## PRIVACY POLICY
Last updated: May 21, 2026
The Mobile-First Company (operated by Dynamiq Data Ltd., together "we", "us", "our") builds and operates **Scan to Sheets** (the "Service" or "app"). This Privacy Policy explains what information we collect when
you use the app, how we use it, who we share it with, and the rights you have over it.
By using Scan to Sheets, you agree to the practices described below. If you don't agree, please don't use the app.
### Who we are
Scan to Sheets is published by The Mobile-First Company. The legal entity responsible for the app is Dynamiq Data Ltd. If you need to reach us about anything in this policy, email **support@themobilefirst.co**.
### Information we collect
We try to collect as little as possible, and only what we need to make the app work.
- **Account information.** When you sign in (e.g. with Google or Apple), we receive your name, email, and a user identifier from the sign-in provider.
- **App preferences and settings.** Things like which spreadsheet you've connected, your column mapping, scanner preferences, and similar in-app configuration.
- **Scanned data.** Barcode values, text, and any fields you scan or type into the app so they can be written to your chosen Google Sheet.
- **Diagnostic and log data.** When the app crashes or hits an error, we collect technical information such as device model, OS version, app version, app configuration at the time, IP address, and a timestamp.
This is handled by **Sentry**.
- **Usage analytics.** Aggregate information about which screens you use and which features you interact with, so we can improve the product.
- **Support messages.** If you contact support from inside the app, we receive the message and any context you choose to share.
### Use of Google APIs and OAuth scopes
Scan to Sheets connects to your Google account so it can write your scans into a Google Sheet you choose. We use the following Google APIs:
- **Google Sheets API** — to read the structure of and write rows to the spreadsheet you select.
- **Google Drive Picker (Google Picker API)** — to let you pick which spreadsheet to connect, without giving the app access to the rest of your Drive.
- **Google Sign-In / OpenID Connect** — to authenticate you.
When you connect Google, we request the following OAuth scopes:
- `https://www.googleapis.com/auth/spreadsheets` — to read and write the spreadsheets you connect to the app, so we can append your scanned rows and read header rows for column mapping.
- `https://www.googleapis.com/auth/drive.file` — to access only the specific files you open or create through the app (for example, a sheet you pick via Google Picker, or a sheet the app creates for you). The
app does not see the rest of your Drive.
- `https://www.googleapis.com/auth/userinfo.email` — to identify your account by email address, so we can associate your settings and subscription with you.
- `openid` — to complete Google's OpenID Connect sign-in flow.
We only request the minimum scopes needed to deliver the features above. You can revoke the app's access to your Google account at any time from your [Google Account permissions
page](https://myaccount.google.com/permissions).
### Google API Services User Data Policy — Limited Use
**Scan to Sheets' use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data
Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.**
In plain language, this means:
- We use Google user data **only** to provide and improve the user-facing features of Scan to Sheets — i.e. writing your scans into your chosen sheet.
- We do **not** use Google user data to serve advertising of any kind.
- We do **not** sell Google user data, and we do **not** transfer it to data brokers, ad networks, or information resellers.
- We do **not** use Google user data to train generalized or third-party AI / ML models.
- We do **not** allow humans to read your Google user data, except: (a) with your explicit consent (for example, to debug a support issue you've reported), (b) where required for security reasons such as
investigating abuse, or (c) where required by law.
### How your Google data flows
- **Accessed.** Only the Google Sheet files you explicitly pick through Google Picker (or that the app creates for you at your request), the metadata needed to display them (file name, ID), and the cell values
needed to read/write the rows you scan.
- **Transferred.** Data flows from your device to the Google Sheets API. For some features, requests are routed through our backend proxy hosted on Google Cloud Run, which forwards the call to Google's APIs. The
proxy does not persist your sheet content.
- **Used.** Only to write your scanned rows into the sheet you chose, and to read the structure of that sheet (e.g. headers) so the app knows where to put each value.
- **Stored.** We do **not** store the contents of your Google Sheets on our servers. OAuth tokens are stored securely so you don't have to sign in on every launch.
- **Shared.** We do **not** share your Google user data with any third party, other than the infrastructure providers that host the app (e.g. Google Cloud) and only to the extent strictly necessary to deliver
the Service.
### Third-party services we use
We rely on a small number of well-known providers to operate the app. Each has its own privacy policy.
- **Firebase (Google)** — analytics, crash reporting, and remote configuration.
- **Sentry** — error and crash diagnostics.
- **Amplitude** — product analytics.
- **Customer.io** — lifecycle messaging and in-app messaging.
- **Intercom-style in-app messaging** — for support conversations within the app.
- **RevenueCat** — subscription management.
- **Apple App Store and Google Play billing** — to process subscription payments. We never see your card details.
- **Google Cloud (Cloud Run, Firebase Hosting)** — to host the backend services that support the app.
These providers only process information as needed to provide their service to us, and only to the extent permitted by their own terms.
### Data retention and deletion
We keep your information only as long as we need it to provide the Service or to meet legal obligations.
- Account and settings data is kept while your account is active.
- OAuth tokens are kept until you disconnect Google in the app, revoke access in your Google Account, or delete your account.
- Diagnostic and log data is kept for a limited retention window (typically up to 90 days) and then deleted or anonymized.
You can request deletion of your data at any time by emailing **support@themobilefirst.co** from the email address associated with your account. We'll delete your personal data and any associated Google user
data we hold within a reasonable period, except where we're legally required to retain it. You can also revoke the app's access to your Google account at any time from your [Google Account permissions
page](https://myaccount.google.com/permissions).
### Security
We use commercially reasonable technical and organizational measures to protect the information we process — including encryption in transit (TLS), restricted access to production systems, and secure storage of
credentials. No method of transmission or storage is 100% secure, however, so we can't guarantee absolute security.
### Cookies and device identifiers
Scan to Sheets is a mobile app and does not use browser cookies. Some third-party SDKs we use may set device identifiers or similar local identifiers to support analytics, crash reporting, and subscription
management.
### Children's privacy
Scan to Sheets is not directed to, or intended for, children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you
believe a child has provided us with personal information, please contact us and we will delete it.
### International users
The app is operated from Israel and uses cloud infrastructure that may process data in other regions. By using the app, you understand that your information may be transferred to and processed in countries other
than the one you live in.
### Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date at the top, and for material changes we'll provide additional notice (for example, in the app). Continued use
of the app after an update means you accept the revised policy.
### Contact us
Questions, requests, or concerns about this Privacy Policy or your data? Email us at **support@themobilefirst.co**.