This Privacy Policy explains what data GuthoBook processes, why, with whom it is shared and what your rights are. The controller of the data is the developer of GuthoBook. Privacy requests, including to the data protection officer (LGPD), are made through the contact in the "Contact" clause.
(a) Registration: name, date of birth, sex, address, country, phone, e-mail, language and currency. (b) Login: e-mail and password — the password is stored encrypted by Google Firebase and we have no access to it; and the recovery e-mail, if you add one. (c) What you record: entries, notes, fixed bills, savings, goals, agenda, tasks, events, profiles, groups and cards (card name and closing and due days — never the full card number). (d) Pro Max with a connected bank: the transactions and card data sent by Plaid or Pluggy, described in the cards clause; the bank access identifiers are stored only on the server, and the app cannot access them. (e) Technical data: the device notification identifier, app and system version, technical logs with IP address and times, verification that the app is genuine (App Check) and, if you allow it, the device advertising identifier. (f) Purchases: your subscription status, reported by the store and RevenueCat. We do not receive your payment card details — Apple or Google keep them. (g) Address lookup: when you type the postal code or street, that text is sent to public address services only to suggest options; your name is not sent. (h) Confirmed mobile number: the number you confirm by SMS and a scrambled code (hash) of it, used so that people who have your number can find you when inviting you to a group. (i) Contacts: with your permission, the numbers are read and turned into scrambled codes on the phone itself; only those codes are sent for comparison and they are not stored, except the code and name of a contact you invite who does not use the app yet, while the invite is pending. (j) Artificial intelligence and microphone: the text of your questions to the assistant and of voice commands, sent to Anthropic to generate the answer; the audio is converted to text by the phone and is not stored by us. (k) Password vault: the contents are stored in the cloud only after being encrypted on your phone with the vault password; we receive only that scrambled data and the technical information needed to open it on the device, never the vault password or the readable contents. (l) Support: the messages of the tickets you open in the app (Account → Help → Talk to support), with your name, e-mail, plan, app version and phone system and, if you allow it, the chat with the assistant.
We use the data to: create and protect your account and recover access; make the app work and sync across devices; show the groups and profiles you choose; find your contacts who already use the app and send the invites you ask for; answer your questions in the assistant and understand your voice commands; post the purchases of connected cards; send reminders, alarms and notices; process subscriptions; show ads in the free version; provide support; prevent fraud and abuse; and comply with the law. Legal bases (LGPD): performance of the contract (these Terms), legal obligation, legitimate interest (security and fraud prevention) and your consent where required (for example notifications, bank connection, personalized ads and access to contacts and the microphone), which you may withdraw at any time. We do not sell your personal data and do not use it to grant credit, assess risk or for any purpose other than those described here.
Only with: (1) the providers that make the app work, which process the data on our behalf or under their own policies — Google (Firebase, AdMob and speech recognition), Anthropic (artificial intelligence), Plaid, Pluggy, RevenueCat, Apple (including speech recognition), the e-mail provider and the address services listed; (2) the people you choose (members of your groups, linked profiles and recipients of what you send or export); (3) authorities, when required by law or court order; and (4) a possible buyer or successor of the app, who must respect this Policy. Plaid's End User Privacy Policy is at plaid.com/legal. If you confirm your mobile number, people who have your number saved and use the contacts invite may see that you use GuthoBook and your first name. Under Anthropic's commercial terms, data sent to it is not used to train its models.
The data is stored on Google Cloud/Firebase servers in the United States and, depending on the service, on the servers of the providers listed. If you live in Brazil or another country, your data is transferred to the United States, with the contractual safeguards offered by these providers and as permitted by applicable law, such as the LGPD.
We keep the data while your account exists. When you delete the account, it is erased from active systems immediately, and technical logs and provider copies may take up to 30 days. Sign-ups started and never confirmed are deleted automatically. We may keep data longer only as required by law or as needed to defend ourselves in a dispute. The code of the confirmed mobile number is kept while the account exists, and pending phone invites are kept until they are accepted or cancelled. We do not store on the server the content of conversations with the assistant or of voice commands — only the daily usage count; Anthropic may keep this data for a limited time under its policy. Support tickets are kept while the account exists, as the history of your requests, and are deleted with it.
Under the law of your country (such as Brazil's LGPD and United States state privacy laws), you may: confirm whether we process your data and access it; correct data; request deletion (which you can do in the app itself); request portability (the exportable spreadsheets help with this); know who we share it with; withdraw consent; and object to processing. You can limit personalized ads in your device settings (Advertising ID / Limit Ad Tracking) and turn off notifications at any time. We do not discriminate against anyone for exercising these rights. You may also complain to the data protection authority of your country (in Brazil, the ANPD).
We use reasonable security measures: encrypted connections, data encrypted on Google's servers, rules that prevent one user from seeing another's data, bank keys and access stored only on the server, and verification that the app is genuine. No system is 100% secure and we do not guarantee absolute security. If a security incident occurs that may cause relevant risk or harm, we will notify affected users and the competent authorities within the time and manner required by applicable law. The password vault uses end-to-end encryption (AES-256), with the key created on your phone from the vault password.
GuthoBook is not directed to children under 13 and we do not knowingly collect data from children of that age except as provided in the age clause. If we learn this has happened, we will delete the data. Parents or guardians may contact us for this.
Questions, requests about your data and legal notices should be sent to suporte@guthobook.com, which is also shown in Account → Help in the app.