Dá pro gasto?Privacy policy
This policy explains, in plain language, what the app does and doesn't do with your data. The rule behind all of it: your data is yours. It's saved in your account, in the cloud, only you can access it, and it is never sold or used for advertising.
1. What the app stores
Entries, accounts, cards, installments, categories, budgets, recurring entries, goals, learned categorization rules, agent alerts, chat history and settings are stored in a database inside the app, so it works even without internet, and saved in your account in the cloud (see section 3).
2. Account
You need an account to use the app, because that's where your data is kept. We store your email and a protected password so you can sign in again on any device. If you sign in with Apple or Google, we receive only your email from them (which, with Apple, may be a forwarding address that hides yours) and, the first time you sign in with Apple, your first name. Authentication is run by Supabase, on servers in the South America region, under a contract that prohibits it from using the data for any other purpose. No financial data is sent when you create your account.
3. Your data in the cloud
A copy of your data (entries, accounts, categories, budgets, recurring entries, goals and some settings) is saved to your account automatically, a few seconds after each change, so you don't lose anything and can find it all again when you sign in on another device. Each upload replaces the previous one. Access is protected: each account can only see its own data. The copy is deleted along with your account when you delete it under Settings → Account.
4. Chat about your spending
When you send a question in the chat, the app puts together a summary of your numbers (cycle totals, spending by category, budgets, account balances, card bill, upcoming installments, detected subscriptions and your last 40 entries, with shortened descriptions) and sends it, along with the question, to a function on our server. That function passes it on to Google (Gemini model), the AI model provider, which generates the answer; if Google is down, the same question goes to Anthropic (Claude model), which does not use the content to train models. We currently use the free tier of Google's API, whose terms allow Google to use the content sent to improve its products and models, including through human review; so don't write anything in the chat that you wouldn't want to leave your device. We don't store the question, the summary or the answer; we only keep how many questions you asked that day, to enforce the limit of 30. The conversation history stays on your device. Nothing is sent until you tap send, and the app tells you about this before your first question.
4.1 Reading PDF statements
When you import a statement or card bill as a PDF, the file is sent to a function on our server, which passes it to Anthropic (Claude model) to extract the entries and suggest categories. Anthropic does not use this content to train models. We don't store the PDF or the result on the server: the entries come back to the app, you check them on the review screen, and only then are they added. OFX and CSV statements are read on the device itself, without being sent anywhere.
5. Notifications
The daily reminder, the Sunday summary and the agents' alerts are local notifications, scheduled and triggered by the device itself. There is no notification server, and no data leaves the app for this.
6. Subscription
Billing is handled by the App Store or Google Play, through your store account. To check whether your subscription is active, the app uses RevenueCat, which receives an anonymous identifier and the purchase receipt from the store. It does not receive your entries or the email you use in the app.
7. Copies made by your device's system
iOS (through iCloud) and Android (through Google Drive) may back up app data on the device, depending on your settings. You control this in the system, and it doesn't go through us.
8. What we don't do
- We don't ask for your password, access or a connection to your bank.
- We don't show ads.
- We don't sell, rent or share data with third parties for advertising.
- We don't use behavioral analytics trackers inside the app.
9. How to delete
Under Settings → Account → Delete my account, your account, your data in the cloud and your chat question count are permanently deleted from the server, and the device is wiped. When you sign out, the data on the device is also deleted; it stays in your account and comes back when you sign in again.
10. Your rights (LGPD)
Under Article 18 of Law 13.709/2018 (the LGPD, Brazil's General Data Protection Law), you can confirm that your data is being processed, and access, correct, port and delete your data, as well as withdraw consent. You can do much of this yourself in the app: view, correct, export to a spreadsheet and delete. For any other request about data on the server (email, account data, chat count), write to contact.velotti@gmail.com. This is also the contact channel for our data protection officer.
11. Minors
The app is not intended for anyone under 18 and does not knowingly collect data from minors.
12. Changes
If this policy changes, the date at the top is updated and, when the change is significant, the app lets you know. The current version is always this page.