Landwalker Studio

Privacy Policy — Sorted

Last updated: 21 June 2026

Sorted is a native macOS application that helps you triage invoices, verify payee bank details, and produce ABA payment files. This policy explains what data Sorted handles, where it goes, and what control you have over it.

Sorted is published by Landwalker Studio (a trading division of Landwalker Investments Pty Ltd, ABN 48 102 834 319, a company registered in Australia). Throughout this policy, "Sorted", "we", "us" or "our" refers to that entity. "You" refers to the person using the Sorted app.

The summary

What Sorted does on your Mac

Sorted reads, transforms, and stores the following on your Mac only. Nothing on this list is transmitted to us or to any third party we operate.

CategoryExamples
Invoice content PDFs delivered to your monitored Gmail labels or watched local folder; the text and amounts extracted from them.
Supplier contacts Name, ABN, email, phone, PayID, bank account details (BSB + account number + account name), payment-entity assignment, and historical bank-detail changes.
Your paying entities Names of the entities you pay from (e.g. "Landwalker Investments Pty Ltd"), and the bank accounts under each (BSB, account number, APCA User ID, lodgement reference).
Workflow state Invoice status (received, extracted, approved, paid, etc.), approval events, and payment-run records.
Email templates If you enable payment-confirmation emails, the subject and body templates you configure, along with the display name shown in the From header.
App preferences Folder bookmarks for ABA files and local invoice folders, monitored Gmail label IDs, and similar settings stored in macOS UserDefaults.
Learning log Each time you manually correct an extracted field, change a supplier mapping, or mark a message as "not an invoice", Sorted records the correction locally (see Learning loop below). Used to improve extraction over time; never transmitted off-device.

All of the above is stored inside Sorted's sandbox container at:

~/Library/Containers/com.landwalkerstudio.Sorted/Data/Library/Application Support/Sorted/

This location is protected by macOS's App Sandbox: other applications on your Mac cannot read it, and Sorted itself cannot read outside it without explicit permission grants from you (e.g. when you choose an ABA output folder).

Authentication credentials

When you connect Gmail or Xero, OAuth tokens are issued by Google or Xero to your installation of Sorted and stored locally on your Mac. Sorted never sees your Google or Xero password.

Disconnecting an integration via Sorted → Settings → Gmail / Xero deletes the tokens from your Mac. Revoking access on Google's account page or in Xero's app-management settings immediately invalidates the tokens regardless of what Sorted's stored copy says.

Data Sorted sends to third parties

Google (Gmail)

When you connect Gmail, Sorted requests scopes that allow it to:

Sorted only uses these scopes to fetch invoices and reorganise paid mail. It does not read mail outside the labels you've monitored, send mail on your behalf without your explicit confirmation, or share your Gmail data with anyone.

Google's privacy policy governs your relationship with Google: policies.google.com/privacy.

Xero

When you connect Xero, Sorted requests scopes that allow it to:

When you push a bill from Sorted to Xero, the supplier contact, line amounts, dates, and the source PDF are uploaded to Xero on your behalf and stored in your Xero organisation. They become part of your Xero records, governed by Xero's privacy policy: xero.com/au/legal/privacy.

Sorted does not store a copy of anything Xero returns beyond the identifiers needed to link a local invoice back to its Xero record (bill ID, contact ID, tenant ID).

Optional payment-confirmation emails

If you enable payment confirmations in Settings, Sorted composes an email to the supplier when you mark an invoice paid and sends it through your connected Gmail account. The email is sent by Gmail on your behalf using the address linked to your account. Sorted does not relay the email through any third party.

Data Sorted does not collect

We genuinely have no visibility into how anyone uses Sorted.

Learning loop

To improve extraction accuracy over time, Sorted records each manual correction you make — for example, when you edit an extracted total in Confirm details, switch the linked contact in Contact mapping, or mark a message as Not an invoice. Each correction stores the field involved, the old and new values, the extractor that produced the incorrect value, and a timestamp.

This dataset stays inside the sandbox container on your Mac. It is never transmitted off-device. Sorted may use it locally to make future extraction better for you. You can view the full dataset at Settings → Learning and export it together with the rest of your data via Export & backup.

Your rights and choices

You can at any time:

Because Sorted does not transmit your data to us, there is no separate "delete account" request to make — removing the app and its container is complete deletion.

Children

Sorted is a business productivity tool and is not directed at children under 13. We do not knowingly collect data from children.

Australian Privacy Principles

Sorted is published by an Australian entity and complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Because Sorted does not collect personal information from you — your data stays on your device — many of the APPs (e.g. APP 6 disclosure to third parties, APP 8 cross-border disclosures) do not apply in practice.

When you push a bill to Xero, the personal information of your supplier becomes subject to Xero's privacy policy. When you connect Gmail, the content of emails Sorted reads is subject to Google's terms.

Changes to this policy

If we materially change this policy, we will update the "Last updated" date at the top and, where the change affects existing users, surface a notice inside the app at next launch. Historical versions remain available in the GitHub repository where this document is hosted.

Contact

For privacy questions, data-handling concerns, or to exercise any of the rights described above:

If you believe your privacy rights have been infringed, you may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.