads and invalid secret lengths.

It does not establish these claims

  • That the complete private iPhone app has no bugs.
  • That an App Store binary is byte-for-byte identical to a public tag.
  • That receipt capture, extraction quality, cloud transport, subscriptions, or analytics behavior is open source.
  • That a processing provider has zero operational retention.

Receipt scanning is a separate disclosed path. After explicit permission, up to four selected photos can pass through Radish’s Cloudflare-hosted service to OpenAI to create an editable draft. The Privacy Policy describes that path and its retention boundaries; manual entry remains available.

Accountability

Public policies, support, and private security reporting

Radish publishes canonical pages for privacy, terms of use, subscription terms, and product support.

Security reports should not include real receipt images, grocery histories, credentials, household sync secrets, or data that belongs to another person.

About Radish FAQ

Direct answers about the product, its data source, and the limits of its public source.

What is Radish?

Radish is an iPhone app that turns reviewed grocery receipts into item- and category-level spending views. It reads receipts rather than connecting to a bank account.

Who publishes Radish?

Radish: Grocery Receipts is published on the App Store by CitrusGate LLC.

Why does Radish use receipts instead of a bank feed?

A bank transaction usually shows a merchant and total. A reviewed receipt can show the products, prices, categories, and household choices behind that total.

Is the entire Radish app open source?

No. Radish Core is the public Apache-2.0 privacy and household-sync layer. The app UI, receipt capture and processing, cloud transport configuration, subscriptions, and App Store binary are outside that repository.

What can the public privacy core verify?

The published code and tests show how bytes passed into the core are sealed, how sync bundles are authenticated, how deletion tombstones block stale restoration, and how QR pairing payloads are validated. They do not prove every behavior outside that boundary.

Does Radish send receipt photos to a processing service?

Only after explicit permission, Radish can send up to four selected receipt photos through its Cloudflare-hosted service to OpenAI to create an editable draft. Manual entry remains available.

How can I contact Radish?

For product support, email hello@radish.money. For privacy questions, email privacy@radish.money. Suspected vulnerabilities should be reported privately to security@radish.money or through the public repository’s private vulnerability reporting flow.

Radish for iPhone

Start with a receipt. Keep the final choices yours.

Free to download. Review and save one receipt before choosing a monthly or yearly plan for continued use. Requires iOS 18 or later. Optimized for English-language US grocery receipts and USD totals. Manual entry remains available.

Get Radish for iPhone See the spending view