Privacy Policy

Last Updated: December 2025

1. Data Controller

2. Data We Collect

2.1 Account Data

• Email address - for account creation and authentication
• User ID - unique identifier from Firebase
• Login timestamps - for security purposes

2.2 Financial Data

• Budget books - names and settings
• Transactions - income and expense entries
• Categories - custom and default categories
• Standing orders - recurring payments
• Receipt images - photos you attach to transactions

2.3 AI Receipt Scanner (Optional)

When you use the AI Scanner feature:

• Receipt images - temporarily sent to Google Gemini AI for text extraction
• Extracted data - amount, date, merchant, category
• Not stored - images are processed in real-time and not permanently stored by Google

2.4 Analytics & Crash Reports

• Firebase Crashlytics - crash logs to fix bugs and improve stability
• Firebase Analytics - anonymized usage statistics (e.g., feature usage, conversion events)
• No Advertising ID - we explicitly disabled advertising tracking

2.5 Shared Budget Books

• When you share a budget book, all members can see all transactions
• Members can invite or remove other users
• When you leave a book, your contributions remain visible to others

3. How We Use Your Data

• Provide app functionality
• Sync data across devices
• Enable shared budgets with other users
• AI Receipt Scanning (with your consent) - extract transaction data from receipt images
• Improve the app and fix bugs

4. Legal Basis (GDPR)

• Your consent (Art. 6(1)(a) GDPR)
• Contract performance (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR)

5. Data Storage & Third-Party Services

5.1 Firebase (Google LLC)

We use Google Firebase for secure data storage:

• Firebase Authentication - user login
• Cloud Firestore - structured data storage
• Realtime Database - real-time synchronization
• Firebase Storage - receipt image storage

Data is primarily stored in EU region servers.

5.2 Google Gemini AI (Receipt Scanner)

When you use the AI Scanner:

• Service - Google Gemini 2.0 Flash API
• Data sent - Receipt images (only when you tap "Scan & Fill")
• Purpose - Extract amount, date, merchant, category
• Storage - Images processed in real-time, not stored permanently by Google
• Legal basis - Your explicit consent (opt-in per scan)

Google AI Terms | Google Privacy Policy

5.3 Premium & Payments

• 30-day free trial - no credit card required
• Payment processing - handled by Google Play (we do not store payment data)
• Cancellation - anytime via Google Play Store

5.4 Data Retention

• Account data - retained while account exists + 30 days after deletion
• Receipt images - stored until you delete the transaction or account
• AI Scanner data - processed in real-time, not retained by Google
• Crash reports - 90 days (Firebase Crashlytics default)
• Analytics data - 14 months (Firebase Analytics default)

6. Your Rights

• Right of access (Art. 15) - request a copy of your data
• Right to rectification (Art. 16) - correct your data
• Right to erasure (Art. 17) - delete your data
• Right to data portability (Art. 20)
• Right to object (Art. 21)

7. Data Security

• Encryption in transit (HTTPS/SSL)
• Firebase security rules
• Regular security updates

8. Contact

Questions? Contact us: support [at] goodshare.app

Data protection authority: edpb.europa.eu