PestSheet Privacy Policy

Draft, 2026-10-06, pending legal review. Describes the production app: optional account, cloud backup and sync, subscriptions, crash reporting and usage analytics. It must match the store privacy labels (docs/ficha-tiendas.md) and the iOS privacy manifest. Replace the bracketed fields and have a lawyer review it before publishing.

Effective date: [date of publication] Developer: [legal name], [address] · Contact: [contact email]

This policy explains what information the PestSheet app ("PestSheet", "we") handles, where it goes and the choices you have. PestSheet is a business tool for pest control professionals.

Summary

• You can use PestSheet without an account. Then everything you enter stays on your phone.
• If you create an account, we keep a backup of your records in the cloud so you can restore them and use them on more than one device.
• Subscriptions are paid through Apple or Google. We never see your card details.
• We do not show ads, do not track you across other companies' apps or websites, and do not sell or share personal information.
• You can delete your account and its cloud backup at any time, in the app or at https://pestsheet.app/delete-account.html.

What PestSheet stores

PestSheet stores the information you enter to record service visits:

• Your applicator profile: your name, license numbers, business name, business address, phone, email and business logo, and the names and license numbers of team members who apply products.
• Your clients and sites: names, service addresses, phone numbers, emails, notes, and bait or monitoring stations at each site.
• Service visits: dates and times, products applied (name, EPA registration number, amount, rate), target pests, areas treated, station checks, precautions, recommendations, photos, the client's signature, corrections to completed records, and a log of the reports you sent.
• Your own service templates and products.
• App settings such as language and reminders.

All of this is saved first in a database on your phone, so PestSheet works without a signal.

Using PestSheet without an account

If you tap Try without an account, all of the information above stays only on your device. Nothing you enter is sent to us. (Crash reports and usage analytics, described below, still apply; they never contain what you type.)

Your account (optional)

You can create an account with your email address (we send you a one-time sign-in code), with Sign in with Apple or with Sign in with Google. Accounts are kept on our own server (see "Cloud backup and sync"). We receive your email address and an account identifier from the method you choose. If you use Sign in with Apple and choose to hide your email, we receive an Apple relay address instead. We do not receive your Apple or Google password.

We use your email address only to sign you in, to send messages about your account (such as sign-in codes) and to answer you if you contact us. We do not send marketing email from the app. Sign-in code emails are sent through Resend (Resend, Inc., USA), which processes your email address and the content of the email to deliver it.

When you sign in, the app keeps a session token in your phone's secure storage (Keychain on iPhone, Keystore on Android). The session ends when you sign out or after 90 days without use. Our server records the IP address and device user agent of each sign-in only for security (for example, to detect misuse of an account); they are kept with that session and deleted at the latest when you delete your account.

Cloud backup and sync

When you are signed in, PestSheet copies the information listed in "What PestSheet stores" (except app settings) to our own server, operated by PestSheet and hosted by [VPS provider] in [country], where we keep the database and the files. This includes your profile and logo, team members, clients, sites and stations, visits, products, photos, signatures, corrections, templates and the report log. We use it only to back up your records, restore them on a new phone and keep your devices in sync.

The data is encrypted in transit (HTTPS). Each record is tied to your account, and the server only lets your account read or change its own records. Photos and signatures are kept in private storage under your account and can only be downloaded through short-lived signed links. If you are offline, changes wait on your phone and are backed up when you are online again.

Subscriptions

PestSheet offers a free plan and paid subscriptions (PestSheet Pro). Purchases are made through the Apple App Store or Google Play, under their terms and privacy policies. We never receive your card number or billing address.

We use RevenueCat (RevenueCat, Inc.) to check whether your subscription is active and to restore it on your other devices. When you are signed in, PestSheet identifies you to RevenueCat with your account identifier; otherwise RevenueCat uses a random identifier created by the app. RevenueCat receives from the store the purchase details it needs for this: the product, the purchase and renewal dates, the store transaction identifiers, and your country or currency, plus the platform and app version. It does not receive your name, your records or your email from us.

When information leaves your device for other people

Only when you choose. When you tap Send to client or export records, PestSheet creates a PDF or spreadsheet on your phone and opens your phone's share menu. The app you choose there (for example WhatsApp, Mail or Messages) handles the file under its own privacy policy.

Links such as View official label open the U.S. EPA website in your browser.

Features that work on your phone only

• Label scan: when you photograph a product label to find its EPA registration number, the text is read on your phone (Apple Vision on iPhone, Google ML Kit bundled in the app on Android). The photo is not sent anywhere for this.
• Product catalog: the list of EPA-registered products is included in the app; searching it does not send what you type.
• Reminders: if you turn on reminders, PestSheet asks to show notifications. Reminders are scheduled on your phone; we do not send push notifications.

Voice dictation

If you dictate notes, PestSheet asks for the microphone and speech recognition permissions and uses your phone's built-in speech recognizer (Apple on iPhone, Google on Android) to turn what you say into text. Apple or Google may process the audio on their servers under their own privacy policies. PestSheet does not record, keep or send the audio; only the resulting text is saved in your report.

Crash diagnostics

When PestSheet crashes or hits an unexpected error, it sends a diagnostic report to Sentry (Functional Software, Inc.), the service we use to find and fix bugs. A report contains the type of error and where in the app's code it happened, the app version, the device model, the operating system version, the language, and a random installation ID that is not linked to you or your account.

Before a report leaves your device, PestSheet removes anything that could identify you or your clients. Reports never include client names, addresses, phone numbers, emails, notes, photos, signatures or screenshots, and we configure Sentry not to store IP addresses. Reports are used only to fix problems in the app and are deleted after [90] days.

Usage analytics

To learn which steps of the app people complete (for example, creating a first client, completing a first visit or starting a trial), PestSheet records a short list of usage events and sends them to our own server. Our server does not store the IP address these events come from. Each event contains only:

• the event name, from a fixed list (such as "first visit completed", "report sent", "paywall shown", "purchase completed");
• a random installation ID created by the app. It is not your account ID and is not derived from it, and events are sent without your sign-in credentials, so they are not linked to you or your account;
• the platform (iOS or Android), the app version and the app language (English or Spanish);
• for a few events, one coarse detail from a fixed list: the two-letter U.S. state of the client or visit, the sign-in method (Apple, Google, email or guest), the subscription plan (monthly or annual), the export format, or whether a scanned EPA number was found in the catalog.

Events never include names, addresses, phone numbers, emails, notes, product names, photos, signatures, prices or anything you type. They are not used for advertising, not combined with data from other companies, and not sold or shared. If you are offline, events wait on your device and are sent later.

You can turn this off at any time in More > Share usage data; events not yet sent are deleted from your device. Because events are not linked to your account, deleting your account does not find or delete them; they contain nothing that identifies you and are deleted after [24] months.

Service providers

We use these companies to run PestSheet. They process data on our behalf, only to provide their service to us:

• [VPS provider] ([country]): hosts the server we operate for accounts, cloud backup and sync, files and usage analytics. The database and files are managed by PestSheet.
• RevenueCat (RevenueCat, Inc.): subscription status.
• Sentry (Functional Software, Inc.): crash reports.
• Resend (Resend, Inc., USA): delivery of sign-in code emails (your email address and the content of the email).
• Apple and Google: app distribution, payments, Sign in with Apple or Google if you choose them, and speech recognition when you dictate.

What we do not do

• No advertising and no ad tracking.
• No tracking across other companies' apps or websites.
• We do not sell or share personal information, and we do not use your records or your clients' information for any purpose other than providing PestSheet to you.

Camera and photos

PestSheet asks for access to the camera only to take service photos, scan labels and scan station codes. Photos you pick from your library are chosen through the system picker, so PestSheet only sees the photos you select. You can change these permissions at any time in your phone's settings.

Your clients' information

You decide what information you record about your clients and you are responsible for collecting and using it in line with the laws that apply to your business. When you use cloud backup, we store that information on your behalf and only to provide the service to you.

How long we keep information

• On your phone: until you delete it or uninstall PestSheet.
• Cloud backup: while your account exists. When you delete your account, your account and its backed-up records, photos and signatures are deleted right away from the live database and storage. Copies in our backups are overwritten within [number] days.
• Subscription records: RevenueCat, Apple and Google keep purchase records as their own policies and tax and accounting laws require. We can ask RevenueCat to delete the subscriber record linked to your account; ask us at [contact email].
• Sign-in sessions: until you sign out, or 90 days without use.
• Crash reports: [90] days. Usage analytics: [24] months.
• Messages you send us: as long as needed to answer you, and up to [number] months after.

Deleting your account and data

• In the app: More > Account & subscription > Delete account. This deletes your account and its cloud backup: your profile, team, clients, sites and stations, visits, products, photos, signatures and all other backed-up records.
• On the web: if you cannot use the app, request deletion at https://pestsheet.app/delete-account.html or write to [contact email] from the email address of your account. We confirm and complete the request within [30] days.
• Subscriptions are not cancelled by deleting your account. Cancel first in your App Store account settings (iPhone) or in Google Play > Payments & subscriptions (Android).
• Records on your phone: deleting your account does not erase the records saved on your phone; they stay until you delete them or uninstall PestSheet. Deleting a client, product or draft visit removes it from the phone (and from the backup, if you are signed in).

Completed visits are pesticide application records. Your state may require your business to keep them for 2 to 3 years, and keeping them is your business's responsibility: export them before deleting your account or uninstalling the app.

Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it and to have it deleted. You can see and correct your information in the app, export your records at any time, and delete your account as described above. For any other request, write to [contact email]. We will not treat you differently for using these rights.

Security

We use encryption in transit, per-account access rules on our server and private file storage, and we limit who can access production systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children

PestSheet is a business tool for adults and is not directed to children under 13. We do not knowingly collect information from children.

Changes

If this policy changes, we will update the effective date and, for significant changes, notify you in the app before they apply.

Contact

[legal name], [address]. Email: [contact email]