Doorstop
Doorstop privacy policy
Last updated 8 September 2026.
Doorstop is a ledger for a landlord with a handful of units, ending in a clean Schedule E. This policy explains what is kept, where it sits, and who can reach it.
Documents you photograph are sent to Anthropic to be read
This is the part you are least likely to assume, so it is here rather than at the bottom. When you photograph a lease, an invoice or a receipt, the image is sent to a large language model run by Anthropic, which reads it and returns the figures. The whole document goes, including anything on it you were not thinking about, such as a tenant's name or a signature.
Nothing is sent unless you photograph something. Figures you type in yourself stay on our database.
You are entering other people's information
A lease is about a tenant. When you record one you are storing another person's name, their tenancy dates and what they pay, and they did not install this app or read this page.
That information is yours to hold as their landlord, and we treat it as your record rather than theirs: we will not contact them, we do not build any profile of them, and they have no account here. Whatever obligations you have to your tenants about their data are yours, and this app does not discharge them.
What is stored
- Your email address, and whether your subscription is active.
- Your units, and the leases against them, including tenant details you choose to enter and the rent and dates.
- Every transaction you record: amount, date, category and your own notes.
- Documents you photograph, and the structured figures extracted from them.
What is not stored
No password, because there is not one. Signing in is by a code sent to your email address. No bank connection, no card details, and no credit or background check data on anybody.
Who can see it
You, and nobody else using the app. Every table checks the signed in account against the owner of the row before returning anything. There is no tenant view, no co-owner account and no sharing feature. We do not sell any of it and we do not send it to advertisers.
Who else is involved
- Anthropic receives documents you photograph, as above.
- Supabase hosts the database and sends the sign in codes.
- RevenueCat sits between the app and the app store and tracks whether your subscription is active. It receives the purchase events and an identifier for your account.
- Apple handles the payment itself. Card details go to Apple and never to us.
Deleting it
Deleting your account removes your profile, every unit, lease, transaction and document, immediately and unrecoverably. Export anything you need for a tax year before you delete, because we cannot recover it afterwards.
Contact
Doorstop is published by Jeffrey L Carrier.