Privacy Policy

Last updated: November 2026

1. We do not store your documents

Photos of receipts, business cards or ledgers may be processed on your device. When AI extraction is used, and only after you give explicit permission in the app (you can withdraw it in Settings at any time), the image or its extracted text is sent over an encrypted connection to our server. Our server forwards it to our AI provider, Anthropic, to extract structured fields, and returns the result to your device. We do not save your images, extracted text or parsed results in our database, and we do not write them to our logs. The extracted rows are written only to the Google Sheet you choose, and optional copies of the image only to your own Google Drive.

2. Google user data and Limited Use

SnapSheet requests only the https://www.googleapis.com/auth/drive.file scope and accesses only the files you create or select in the app. Google access tokens are stored only on your device; our servers never receive them. SnapSheet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising and we do not sell it.

3. Service providers

To operate the service we use: Anthropic (Claude API) for AI extraction. Under Anthropic's published commercial terms, API inputs and outputs are not used to train its models by default and are deleted from its systems within a retention period (currently stated as up to 30 days), which may be longer where required to enforce usage policies or comply with law. Our own servers do not retain this data. Vercel (hosting) and Upstash (usage counters and session data). RevenueCat, Apple and Google (purchases and subscriptions). Apple and Google (sign-in).

4. What we store

Only: an account identifier derived from your Apple or Google sign-in, your email address (if provided), your subscription status, and usage counts used to apply plan limits and prevent abuse. We do not sell personal information or use it for advertising.

5. Your Google Sheet and Drive

Rows, edit history (a "SnapSheet History" tab) and deleted rows (a "SnapSheet Archive" tab) live in your own Google Sheet, under your control. Nothing in them is sent to our servers except when you scan a document as described above.

6. Security

Data is encrypted in transit (TLS). Session tokens are kept in the device's secure storage. Access to our servers and secrets is restricted.

7. Retention and deletion

You can delete your account in the app (Settings, then Delete account). We then delete your account record, sessions and counters. You can also revoke SnapSheet's access in your Google Account settings at any time. Data already written to your own Google Sheets or Drive remains under your control.

8. Your rights

Depending on where you live (for example the EEA, the UK or California), you may have the right to access, correct, delete or port your personal information, or to object to certain processing. Contact [PRIVACY EMAIL].

9. Children

SnapSheet is not directed to children under 13 (or the higher age required in your region).

10. Changes

We will post updates on this page and change the date above.