Privacy Policy

Last updated: November 11, 2026

ScribbleSheet is engineered from the ground up with a strict local-first philosophy. Your notes, receipts and documents belong to you — this policy explains exactly what happens to your data when you use the app.

1. What stays on your device

All local content — scanned pages, parsed tables, chat history and exports — is stored exclusively inside the app's sandboxed directory on your own phone:

• AES-256 database encryption via SQLCipher protects every local record.
• Encryption keys are held in hardware-backed device keystores (Android Keystore / iOS Keychain), never inside the app or on a server.
• Deleting a sheet or the app deletes the data permanently. We hold no copies.

2. What is sent over the network

Reading handwriting requires an AI vision model, so an optimised processing payload is transmitted to a secure Vision LLM endpoint when you tap Extract table:

• Zero Data Retention (ZDR): our model providers operate under strict agreements — payloads are processed and not stored or used for training.
• Server-side key handling: API credentials are kept on the server only, never embedded in the app.
• SSL pinning: all connections enforce HTTPS/TLS with certificate pinning to prevent man-in-the-middle interception.

3. What we never do

• We do not collect, log or profile personal data.
• We do not serve advertising or third-party trackers.
• We do not sell or share your data with data brokers — ever.
• We do not require an account to use the free plan.

4. Permissions

• Camera — to photograph handwritten notes and receipts (used only while scanning).
• Files / storage — to import .pdf, .docx, .txt or .csv documents and to save exported .xlsx / .csv files where you choose.
• Biometrics — optionally, to lock the app with Face/Touch ID or fingerprint.

5. Corporate MDM & compliance mode

When an enterprise Mobile Device Management configuration is detected, ScribbleSheet automatically enforces stricter protections: mandatory biometric authentication on app resume, screenshot blocking (FLAG_SECURE), and hiding app previews in the task switcher — helping your organisation meet its own data-handling obligations.

6. Optional account & credits

The free plan provides 5 credits a month without an account. If you upgrade to Pro, we process the purchase through your platform's app store (Google Play / Apple App Store). Payment details are handled entirely by the store — ScribbleSheet never sees your payment card information.

7. Children

ScribbleSheet is a business productivity tool and is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to this policy

If we change this policy, the updated version will be posted on this page with a new "Last updated" date. Material changes will also be announced in the app.

9. Contact