Privacy Policy - SheetFlow | Whatever Works Studio

1. Information We Collect

1.1 Receipt Photos

What we collect: Receipt photos taken by the user or selected from the photo library
Purpose: AI-powered receipt analysis and data extraction
Transmission and storage: Photos are sent through our server to the Google Gemini API so their contents can be extracted. After that, they are not kept on SheetFlow's servers. On the device, a photo is kept or not kept depending on the user's choice (default: not kept).

1.2 Google Account Information

What we collect: Name and email address provided through Google Sign-In
Purpose: User authentication and Google Sheets integration
Processing: Securely managed through Firebase Authentication

1.3 Google Sheets Data

What we collect: The name and ID of the spreadsheet the app created in the user's Google Drive, and the contents of that sheet
Purpose: Recording receipt data to that sheet
Processing: Accessed through the Google Drive API (drive.file) and the Google Sheets API. drive.file grants access only to files the app created — no other file in the user's Drive is visible to the app. The sheet ID is stored in Cloud Firestore so that the same sheet can be found on the user's other devices signed in to the same account.

1.4 Usage Statistics

What we collect: App usage events (e.g., number of receipt analyses, sheet recordings)
Purpose: Service quality improvement and usage pattern analysis
Processing: Collected through Firebase Analytics without directly identifying information such as name or email, together with a random per-device ID

2. Purpose of Use

Collected personal information is used only for the following purposes:

Receipt image analysis and data extraction
Recording receipt data to the Google Sheet the app created
User authentication and account management
App service delivery and quality improvement
Error analysis and stability enhancement

3. Receipt Photo Retention Policy

Receipt photos are sent through our server to the Google Gemini API so their contents can be extracted, and are not kept on SheetFlow's servers afterward.
On the device, photos are kept or not kept depending on the user's choice (default: not kept).
Users can delete photos kept on the device at any time within the app.
Data stored on the device is deleted when the app is uninstalled.

4. Third-Party Services

The App uses the following external services for the purposes described, and their respective privacy policies apply:

Service	Provider	Purpose	Data Provided
Google Sign-In	Google	User authentication	Name, email
Google Drive API	Google	Creating the app's sheet and accessing that sheet	Metadata of that file only (name, ID)
Google Sheets API	Google	Receipt data recording	Analyzed receipt data
Cloud Functions	Google	Server that forwards receipt images to the Gemini API (images are not stored)	Receipt images
Google Gemini API	Google	Receipt image analysis	Receipt images
Firebase Authentication / Cloud Firestore	Google	Authentication, storing the sheet ID, request-count records for abuse prevention	Account info, sheet ID, request counts keyed by account ID or IP address
Firebase App Check	Google	Verifying that requests come from the genuine app	App Check token
Firebase Analytics	Google	Usage statistics (see 1.4)	App usage events, a random per-device ID
Firebase Crashlytics	Google	App error collection	Crash logs, device information

External Service Privacy Policies:

Google Privacy Policy

5. Data Retention and Deletion

5.1 Local Data

All data stored on the device is automatically deleted when the app is uninstalled.

5.2 Cloud Data

No receipt photos are kept on SheetFlow's servers. Cloud Firestore holds only the sheet ID and request-count records; to have them deleted, please contact us.
To limit request rates and prevent abuse, the server keeps a request counter in Cloud Firestore keyed by the user's account ID or IP address.
Images transmitted through the Gemini API are processed according to Google's data processing policies after analysis.

5.3 Google Sheets Data

Data recorded to Google Sheets through the app belongs to the user's Google account and is managed directly by the user.

6. User Rights

Users have the following rights:

Data Access: You can view stored receipt data within the app
Data Deletion: You can delete receipt photos and related data within the app
Permission Revocation: You can change permissions for camera, photo library, etc. at any time in iOS Settings
Google Permission Revocation: You can revoke SheetFlow's access at any time in your Google Account settings

7. Contact Us

If you have any questions about privacy, please contact us:

Email: do@whateverworks.studio / whateverworksstudio@gmail.com
Developer: Whatever Works Studio

8. Google API Data Usage Disclosure

SheetFlow's use of Google APIs and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

SheetFlow uses Google Drive and Google Sheets data solely for the purpose of recording receipt data as requested by the user. We do not use this data for advertising or sell it to third parties.

Specifically:

drive.file permission: Used only to access spreadsheets the app itself newly created in the user's Drive. Other files in the user's Drive are never listed and cannot be accessed.
Data received from Google APIs is used only within the app for the above purposes and is not transferred externally or used for any other purpose.