Privacy Policy
Guita is a personal finance app. This policy explains what information Guita collects, why, who we share it with and the choices you have. In short: we collect what's needed to keep your finances in sync across your devices, we don't sell your data, we don't track you across other apps or websites, and we never use your financial data for advertising.
What we collect
Account information. Your name, email address and password. We store passwords only as a salted hash and never see them in plain text. If you sign in with Apple or Google, we receive your name, email address and an account identifier from that provider. If you use Apple's "Hide My Email", we only receive the relay address.
Your financial data. Everything you enter in Guita, including accounts, records, transfers, categories, labels, budgets, goals, planned payments, debts, templates, rules, notes and your main currency. Guita does not connect to your bank, and we never ask for bank credentials or card numbers.
Receipt photos. Photos or scans you choose to attach to a record.
Imported files. When you import from BudgetBakers or Money Manager, the file is read on your device. Only the resulting records are synced, as described above.
Feedback. Messages and screenshots you send with "Send feedback". Unless you turn diagnostics off, a report also includes technical details: app version, device model, iOS version, language, region, time zone, main currency and sync status.
Crash and performance data. When the app crashes or something goes wrong, we receive a technical report: a stack trace, device model, iOS version, app version and timings of app screens and network requests. These reports don't include your name, email address or financial data.
Server logs. Our servers log requests, including IP address, time and the request made, to keep the service secure and working.
What stays on your device
Guita keeps a full copy of your data on your iPhone so it works offline. If you use Face ID or a passcode to lock the app, Apple handles it on your device. Guita never receives your biometric data. App settings such as appearance and language also stay on your device.
How we use it
- To provide Guita: store your data and sync it between your devices, and show balances, statistics and exchange-rate conversions.
- To run your account: sign-in, verification and password-reset emails.
- To answer your feedback and support requests.
- To find and fix bugs, and keep the service secure.
We never sell or rent your data, and we never use your financial data to target ads or to build profiles about you.
Who we share it with
We share data only with service providers that run parts of Guita for us. They may use it only to provide their service to us:
- Amazon Web Services (United States): runs our servers and stores receipt photos.
- Neon (United States): hosts our database.
- Mailgun: sends account emails and delivers feedback reports to us.
- Sentry: receives crash and performance reports.
- Apple and Google: only if you choose to sign in with them.
Exchange rates come from a third-party rate provider. Our server requests the rates on its own, so none of your information is sent to it.
We may also disclose information if the law requires it, to protect the rights or safety of our users or others, or as part of a merger or acquisition. In the last case, this policy will continue to apply to your data.
How long we keep it
We keep your data while you have an account. When you delete your account from Settings, your account and all data you own are deleted from our database immediately, and receipt photos are removed from storage within 7 days. Server logs are kept for 30 days. Copies in our database provider's backups expire on their own within 30 days.
Signing out removes Guita's copy of your data from that device. Deleting the app removes it too.
Security
All traffic between the app and our servers is encrypted with HTTPS, and our providers encrypt stored data at rest. Access to production systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.
Your choices and rights
- Access and correction: you can see and edit your data in the app at any time.
- Deletion: delete your account in Settings › Delete account, or email us.
- Diagnostics: you can turn off diagnostics for each feedback report.
- Other requests: depending on where you live (for example the EU, UK or California), you may have the right to request a copy of your data, object to or restrict processing, or complain to your data protection authority. Email us and we'll respond within 30 days.
Where the GDPR applies, we process your data to perform our contract with you (providing Guita), and on our legitimate interest in keeping the service secure and fixing bugs.
International transfers
Our servers are in the United States. If you use Guita from elsewhere, your data is transferred to and processed in the United States, with safeguards such as standard contractual clauses where required.
Children
Guita is not directed to children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has given us data, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date above. If the changes are significant, we'll let you know in the app or by email before they take effect.
Contact
Email: [email protected]