These Terms of Use are a contract between you and the developer of GuthoBook ("GuthoBook", "we", "us"). By creating an account, tapping "Accept", downloading or using the app, you confirm that you have read, understood and agree to these Terms and to the Privacy Policy below. If you do not agree, do not use GuthoBook. Continuing to use the app after an update to these Terms means you accept the new version.
GuthoBook is a personal organization tool: a digital cash book with a planner, reminders, savings goals and spreadsheets. It is NOT a bank, payment institution, broker, accountant, advisor or consultant. It does not hold, transfer or move money. Nothing shown in the app (balances, budgets, charts, goals, emergency-fund suggestions, "who owes whom") is financial, accounting, tax, investment or legal advice. Figures are calculated only from what you and the people in your groups enter, are for reference only and may contain errors. Every decision you make based on the app is solely yours.
You must be 18 or the age of majority in your country. People aged 13 to 17 may only use GuthoBook with the permission of a parent or legal guardian, who accepts these Terms on the minor's behalf and is fully responsible for the use of the account, purchases made on it and any harm caused. Children under 13 may not have their own account; a guardian may create a profile for them inside the guardian's own Pro account, under the guardian's full responsibility.
You must provide true information and keep it up to date. You alone are responsible for keeping your password, e-mail and device secure, and for everything done with your account, including by anyone with access to your device. The 6-digit password and biometrics are a privacy barrier against casual access and do not replace your device's own screen lock. Tell us immediately if you suspect misuse. When you log in, you choose how the app opens on that device: always ask for e-mail and password, open with Face ID/fingerprint, or stay signed in. The options that open the app without typing the password are more convenient and less secure; use them only if the device is yours alone. If you choose to stay signed in or to open with biometrics, anyone with access to the unlocked device (or whose biometrics are enrolled on it) may access your account, and you are responsible for that access. Recovery e-mail: if you add a second e-mail, anyone with access to it can create a new password for your account. Keep that e-mail secure and up to date and remove it if you lose access to it. When the password is changed through recovery, the other devices signed in to the account are signed out for security.
You alone are responsible for what you record in the app (amounts, descriptions, notes, appointments, tasks and any other content) and for its accuracy. You are also responsible for keeping your own backups, for example by exporting the spreadsheets. Data stored on the device or in the browser can be lost when clearing data, changing or resetting the device, uninstalling the app or through system failures. We do not guarantee recovery of lost data and are not responsible for such loss.
Bill alarms, planner reminders, notifications, automatic fixed bills, goals and calculations are convenience features. They may be delayed, fail, not appear or show wrong amounts because of device settings, battery saving, denied permissions, no internet, time zones, system updates or errors in the app itself. Do not rely on them to meet deadlines. You remain responsible for paying your bills and keeping your appointments on time, and GuthoBook is not liable for late fees, interest, service cut-offs, missed appointments or any loss arising from an alert that did not arrive or arrived wrong.
Shared groups, expense splitting and "settle up — who owes whom" are only informal notes among people who chose to use the app together. They do not create any debt, instrument, charge or legal obligation, and GuthoBook is not a party, intermediary, guarantor or collector of any amount between users. GuthoBook does not check whether other members' entries are correct. Any disagreement between members must be resolved directly between them. By inviting someone, you confirm you are allowed to use that person's e-mail for that purpose. What you post in a group is visible to its other members. Inviting from phone contacts (Pro): to invite people from your contacts, you must confirm your mobile number with a code sent by SMS and allow the app to read the device's contacts. On the phone itself, your contacts' numbers are turned into a scrambled code (hash), and only that code is sent to the server to find out who already uses GuthoBook; we do not copy or store your contacts. Someone who confirmed their mobile number on GuthoBook can be found by people who have that number saved in their contacts, who will see that the person uses the app and their first name, and receives the invite in the app. For people who don't use the app yet, the invite message is sent by you, through your WhatsApp or SMS, and the invite waits for that number until the person creates an account and confirms their mobile number. By inviting someone from your contacts, you confirm that you know the person and may send them that message. Any SMS or data charges are billed by your carrier.
On the Pro plan, the account holder may create profiles and link each profile to another person's account. The holder can see the books of all profiles, is solely responsible for telling the linked people about this and for obtaining their consent (or their guardians' consent, for minors), and is responsible for the use of those profiles. On the Pro Max plan, the account may have a second profile, with separate data and currency; it belongs to the same account and follows these Terms.
On the Pro Max plan, you may add credit cards and, if you wish, connect them to your bank so purchases are added to the book automatically. The connection is provided by specialized companies: Plaid Inc. (banks in the United States, Canada and European countries) and Pluggy (Brazilian banks, through Open Finance). You log in to your bank through these companies' secure screen; GuthoBook never sees or stores your bank password. By connecting, you authorize these companies to obtain, on your behalf, data from your accounts and cards (such as transactions, amounts, dates, descriptions, merchant, institution name and the last digits of the card) and send it to GuthoBook, which uses it only to post the expenses to your book and show the statements. Access is read-only: GuthoBook makes no payments, transfers or any other movement of money. You also agree to the terms and privacy policy of Plaid (plaid.com/legal) and Pluggy (pluggy.ai), which process this data under their own rules. Information coming from the bank may be delayed, incomplete, duplicated or wrong, or stop arriving if the bank or provider changes something or asks for a new authorization. Always check against your bank's official statement; GuthoBook is not responsible for differences between the app and the bank, nor for failures of the banks or providers. You may disconnect a card at any time in the app; purchases already added stay in the book until you delete them. GuthoBook is not a financial institution. The app may also show the balance and limit reported by the bank and point out charges that look like subscriptions, including repeated ones on different cards. This detection is automatic and approximate and may be wrong. The cancel button only opens the service's own cancellation page: GuthoBook does not cancel subscriptions, does not contact the company on your behalf and does not guarantee cancellation or refunds. Always check with the company and on your statement.
The app has a help assistant and voice commands that use artificial intelligence provided by Anthropic (Claude model). When you use the assistant or a voice command, the text of your question or command (and, in the assistant, the earlier messages of the same conversation) is sent to the GuthoBook server and to Anthropic only to generate the answer. We do not send your entries, balances or other data from your book. For voice commands, speech is turned into text by the phone's own speech recognition service (Apple or Google), which may process the audio on their servers under their policies; GuthoBook does not record or store the audio. The microphone is used only when you tap the microphone button. Artificial intelligence answers may contain errors or be incomplete and are not financial, legal, accounting or tax advice. For voice commands, the app shows what it understood and saves only after you check it and tap Save; you are responsible for what you save. There are daily usage limits. Do not give the assistant passwords, card numbers, ID documents or other sensitive data.
Pro and Pro Max subscribers may keep logins, passwords and notes in the password vault. Opening it always takes two steps: confirming the device (Face ID, fingerprint or the phone's PIN) and the vault password, which you create. The contents are encrypted on your phone, with a key generated from the vault password, before being sent to the cloud. The vault password and that key are not sent to or stored by GuthoBook, and we cannot read the contents. Therefore, if you forget the vault password, nobody — not you, not GuthoBook — can open it or recover the contents, and GuthoBook is not responsible for that loss. You are responsible for choosing a strong password, keeping it safe and keeping a screen lock on the device; anyone with access to your device who knows the vault password may see the contents. The vault closes by itself when you leave the app or after a few minutes without use. If the subscription ends, you can still view, copy and delete what you saved, but you cannot add or edit items. The vault is a convenience tool: keep another safe copy of information whose loss could cause you harm. We use recognized security measures, but no system is proof against every attack.
When you export spreadsheets or send summaries by e-mail, WhatsApp, text message or through your device's share menu, you choose the recipient and the content, and the transmission goes through third-party services. GuthoBook does not control those services and is not responsible for what happens to the information after you send it, nor for sending it to the wrong recipient.
The app relies on third-party services, including: Apple App Store and Google Play (stores and payments), Google Firebase (login, cloud database, server functions and notifications), Plaid and Pluggy (bank connection, Pro Max only and only if you connect), RevenueCat (subscription management), Google AdMob (ads in the free version), Anthropic (artificial intelligence for the help assistant and voice commands), Apple's and Google's speech recognition services, SMS delivery to confirm the mobile number (Google Firebase), the messaging apps you choose to send invites (WhatsApp or SMS), an e-mail delivery provider and public address lookup services (ViaCEP, Zippopotam.us and Photon/OpenStreetMap). These services have their own terms and policies. GuthoBook is not responsible for their failures, unavailability, charges or practices.
Purchases (such as the one-time payment that removes ads and the Pro and Pro Max plans) are processed by the app store under its rules. Refund requests are made through the store and follow its policy and applicable law; otherwise, amounts paid are non-refundable. Subscriptions renew automatically until cancelled in the store. Prices, plans and features may change; price changes apply from the next period. The preview version may simulate payments and unlock features temporarily, without any charge and without creating any right to those features. Promo codes are a courtesy: they work only once, have no cash value, cannot be sold or transferred, and the access they unlock is not lifetime or guaranteed — it may be changed, suspended or ended at any time, at our discretion, without notice and without refund or compensation. Discount coupons are valid only under the stated conditions (percentage, purchase they apply to, expiry date and usage limit), have no cash value, cannot be combined, sold or transferred, and may be cancelled at any time before they are used. The discount applies only to the purchase on which the coupon was used; renewals and future purchases follow the regular price unless stated otherwise. Deleting the account or uninstalling the app does not cancel a subscription; cancellation is done in the store.
The free version may show third-party ads. GuthoBook does not endorse and is not responsible for the products, services or content advertised; any dealings with an advertiser are solely between you and that advertiser.
Use GuthoBook only for personal and lawful purposes. You may not: use the app for fraud, money laundering, hiding assets or any illegal activity; record content that is offensive, illegal or infringes others' rights; send unsolicited invitations or messages; copy, modify, decompile, reverse engineer or try to bypass the security, payments or operation of the app; or use bots or automated means of access.
GuthoBook, its name, logo, design, texts, videos and code belong to the developer and are protected by law. We grant you a personal, limited, revocable, non-exclusive, non-transferable license to use the app under these Terms. No other rights are granted. The content you record remains yours; you authorize us to store and process it only to make the app work.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, GUTHOBOOK IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AVAILABILITY, SECURITY OR FREEDOM FROM ERRORS, VIRUSES OR INTERRUPTIONS. YOU USE THE APP AT YOUR OWN RISK.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE DEVELOPER OF GUTHOBOOK AND ITS OWNERS, EMPLOYEES AND PARTNERS ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST DATA, FINANCIAL LOSSES, FEES, INTEREST, NON-PECUNIARY (MORAL) DAMAGES OR DECISIONS MADE BASED ON THE APP, EVEN IF ADVISED OF THEIR POSSIBILITY. IN ANY CASE, THE DEVELOPER'S TOTAL LIABILITY FOR ANY CLAIM RELATED TO THE APP IS LIMITED TO THE GREATER OF (A) WHAT YOU PAID TO GUTHOBOOK IN THE 12 MONTHS BEFORE THE EVENT AND (B) US$5.00.
You agree to defend, indemnify and hold harmless the developer of GuthoBook and its owners, employees and partners from any third-party claims, losses, damages, costs and attorneys' fees arising from your use of the app, the content you record or share, disputes with other members of your groups or profiles, or your breach of these Terms or the law.
To the maximum extent permitted by law, any claim related to GuthoBook must be brought within 1 (one) year of the event giving rise to it; after that, the claim is permanently barred.
Before taking any action, you agree to contact us and try in good faith to resolve the issue for 60 days. If you live in the United States, any unresolved dispute will be decided by individual, binding arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, and not by a court or jury; either party may still bring the case in small claims court. YOU AND GUTHOBOOK WAIVE THE RIGHT TO A JURY TRIAL AND TO TAKE PART IN CLASS ACTIONS, CLASS ARBITRATIONS OR REPRESENTATIVE ACTIONS. You may opt out of this arbitration clause by e-mailing support within 30 days of accepting these Terms. Outside the United States, this clause applies only to the extent local law allows.
These Terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-law rules, and, except as provided in the arbitration clause, the courts of Miami-Dade County, Florida, have jurisdiction. If you are a consumer living in another country, you keep the mandatory protections of the law of your country of residence that cannot be waived by contract, including, in Brazil, the Consumer Protection Code and the LGPD, and the venue that such law guarantees you.
We may suspend or end your access at any time if you breach these Terms, if the law requires it, or to protect the app, other users or us. You may stop using the app at any time and delete your account, as explained in the "Account deletion" clause. Clauses that by their nature should survive (such as the disclaimer of warranties, limitation of liability, indemnification and dispute resolution) survive termination.
You may delete your account at any time in Account → Delete my account, confirming with your password. Deletion is permanent and erases the login and the data linked to the account: entries, fixed bills, savings, emergency fund, agenda, tasks, events, profiles (including the second Pro Max profile), cards, bank connections (which are also disconnected at the providers), the recovery e-mail, the confirmed mobile number, the password vault and the support tickets. Entries you made in shared groups stay in the group, because they are part of the other members' book. If you own a group with other people, you must first hand it to an admin or delete it. Deleting the account does NOT cancel subscriptions: cancel them first in the App Store or Google Play. After deletion, the data cannot be recovered. Technical logs and copies kept by our providers may take up to 30 days to be erased, and we may keep what the law requires.
We may change, suspend or discontinue the app or any feature, in whole or in part, at any time, including free and preview versions. We may update these Terms; the version in force, with its effective date, is always available in Account → Terms of use. Continuing to use the app after the effective date means you accept the new version.
This Privacy Policy explains what data GuthoBook processes, why, with whom it is shared and what your rights are. The controller of the data is the developer of GuthoBook. Privacy requests, including to the data protection officer (LGPD), are made through the contact in the "Contact" clause.
(a) Registration: name, date of birth, sex, address, country, phone, e-mail, language and currency. (b) Login: e-mail and password — the password is stored encrypted by Google Firebase and we have no access to it; and the recovery e-mail, if you add one. (c) What you record: entries, notes, fixed bills, savings, goals, agenda, tasks, events, profiles, groups and cards (card name and closing and due days — never the full card number). (d) Pro Max with a connected bank: the transactions and card data sent by Plaid or Pluggy, described in the cards clause; the bank access identifiers are stored only on the server, and the app cannot access them. (e) Technical data: the device notification identifier, app and system version, technical logs with IP address and times, verification that the app is genuine (App Check) and, if you allow it, the device advertising identifier. (f) Purchases: your subscription status, reported by the store and RevenueCat. We do not receive your payment card details — Apple or Google keep them. (g) Address lookup: when you type the postal code or street, that text is sent to public address services only to suggest options; your name is not sent. (h) Confirmed mobile number: the number you confirm by SMS and a scrambled code (hash) of it, used so that people who have your number can find you when inviting you to a group. (i) Contacts: with your permission, the numbers are read and turned into scrambled codes on the phone itself; only those codes are sent for comparison and they are not stored, except the code and name of a contact you invite who does not use the app yet, while the invite is pending. (j) Artificial intelligence and microphone: the text of your questions to the assistant and of voice commands, sent to Anthropic to generate the answer; the audio is converted to text by the phone and is not stored by us. (k) Password vault: the contents are stored in the cloud only after being encrypted on your phone with the vault password; we receive only that scrambled data and the technical information needed to open it on the device, never the vault password or the readable contents. (l) Support: the messages of the tickets you open in the app (Account → Help → Talk to support), with your name, e-mail, plan, app version and phone system and, if you allow it, the chat with the assistant.
We use the data to: create and protect your account and recover access; make the app work and sync across devices; show the groups and profiles you choose; find your contacts who already use the app and send the invites you ask for; answer your questions in the assistant and understand your voice commands; post the purchases of connected cards; send reminders, alarms and notices; process subscriptions; show ads in the free version; provide support; prevent fraud and abuse; and comply with the law. Legal bases (LGPD): performance of the contract (these Terms), legal obligation, legitimate interest (security and fraud prevention) and your consent where required (for example notifications, bank connection, personalized ads and access to contacts and the microphone), which you may withdraw at any time. We do not sell your personal data and do not use it to grant credit, assess risk or for any purpose other than those described here.
Only with: (1) the providers that make the app work, which process the data on our behalf or under their own policies — Google (Firebase, AdMob and speech recognition), Anthropic (artificial intelligence), Plaid, Pluggy, RevenueCat, Apple (including speech recognition), the e-mail provider and the address services listed; (2) the people you choose (members of your groups, linked profiles and recipients of what you send or export); (3) authorities, when required by law or court order; and (4) a possible buyer or successor of the app, who must respect this Policy. Plaid's End User Privacy Policy is at plaid.com/legal. If you confirm your mobile number, people who have your number saved and use the contacts invite may see that you use GuthoBook and your first name. Under Anthropic's commercial terms, data sent to it is not used to train its models.
The data is stored on Google Cloud/Firebase servers in the United States and, depending on the service, on the servers of the providers listed. If you live in Brazil or another country, your data is transferred to the United States, with the contractual safeguards offered by these providers and as permitted by applicable law, such as the LGPD.
We keep the data while your account exists. When you delete the account, it is erased from active systems immediately, and technical logs and provider copies may take up to 30 days. Sign-ups started and never confirmed are deleted automatically. We may keep data longer only as required by law or as needed to defend ourselves in a dispute. The code of the confirmed mobile number is kept while the account exists, and pending phone invites are kept until they are accepted or cancelled. We do not store on the server the content of conversations with the assistant or of voice commands — only the daily usage count; Anthropic may keep this data for a limited time under its policy. Support tickets are kept while the account exists, as the history of your requests, and are deleted with it.
Under the law of your country (such as Brazil's LGPD and United States state privacy laws), you may: confirm whether we process your data and access it; correct data; request deletion (which you can do in the app itself); request portability (the exportable spreadsheets help with this); know who we share it with; withdraw consent; and object to processing. You can limit personalized ads in your device settings (Advertising ID / Limit Ad Tracking) and turn off notifications at any time. We do not discriminate against anyone for exercising these rights. You may also complain to the data protection authority of your country (in Brazil, the ANPD).
We use reasonable security measures: encrypted connections, data encrypted on Google's servers, rules that prevent one user from seeing another's data, bank keys and access stored only on the server, and verification that the app is genuine. No system is 100% secure and we do not guarantee absolute security. If a security incident occurs that may cause relevant risk or harm, we will notify affected users and the competent authorities within the time and manner required by applicable law. The password vault uses end-to-end encryption (AES-256), with the key created on your phone from the vault password.
GuthoBook is not directed to children under 13 and we do not knowingly collect data from children of that age except as provided in the age clause. If we learn this has happened, we will delete the data. Parents or guardians may contact us for this.
If any clause is held invalid, it will be enforced to the maximum extent permitted and the others remain in effect. These Terms are the entire agreement between you and GuthoBook about the app. Failure to enforce any provision is not a waiver. You may not transfer these Terms; we may, including in a sale or reorganization. We are not responsible for delays or failures caused by events beyond our reasonable control. These Terms are available in Portuguese and English; if they differ, the English version prevails.
Nothing in these Terms excludes or limits any liability or right that cannot be excluded or limited under applicable law, such as liability for willful misconduct or fraud and mandatory consumer rights.
Questions, requests about your data and legal notices should be sent to suporte@guthobook.com, which is also shown in Account → Help in the app.