Privacy Policy

1. Summary

SnapSheet turns photos of receipts into rows in a Google Sheet that you choose. We keep as little about you as we can: no name, no email address, no receipt images. The sections below explain what is processed, where, and for how long.

2. We do not store your documents

Photos of receipts may be processed on your device. When AI extraction is used, and only after you give explicit permission in the app (you can withdraw it in Settings at any time), the image or its extracted text is sent over an encrypted connection to our server. Our server forwards it to our AI provider, Anthropic, to extract structured fields, and returns the result to your device. We do not save your images or extracted text, and we do not write images, extracted text or results to our logs.

One exception, for reliability: so that a scan whose answer is lost on a weak connection can be sent again without being charged twice, the extracted result (the field values, not the image) is kept in temporary storage for up to 10 minutes and is then deleted automatically. The extracted rows are written only to the Google Sheet you choose, and optional copies of the image only to your own Google Drive.

3. Google user data and Limited Use

SnapSheet requests only the https://www.googleapis.com/auth/drive.file scope and accesses only the files you create or select in the app. Google access tokens are stored only on your device; our servers never receive them. SnapSheet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models.

4. Service providers

To operate the service we use: Anthropic (Claude API) for AI extraction. Under Anthropic's published commercial terms, API inputs and outputs are not used to train its models by default and are deleted from its systems within a retention period (currently stated as up to 30 days), which may be longer where required to enforce usage policies or comply with law. Vercel (hosting) and Upstash (usage counters, session records and the temporary storage described above). RevenueCat, Apple and Google (purchases and subscriptions). Apple and Google (sign-in). These providers process data on our behalf under their own terms and security practices, which we do not control.

5. What the AI receives

With each scan the app sends the photo (or the text read from it), the column names of your sheet, your category names if you use them, and the app language, so the AI can match the fields. Nothing else from your phone or your Google account is sent.

6. Exchange rates

When you convert an amount to your currency, the app asks our server for that day's rates. Our server gets them from a public rate service (fawazahmed0 exchange-api, through jsDelivr or Cloudflare), sending only the currency code and the date. Your phone does not contact that service, and we do not keep these requests.

7. What we store

Only: an account identifier derived from your Apple or Google sign-in (a one-way hash, not your Apple or Google ID itself), your plan and subscription status, usage counts used to apply plan limits and prevent abuse, your time zone (so daily limits reset at your local midnight), and sign-in session records (stored as one-way hashes). We do not store your name or email address. We do not sell or share personal information for money or for cross-context behavioral advertising, and we do not use it for advertising.

8. Anonymous usage statistics

The app sends daily counts of actions, such as how many scans were made, how many people reached the plan screen, and the optional answer to "What do you mostly use SnapSheet for?". Each count carries only the event name, the platform (iOS or Android), the day the app was first opened, and the country derived from the connection. No account identifier, device identifier, receipt content or amount is sent, and the IP address is not stored. You can turn this off in Settings, then Privacy.

9. Your Google Sheet and Drive

Rows, edit history (a "SnapSheet History" tab) and deleted rows (a "SnapSheet Archive" tab) live in your own Google Sheet, under your control. Nothing in them is sent to our servers except when you scan a document as described above. You are responsible for keeping your own copies of your sheets and receipts.

10. Security

Data is encrypted in transit (TLS). Session tokens are kept in the device's secure storage. Access to our servers and secrets is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident that affects your information, we will notify you as required by law.

11. Retention and deletion

You can delete your account in the app (Settings, then Delete account). We then delete your account record and sessions. A usage counter (a hashed identifier and a number of scans, no receipt content) is kept only until the current day or month ends, to prevent abuse of the free limits. A security marker (the same hashed identifier and a single number) is kept for up to 31 days so that sign-in sessions from before the deletion can no longer be used; it is then removed automatically. Deleting your account does not cancel a subscription; cancel it in your Apple or Google account settings. You can also revoke SnapSheet's access in your Google Account settings at any time. Data already written to your own Google Sheets or Drive remains under your control.

12. Where data is processed

We are based in the United States, and our servers and providers process data in the United States and possibly other countries. By using the service you understand that your information may be processed outside your country, where data protection laws may differ.

13. Business transfers and discontinuation

If we are involved in a merger, acquisition, sale of assets, financing or reorganization, the limited information we hold may be transferred as part of that transaction, subject to this policy. If we discontinue the service, we will delete the information on our servers within a reasonable time, except where we must keep it to comply with law.

14. Your rights

Depending on where you live (for example California, Texas or other US states, the EEA or the UK), you may have the right to access, correct, delete or port your personal information, to opt out of certain processing, or to appeal a decision about your request. Because we keep very little, most requests can be met by deleting your account in the app. You can also contact support@snapsheet.one; we may need to verify your request. We will not discriminate against you for exercising these rights.

15. Do Not Track

The service does not track you across other websites or apps, so it does not respond differently to Do Not Track signals.

16. Children

SnapSheet is not directed to children under 13 (or the higher age required in your region), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

17. Changes

We may update this policy. We will post the new version on this page and change the date above. If a change materially affects how we handle your information, we will also give notice in the app or on this website before it takes effect. Continued use after the effective date means you accept the updated policy. If a translation of this policy differs from the English version, the English version governs.

18. Contact

David's Dream LLC, 3115 Lillian Miller Pkwy, Ste 103-274, Denton, TX 76210, USA, support@snapsheet.one