Privacy Policy

Last updated October 19, 2026

Dot Decimal has no account, and it sends no analytics, telemetry or crash reports. It contains no third-party code. Most of what you write never leaves your device. This policy explains the parts that do, and why.

Your sheets

Sheets are saved on your device. If you turn on iCloud sync in Settings, they are also stored in Dot Decimal's folder in your iCloud Drive so they appear on your other devices. Sync is off until you turn it on. Apple stores that data under its own privacy policy, and Xip Kit never receives it.

Sheets you export as .ddec files go wherever you put them.

Places, maps and weather

When a line mentions a place, such as distance Detroit to Chicago or sunset in Detroit, Dot Decimal sends that place name to Apple Maps to find it, and sends its coordinates to Apple Maps for driving estimates or to Apple Weather for forecasts. Apple handles these requests under its own privacy policy. Dot Decimal never reads your device's location. Every place comes from text you typed.

Places it has already found are cached on your device so it doesn't have to ask again.

Live data

Stock prices, inflation, energy prices, food nutrients and fuel economy come from our own service, api.xipkit.com. Dot Decimal contacts it only when a sheet uses one of these values, and only as often as your live refresh setting allows.

Each request carries what the line asks for, such as a ticker symbol, a US state or a food name. To keep the service for the app alone, each install proves it is genuine with Apple's App Attest. This creates a random key on your device, stored in your Keychain and never synced. The key isn't tied to your name, your Apple Account or your device's identifiers.

On our side:

• We store each registered key's public key and Apple's attestation receipt, so we can check later requests. We keep them until the key is revoked.
• We count requests per key to enforce fair-use limits. Those counts reset every hour and every day.
• We cache the answers from data providers for up to seven days so that many people can share one lookup. The cache records the answer, not who asked for it.
• We use your IP address only to limit request rates. We don't store it.

To answer a request, we forward the query, but never your IP address or key, to the data's source: marketstack for stock prices, the U.S. Bureau of Labor Statistics, the U.S. Energy Information Administration, USDA FoodData Central, or the EPA's FuelEconomy.gov.

The service runs on Cloudflare, which processes standard request data, including your IP address, to deliver and protect it. Cloudflare may keep short-lived request logs that include the request itself.

Data that stays on your device

Settings such as your number format, zoom level, sales tax rate and live refresh choice are stored on your device. Calculations, including income tax estimates, run entirely on your device.

This website

dotdecimal.app is a static site. It sets no cookies and runs no analytics or third-party scripts. The interactive examples run in your browser and send nothing anywhere. Cloudflare serves the site and may process standard request data, including your IP address and browser user agent, to deliver and protect it.

Email

If you email us, we use your address and message only to reply to you, and we keep the conversation only as long as we need it to help you.

Children

Dot Decimal is suitable for students, but it collects no personal data from anyone, including children. It has no accounts, ads or tracking.

Your rights

Email us to access, correct or delete any personal data we hold about you. Because Dot Decimal sends us no personal data, that is usually limited to emails you have sent us.

Changes

We will update this page when these facts change and revise the date at the top.

Contact

Xip Kit LLC · [email protected]