How it works

Your establishment date

An expense can only be reimbursed from an HSA that already existed when the care happened. That is why HSA Proof asks for the date your account was established before it asks for anything else, and why it stores the date alongside every expense you record.

If an expense predates the account, HSA Proof marks it Likely not qualified and says why. It does not delete it. You keep the record, and the reason travels with it.

HSA Proof is recordkeeping software. It never holds or moves HSA funds, and it does not have access to your custodian.

The ledger and partial reimbursement

The ledger only appends. Recording a reimbursement adds a line; it never edits or removes the expense underneath. A single expense can be reimbursed in several pieces over several years, and each piece keeps its own date and amount.

Sound Dental · 27 Feb 2026$1,240.00

Reimbursed 3 Apr 2026−$600.00

Reimbursed 19 Sep 2026−$240.00

Remaining$400.00

Recording a reimbursement here is your own log; it does not move money. Keep the custodian's distribution record with this expense.

Eligibility states and rule versions

Eligibility is never a bare yes. Every assessment names the category rule it matched and the version of the rule set that was current when it ran, so an expense recorded in 2026 can still be read in 2046.

Likely qualified The category rule matched Publication 502.

Needs review The answer depends on your circumstances.

Likely not qualified The rule excludes this category.

Rule set v2026.08 · Reviewed against IRS Publication 502 (2025)

These states are not a tax determination. HSA Proof does not decide what the IRS will accept; it records what you have and when you had it.

The export package

Export produces one zip file you can open on any computer. PDFs are stored byte for byte. Photos and scans are saved as re-encoded JPEGs at capture, and the hash is taken of that saved copy, so the hash file lets anyone confirm it has not changed since.

hsaproof-export-v1.zip
├── manifest.json          schema, app version, rule version, export date
├── expenses.csv           one row per expense, amounts as decimal strings
├── reimbursements.csv     one row per reimbursement line
├── documents/
│   ├── 2026-02-27-sound-dental.pdf
│   ├── 2026-03-04-bartell-drugs.jpg
│   └── 2026-03-12-overlake-clinic.jpg
└── integrity.sha256       SHA-256 of every file above

This is also the answer to what happens if you leave Apple. The archive is a documented, versioned format holding your originals and a plain CSV ledger, so the records move to whatever you use next.

Sync and local-only mode

Off: records stay only on this iPhone, and in your device backup. On: they also sync to your private iCloud database, which counts against your iCloud storage and is readable by Apple. With Advanced Data Protection on for your Apple Account, the files and the details are end-to-end encrypted; the privacy policy lists the exceptions. Both modes are fully functional. Turning sync off keeps records on the phone; it does not remove copies already in iCloud, and Delete all my data does.

Either way, nothing is sent to Mount Si Labs. There is no account to create and no server that holds your records.

Deleting everything

Delete all data removes the expenses, the documents, and the ledger from this iPhone, and from your private iCloud database if sync is on. Export first if you want to keep the record. Deletion cannot be undone, because there is no copy anywhere else.