Your receipts stay on your phone. To read one into your columns, its text and a smaller copy of the photo are sent to be processed and then thrown away. No merchant, no amount and no image is ever stored on our servers.
This policy explains it properly. It covers the Sheetsnap iOS app and this website. Sheetsnap is made by Asieuzzaman Wasir (“we”, “us”), who is the data controller and can be reached at the address in section 9.
1. What stays on your device
These never leave your phone, and we have no copy of them:
- Your receipt photographs and their thumbnails.
- Everything read from a receipt — merchant, date, amount, category, and every other column you defined.
- Your schemas — the column names, types and hints you wrote.
- Your exported files, until you choose to share them somewhere.
They live in the app's own storage on the device, protected by iOS file encryption. They are not in iCloud and they are not backed up to us. If you delete the app, they are gone.
2. What is sent, and for how long it exists
Reading a receipt
When you ask Sheetsnap to read a receipt for you, two things are sent to our server: the text our on-device scanner recognised, and a downscaled copy of the photograph (at most 1400 pixels on the long edge). The second is only sent when the text alone was not good enough.
Our server passes them to our AI provider, gets the values back, returns them to your phone, and discards both. They are not written to our database, because there is no column in our database that could hold them.
What we keep about that
One row per receipt read, holding numbers about the work and never the work itself. In full:
| Kept | Why |
|---|---|
| Your account ID, and a timestamp | To count your monthly allowance |
Whether it succeeded, and a short failure code such as decode_failed | To find and fix faults. Never a message from the model, which could quote your receipt |
| How long it took, in milliseconds | To keep the app fast |
| How many columns you asked for, and how many came back uncertain | To tell whether the app is getting better or worse |
| Which models ran, how many tokens each used, and the estimated cost | To know whether the service pays for itself |
| Scan quality measurements: the scanner's mean confidence, and character and line counts | To decide which receipts need the more expensive model |
| The identifier your device gave that receipt | So a retry of the same receipt is not counted twice |
That identifier is a random number generated on your phone. It is not derived from the receipt and it means nothing without your device.
Your account
Signing in creates one row holding an account ID, the opaque identifier Apple gives us, when it was created, and which plan you are on. There is no column for your name and none for your email address — Sheetsnap asks Apple for neither when you sign in, so we never receive them.
Your subscription
If you buy a plan, Apple handles the payment. We never see your card, your billing address or your Apple ID. Our subscription provider tells us which plan is active so the app can lift your limits, and our server asks it directly rather than trusting the app.
3. When an account is needed, and when it is not
You are asked to sign in at exactly one moment: the first time a receipt would be sent to us to be read. Everything else works signed out — photographing receipts, on-device text recognition, typing values in, your columns, the library, search, filters, and all three export formats.
Sign in with Apple is the only way to create an account. There is no password, because we never have one.
4. Who else is involved
| Who | What they do | What they see |
|---|---|---|
| Apple | Sign in with Apple, the App Store, and subscription billing | Your Apple account and your payment details. We see none of it |
| Supabase | Hosts our database and the server code that reads receipts | The account rows and usage numbers in section 2 |
| Anthropic | The AI models that read a receipt | The receipt text and downscaled image, for the seconds it takes to answer. Processed under commercial API terms that do not permit using it to train models |
| RevenueCat | Tracks which subscription is active | Your account ID and your purchase history |
That is the complete list. There is no analytics service, no crash reporting service, no advertising network and no data broker in this version of Sheetsnap. Nothing on this website tracks you either — no cookies, no scripts, no fonts loaded from anywhere else.
5. What we never do
- We do not sell your data, and we do not share it for advertising. There is nothing here to sell.
- We do not track you across other apps or websites. The app does not ask for tracking permission because it has nothing to ask for.
- We do not read your receipts. Nobody working on Sheetsnap can look up what you bought, because it is not stored anywhere we can reach.
- We do not use your receipts to train AI models.
- We do not access anything else on your phone. The camera is used when you tap the camera button; the photo library is read only for the images you pick. Nothing else in your library is touched.
6. How long we keep things
- Receipt text and images: the seconds it takes to answer. Never stored.
- Usage counters: for the monthly period they belong to, and kept afterwards as a history of what you used.
- Extraction records (the numbers in section 2): retained while your account exists.
- Your account: until you delete it.
7. Deleting everything
In the app: Settings › Delete account. Two taps.
It deletes your account row, your usage counters and your extraction records from our servers outright — not marked hidden, deleted — and then wipes every receipt, photograph and schema from the device in the same step. Nothing is archived and there is nothing to restore. If the server step fails your account is left untouched so you can try again, rather than half-deleted.
Deleting the app without deleting the account removes everything on the device but leaves the account row. Sign in again on any device to delete it, or write to us at the address in section 9 and we will do it.
8. Your rights
Depending on where you live, you have the right to ask what we hold about you, to get a copy, to correct it, to have it deleted, to restrict or object to how it is used, and to complain to your data protection regulator.
Two of those are already buttons: deletion is Settings › Delete account, and the only meaningful thing we hold about you is your usage, which the app shows you in Settings › Plan. For anything else, write to us.
Our legal basis for the small amount we do hold is performing the contract you entered into when you started using the app — the monthly allowance cannot be counted without counting it — and our legitimate interest in keeping the service working and affordable.
9. Contact
Write to appsupport.get@gmail.com. A person reads it. See the support page for what to include.
10. Children
Sheetsnap is a tool for bookkeeping and is not directed at children. We do not knowingly collect anything from anyone under 13, and there is nothing in the app that would identify a user's age.
11. International transfers
Our servers and our providers operate in the United States and the European Union. Where data is transferred out of the UK or the EEA, it is done under the standard contractual clauses those providers offer.
12. Changes
If this policy changes in a way that matters — a new provider, a new kind of data, a change to what is retained — the date at the top changes and the app's release notes say so. Material changes will not be applied retroactively to data already collected.