Legal

Privacy Policy

Effective date: April 16, 2026

Sheaf is operated by Springbloom ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and share information when you use the Sheaf mobile application and related services (collectively, the "Service").

1. Information We Collect

Information you provide

Account information: When you sign in with Apple, we receive a unique user identifier and, if you choose to share it, your name and email address.
Profile preferences: Dietary preferences, household size, region, and any other information you enter in the app.
Swipe signals: Your ratings on dishes (liked, sometimes, pass) used to personalize your meal plan.
Feedback: Any feedback you submit on recipes or meal plans.

Information collected automatically

Usage data: Pages viewed, features used, taps, and session duration — collected via our analytics service (PostHog).
Crash reports: Stack traces and device state at the time of a crash — collected via our crash reporting service (Sentry). No personally identifiable information is attached to crash reports.
Device information: Device model, OS version, app version, and locale.

Information we do not collect

We do not collect payment card numbers, bank account details, government ID numbers, or precise GPS location.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Generate and personalize your weekly meal plans
Send you push notifications (only if you grant permission)
Understand how the app is used and fix bugs
Communicate with you about the Service (transactional messages only — no marketing without consent)
Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share data only as follows:

Recipient	Purpose	Data shared
Supabase	Database and authentication infrastructure	Account ID, preferences, signals
PostHog	Product analytics	Pseudonymous usage events
Sentry	Crash reporting	Anonymized crash traces
Apple	Sign in with Apple identity provider	Authentication token only
RevenueCat	Subscription management (future)	Purchase receipts, subscription status
OneSignal	Push notification delivery	Device push token

All third-party processors are contractually obligated to protect your data and use it only as directed by us.

We may disclose your information if required by law, court order, or to protect the safety of users or the public.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law.

Anonymized, aggregated analytics data may be retained indefinitely.

5. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Opt out of analytics tracking (contact us and we will configure a suppression flag)

To exercise any of these rights, email us at hello@hellosheaf.app. We will respond within 30 days.

California residents may have additional rights under CCPA. EEA/UK residents may have additional rights under GDPR. We will honor all applicable statutory rights.

6. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will promptly delete it.

7. Security

We use industry-standard practices to protect your data, including TLS in transit and encrypted storage at rest via Supabase. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Push Notifications

If you grant notification permission, we may send you reminders about your weekly meal plan. You can withdraw permission at any time in iOS Settings → Sheaf → Notifications.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before the change takes effect. The current version is always available at https://hellosheaf.app/privacy.

10. Contact Us

Email: hello@hellosheaf.app
Website: https://hellosheaf.app