App privacy

How the Admin Bestie app handles your data. Last updated 18 October 2026. The website and waitlist have their own notice.

The short version

• The app keeps what you put into it, so it can show it back to you and the people in your household.
• No adverts, no tracking across other apps or websites, and no analytics or advertising tools. Your data is never sold or shared for marketing.
• You can download everything the app holds about you, or delete your account, in Settings → Your data.

Who is responsible

Admin Bestie is made by Sam Heel, who is responsible for your data and acts as its privacy officer. To ask anything about it, email hello@adminbestie.app.

What the app keeps, and why

• Your account: your email address and name, and the ID Apple or Google gives the app when you sign in with them, so you can sign in and the people in your household see your name. If you choose Apple’s Hide My Email, the app only ever sees Apple’s relay address.
• What you enter: bills and payments, spending and budgets, an income figure if you add one, household members’ names and how bills are split, tasks, renewal dates (a passport’s expiry, say), gym workouts, planner entries and notes. Keeping these and working things out from them is what the app is for.
• Receipt photos, only if you allow it: the app asks before your first scan, and you can turn it off in Settings. The photo is sent to an AI model run by Cloudflare, which hosts the app, to read the shop, date, total and items. It is used once, not stored and not used for training; the items it read are saved.
• Calendar links, if you add one: stored encrypted, with a copy of the events so the app can show them quickly.
• Card spends from the optional iPhone Shortcut: the amount and shop name your Shortcut sends.
• Devices: a notification token for each phone or browser where you turn notifications on, and a record of each device you’re signed in on (its type and when it was last used), so notifications arrive and you can see and remove signed-in devices.
• Server logs: short-lived technical records of requests and errors, used only to keep the service running.

If you turn on the Face ID lock, your iPhone handles it entirely. The app is only told whether it worked; it never receives your face data.

Who can see it

• Your household: bills, shared expenses and the split are visible to the people in your household. Your spending pot, tasks, gym, planner and calendar are visible only to you.
• Service providers who process data on Sam Heel’s behalf: Cloudflare (hosting, the database, encrypted secrets and the receipt-reading model; data is stored in the United States), Apple (Sign in with Apple and iPhone notifications) and Google (Sign in with Google, if you use it).
• Whoever runs the app can see the list of accounts (names and email addresses) to manage invitations and keep the service working. They don’t browse your records.

Nothing is sold, rented or shared with anyone else, unless the law requires it.

How long it’s kept

Until you delete it or your account. Deleting your account removes your login and everything that is yours alone straight away; if you’re the only person in your household, its records go too. If you signed in with Apple, the app also asks Apple to disconnect it. Deleted data can remain in Cloudflare’s automatic database recovery copies for up to 30 days, then it’s gone.

Your rights

In the app: Settings → Your data → Download a copy, or Delete my account. You can edit anything you’ve entered. Notifications can be turned off in Settings or in iOS Settings.

Bermuda’s Personal Information Protection Act applies, and if you live in the UK or EU, UK and EU data protection law gives you the same rights: to see, correct or delete your information, and to object to how it’s used. To use any of them, email hello@adminbestie.app; you’ll get an answer within 30 days. You can also complain to the Privacy Commissioner for Bermuda or your own data protection authority, such as the ICO in the UK.

Security

Everything travels encrypted. Your sign-in is kept in your iPhone’s Keychain, and the server stores only a one-way fingerprint of it. Calendar links and keys to other services are stored encrypted. Every request is checked against your household.

Children

The app isn’t meant for children under 13 and doesn’t knowingly collect their information.

Changes

If this notice changes in a way that matters, the app will say so before the change applies.