Privacy Policy

Last Updated: October 2026

Important: This Privacy Policy explains how GoodShare collects, uses, and protects your personal data in the app and on the website goodshare.app.

1. Data Controller

GoodShare
Robert Miller
Willstraße 23
90429 Nuremberg
Germany

Website: goodshare.app
Email:

2. Data We Collect

2.1 Account Data

An account is optional. For an account we need your email address; if you sign in with Apple or Google, we receive it from them. Without an account you use the app as a guest: you cannot share your own books with others or sync them between your devices, but you can still join a shared book.

2.2 Financial Data

2.3 AI Features (Optional)

These optional features send data to Google Gemini for processing:

Your Control: Before scanning, the receipt scanner shows a note on the processing. An image is only sent once you tick “I agree to the processing” and tap “Scan & Fill”; the app remembers the tick for later scans. The AI summary asks for your consent in a dialog before the first analysis; you can switch it off again at any time in Settings under “AI Financial Analysis”. The category suggestion only runs when you tap it. You can always add transactions manually and attach receipts without AI processing (“Attach as image”).

2.4 Analytics & Crash Reports

2.5 Shared Budget Books

2.6 iPhone Waitlist and Beta Test

If you sign up for the iPhone version on goodshare.app/ios/, on an invite page or by emailing us, we store:

We do not store your IP address or device data in your waitlist entry. To prevent abuse (too many sign-ups from one sender), the server turns your IP address into a hash value with a random salt; it is only held in memory, is never stored and is discarded after about 20 minutes, at the latest when the server process ends. As with every Google Cloud service, Google logs the requests to the form for operation and troubleshooting; these request logs include, among other things, the IP address and the browser identifier and are deleted after 30 days. The sign-up is processed in Google Cloud in the EU (Belgium) and stored in Cloud Firestore in Frankfurt. The legal basis is your consent (Art. 6(1)(a) GDPR); for the abuse protection and the request logs, it is our legitimate interest in a secure, working form (Art. 6(1)(f) GDPR).

Beta test: If you asked to test, we pass your email address to Apple (Apple Distribution International Ltd., Ireland) so that Apple can send you the TestFlight invitation. Your participation is then also subject to Apple's information on TestFlight and privacy.

Deletion: We delete the entries once the launch message has been sent and the beta test has ended. You can withdraw your consent at any time by emailing and we will delete your entry immediately.

3. How We Use Your Data

4. Legal Basis (GDPR)

For users in Brazil: data processing is also subject to the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018). Our legal bases under Art. 7 LGPD are analogous to GDPR Art. 6 (consent, contract performance, legitimate interest). Brazilian users may exercise all rights under Art. 18 LGPD (confirmation of processing, access, correction, anonymization, portability, deletion, information on sharing, and revocation of consent) by contacting support@goodshare.app. Our Data Controller named in Section 1 also acts as controlador under LGPD.

For users in Japan: data processing complies with the Act on the Protection of Personal Information (APPI, Act No. 57 of 2003, as amended). Users in Japan may exercise their rights under APPI, including disclosure, correction, suspension of use, and deletion of personal information, by contacting support@goodshare.app. We handle personal information only for the purposes stated in Section 3 and do not transfer personal data to third parties except as described in sections 5 and 6.

For users in South Korea: data processing complies with the Personal Information Protection Act (PIPA, Act No. 10465). Korean users may exercise their rights under PIPA, including access, correction, deletion, and withdrawal of consent, by contacting support@goodshare.app. We process personal information based on consent (Art. 15 PIPA) and contract performance, and retain data only for the periods stated in section 5.4.

5. Data Storage & Third-Party Services

5.1 Firebase (Google LLC)

We use Google Firebase for sign-in, storage and sync:

Your financial data and receipt images are therefore stored in the EU. Authentication, Cloud Messaging, Crashlytics and Analytics also process data outside the EU, in particular in the USA (see section 5.5).

5.2 Google Gemini (AI Features)

Google Cloud Privacy Notice | Vertex AI data governance | Google Privacy Policy

5.3 GoodShare Pro & Payments

5.4 Data Retention

When you delete your account, we immediately delete, among other things, your account, your profile, your Pro status, all books you own (for their members too), all receipt images in them, your memberships and invitations and your registered devices. Afterwards only the following remains:

How to delete your account is described in section 7 and on the Delete Account page.

5.5 Transfers to Third Countries

Some Firebase services (Authentication, Cloud Messaging, Crashlytics, Analytics) also process data at Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so these transfers are covered by the European Commission's adequacy decision (Art. 45 GDPR). In addition, Google's contract terms include the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). Your financial data, receipt images and the content of the AI features are stored and processed in the EU.

6. Visiting the Website

This section applies to the website goodshare.app. For the iPhone app waitlist, see section 2.6.

6.1 Hosting and Server Logs

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, in data centres in Germany. Strato processes the data on our behalf (Art. 28 GDPR). With every request, the web server logs technically necessary data:

The purpose is the secure and stable operation of the website, for example to fend off attacks and to find errors. The legal basis is our legitimate interest in this (Art. 6(1)(f) GDPR). According to Strato, the IP address in these logs is anonymized, and the logs are kept for no more than six weeks.

6.2 Analytics with Plausible

To understand which pages are read, we use Plausible Analytics. We run the software ourselves on our own server at Hetzner Online GmbH in Nuremberg (Germany); Hetzner processes the data on our behalf (Art. 28 GDPR), and no analytics provider receives any data. Plausible sets no cookies, stores nothing on your device and does not track you across websites or devices.

It records the page visited (without parameters in the address, except campaign tags such as utm_source), the page you came from, browser, operating system, device type, the country derived from your IP address, how far you scroll and how long the page is open, as well as individual events such as submitting the waitlist form. To count the visits of one day, your IP address is combined with your browser's identifier and a key that changes daily into a hash value; the IP address itself is not stored, and the key is deleted after 24 hours. We only see aggregated statistics. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6(1)(f) GDPR).

6.3 Calculators and Browser Storage

Our calculators (for example for budgets, savings goals, pensions or fair splits) run entirely in your browser. So that your inputs are still there on your next visit, some calculators save them in your browser's local storage (localStorage). This data is not transferred to us or to anyone else. You can delete it at any time by clearing the site data for goodshare.app in your browser; some calculators also have their own reset button. The legal basis for storing it on your device is Section 25(2) No. 2 of the German TDDDG (implementing Art. 5(3) of the ePrivacy Directive), because it is necessary for the feature you requested.

If you create a share link in a calculator, your inputs are encoded in that link. Anyone who opens the link requests the page with these values, so they can appear in the server logs like any other address (section 6.1). Only share such links with people who are meant to see the values.

6.4 Fonts and Third-Party Content

We load fonts, images and scripts exclusively from our own server. The website does not embed any third-party content such as videos, maps or font services; there is no advertising and there are no social media plugins. The page only connects to other servers for analytics (section 6.2) and when you submit the waitlist form (section 2.6). Links to Google Play, the App Store or other sites only take you there when you click them.

7. Your Rights

Under the GDPR, you have the following rights:

For most requests, an email to is all it takes. Deleting your account: in the app, go to Settings → “Delete Account” to delete your account and your data yourself, or send us an email. More on the Delete Account page.

Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You can also contact the supervisory authority where you live; a list of all authorities in the EU is available from the European Data Protection Board.

8. Data Security

9. Contact

Questions? Contact us: