Privacy policy
Effective 28 October 2026
Wrapsheet is an app for logging work days and estimating the fees owed under the Independent Production Agreement. Wrapsheet (“we”, “us”) is based in Ontario, Canada. This policy explains what the app collects, why, where it’s kept, and your choices.
In short: we keep what you put into Wrapsheet so the app can work and back it up. We don’t sell it, show you ads, or track you across other apps or websites. Only your account can read your records. You can delete everything at any time.
What we collect
What you give us
- Account: your email address, your password (stored only in scrambled, hashed form) and an optional username.
- Profile: your name, home city, whether you work as yourself or through a loan-out corporation, HST registration number and rate, ACTRA membership status, your agent’s percentage, the roles you work in, your contracted rates and display settings.
- Work records: your shows (name, province, rates, pay week, photography dates), the days you log (dates, times, meals, roles, notes), future work you add, and your cheques (numbers, dates and the amounts on the stub).
- Scans: photos of work reports and cheques you choose to scan, and messages you paste in to be read. A work report can show other people’s names; scan only reports you’re entitled to keep.
- Support emails you send us.
What the app records
- Scan counts: how many scans you’ve used each day and month, to apply the scan limits.
- Crash reports: when the app crashes or hits an error, a report of what went wrong: the error, the app version, your phone’s model and system version, and the app’s recent steps (screens and request addresses, without their contents). Crash reports don’t include your name, email address, IP address or your records.
What we don’t collect
No location, contacts, advertising identifiers or browsing history. No analytics or tracking. If you turn on Unlock with Face ID, your phone checks your face itself; we only learn whether it matched, never your face data.
Why we use it
- To run the app: estimate your fees, compare them with your cheques, and keep your records in step between your phone and our servers so they’re backed up.
- To read the work reports, cheques and messages you scan, and fill in the day for you.
- To send sign-in and password emails.
- To find and fix crashes and errors.
- To answer you when you contact us.
We use your information only for these purposes, with your consent, which you give by using the app. We never sell it, rent it or use it for advertising.
Where it’s kept, and who helps us
A copy of your records stays on your phone so the app works offline. The rest is handled by these service providers, each bound by its own terms to use the data only to provide its service to us:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Stores your account, records and scanned photos; handles sign-in | Canada (Central) |
| Anthropic | Reads the photos and messages you scan. It doesn’t use them for training and deletes them within 30 days | United States |
| Resend | Sends sign-in and password emails | United States |
| Sentry | Receives crash reports | United States |
| Cloudflare | Hosts this website and forwards email sent to support@wrapsheetapp.com | Worldwide network |
Information handled in the United States is subject to its laws, and authorities there may be able to access it. Apple and Google deliver the app to your phone under their own privacy policies.
Who can see it
Your records are tied to your account, and the database lets only your account read or change them. We don’t look at your records except to help you when you ask, to fix a problem, or when the law requires it. We would disclose information only if required by law, or to protect someone’s safety.
How long we keep it
- Your account and records: until you delete them, or your account.
- Backups: up to 7 days after a deletion.
- Scans at Anthropic: deleted within 30 days.
- Crash reports: deleted within 90 days.
- Support emails: as long as needed to help you, and deleted on request.
Your choices and rights
- See and correct: everything you entered is in the app, where you can edit it. Ask us for anything else we hold.
- Get a copy: use Days → Export CSV, or ask us.
- Delete: use Profile → Account → Delete account, or see Delete your account. Deleting is immediate and complete.
- Withdraw consent: stop using the app and delete your account. We’ll tell you if that means something can’t be provided.
We answer requests within 30 days. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec, the Commission d’accès à l’information.
Security
Information travels encrypted between the app and our providers, and is encrypted where they store it. You can lock the app with Face ID or your phone’s passcode. No system is perfectly secure; if a breach put your information at real risk, we would tell you and the Privacy Commissioner as the law requires.
Younger performers
Wrapsheet is meant for performers 18 and over, and for a parent or guardian keeping records for a younger performer. We don’t knowingly collect information directly from children under 13.
Changes
If we change this policy, we’ll post the new version here with a new date, and tell you in the app if the change is significant. Paid plans, when they come, will be sold through the App Store and Google Play; we’ll update this policy before then.
Contact
Wrapsheet’s privacy officer is responsible for personal information at Wrapsheet. Email support@wrapsheetapp.com.