Privacy Policy

Data The Sheet collects

The Sheet stores the product data needed to run shared sheets and Friends: profile display names, profile capability records, optional avatar thumbnails, optional birthday fields, sheet titles, member labels, expenses, settlements, splits, categories, dates, notes, balances, invitations, share tokens, notification state, and sync state.

If you use Sign in with Apple, The Sheet stores a hash of the Apple account identifier so the profile can be recovered. If you share an Apple email address, The Sheet may use that verified email for discoverability as described below. The raw Apple ID is not stored.

If you add payment methods, The Sheet stores the user-entered Apple Cash, Venmo, or Zelle handle and a lookup hash so active co-participants can settle up. The Sheet is not a payment processor and does not send payments.

Receipt photos and AI parsing

If you scan or upload a receipt, the receipt image is sent to The Sheet servers and then to OpenAI to extract receipt details such as merchant, date, items, tax, tip, totals, currency, and payment tender labels. The parsed receipt data and parser diagnostics are stored with the related sheet or Friend tab so you can review, edit, split, and confirm the transaction.

Receipt image uploads may be temporarily stored in Cloudflare R2 while parsing is in progress. The Sheet deletes those temporary upload objects after parsing when possible, and abandoned pending uploads are intended to expire under storage lifecycle rules.

Contacts and discoverability

Contact discovery is optional. If you tap a Find friends or contact-matching action, iOS asks for Contacts permission first. The app may read contact names locally to show the result on your device, but The Sheet sends only normalized contact email addresses for matching. Contact names, address-book identifiers, contact photos, notes, addresses, birthdays, and Messages metadata are not sent to the backend.

Raw uploaded contact email addresses are processed in request memory so the server can compute lookup HMACs and return opted-in matches. They are not written to Postgres, logs, analytics, traces, queues, crash reports, or long-lived caches.

Other users can find your profile through contact discovery only if you have a verified email handle and discoverability is turned on. Discovery handles are stored as server-side lookup HMACs plus masked labels, such as a hidden email address preview. You can turn off or delete discoverability handles from the app.

Service providers and sharing

The Sheet shares data with service providers only to operate the app. Current providers include hosting, database, object storage, rate-limiting, and AI receipt parsing providers, including Cloudflare and OpenAI. Apple provides Sign in with Apple. These providers are expected to protect user data consistently with this policy and their own service terms.

The Sheet does not sell user data and does not use third-party advertising or tracking SDKs. The Sheet does not scrape Messages, infer group chat membership, auto-send invitations, or use Contacts data to build a contact database for sale or distribution.

Retention and deletion

Shared sheet, Friends, Tabs, receipt, and profile data are retained while needed to provide the app and keep shared balances accurate. Deleting an account removes profile/auth identity, payment methods, friends, and discoverability settings from active storage. The ledger profile is retained as a claimable placeholder so shared balances and receipt history remain accurate; existing sheet entries may keep sheet-local display labels so the remaining participants can preserve the accounting record.

Deleting a sheet removes that sheet and its related expenses, settlements, receipt scans, and share tokens from active storage. Backup retention follows normal infrastructure backup practices.

Your choices

• You can use The Sheet without granting Contacts permission.
• You can revoke Contacts access in iOS Settings.
• You can turn off or delete discoverability handles in the app.
• You can add, edit, disable, or delete payment methods in Settings.
• You can avoid receipt AI parsing by not uploading receipt photos.
• You can delete your account from Settings.

Data The Sheet does not store

• Raw Apple IDs
• Contact names or address-book identifiers on the backend
• Messages recipients, thread IDs, or group-chat membership
• Background contact sync data
• Contact phone numbers for current discovery matching
• Payment credentials or completed payment transactions

Contact

For beta builds, contact the developer through the TestFlight feedback address listed for The Sheet. For App Store builds, use the support contact listed on the App Store product page.