GastitoPrivacy policy
Gastito is an iPhone app that logs your spending and income. To do that it needs to read data about your payments. This page explains which data, why, and the control you have. In short: we use your data only to show you your finances, we don't sell it, we show no ads, and you can export or delete it whenever you want.
Who is responsible
The data controller is Gastito, based in Argentina. For any question about your data, write to lucasbelich1@gmail.com.
What data we use
- Your account: the identifier Apple or Google gives us when you sign in, your email and name if you share them, and your preferences (language, theme, currency, time zone).
- Apple Pay payments: if you set up the iPhone shortcut, for each payment we receive the amount, merchant, card and date. Apple gives us access to nothing else.
- Mercado Pago: if you connect your account, Mercado Pago authorizes us to read your payments sent and received (amount, date, description and the other party). We cannot make payments or move your money. The authorization Mercado Pago gives you is stored encrypted.
- What you enter: manual movements, notes, categories, rules, accounts and budgets.
- Gmail: if you connect it, Google gives us read-only permission. We read only emails from payment senders (DolarApp, now ARQ, and Deel) to record those payments: amount, date, merchant and description. We do not read the rest of your email, and we never write, send or delete anything. We store the permission encrypted. We also store the content of those payment emails, so we can read them again if we improve how we interpret them.
- Notifications: if you turn them on, your iPhone's identifier to send you alerts for each movement.
Sources are only turned on if you connect them, and you can disconnect them anytime.
The Face ID lock works only on your iPhone: Gastito never receives or stores biometric data.
Why we use it
- To record your movements and show you what you spent, on what, and what's left.
- To avoid counting the same payment twice when it arrives from more than one source.
- To convert amounts between pesos and dollars at the day's rate.
- To suggest a category for new movements. You can always change it.
- If you use them: to summarize how your month is going, answer questions about your money and read the receipts you photograph.
- To send you the notifications you turned on.
We don't sell your data, don't use it for advertising, and don't share it with anyone for their own purposes.
Where it is stored and who helps us
We rely on providers that process data on our behalf, only to provide the service:
- Cloudflare (United States, global network): runs the app's server.
- Neon, on Amazon Web Services in São Paulo, Brazil: stores the database.
- Expo (United States): delivers notifications to your iPhone.
- Sentry (United States): receives technical error reports from the app and the server, without your movements or personal data.
- Anthropic (United States): its AI model Claude runs the AI features: suggesting a merchant's category and name, writing the month summary, answering your questions and reading the receipt photos you send. It receives only what each feature needs: merchants, descriptions, amounts, your category names and, to answer a question, the transactions it looks up. It never receives your name, email or accounts. We do not store receipt photos. Anthropic does not use this data to train its models.
- Apple, Google and Mercado Pago: only for sign-in and the connections you turn on.
Some of these providers are outside Argentina. We choose providers with appropriate security measures to protect your data in those transfers.
Google data
Gastito's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to record your payments in the app; we do not use it for advertising, we do not sell it, no one reads it unless you ask us to or the law requires it, and we do not use it to train AI models.
How we protect it
Everything travels encrypted (HTTPS). Mercado Pago authorizations are stored encrypted. For the iPhone shortcut token we keep only a fingerprint (hash), not the token itself. Every record belongs to your account and no one else can see it from the app.
How long we keep it
As long as you have an account. If you delete it, we delete your movements, connections and everything associated with it. Backups may keep copies for a limited time until they are replaced.
Your rights
You can access, correct and update your data and ask us to delete it. In the app you can export your movements (Settings › Export transactions) and delete your account with everything in it (Settings › Delete account). For anything else write to lucasbelich1@gmail.com; we answer within the time limits of Argentine Law 25,326.
You can also disconnect Mercado Pago or revoke the iPhone shortcut from Settings › Connections at any time.
Children
Gastito is not meant for children under 13.
Changes
If we change this policy we'll let you know in the app before the change takes effect, and update the date above.