Introduction

Gastón (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.

Want this in plain language instead? How I handle your data answers the same questions without the legal phrasing. This page remains the binding version.

Information We Collect

Personal Information

• Account Information: Email address, name, and authentication credentials
• Financial Data: Expense records, categories, budgets, and payment methods you create
• Usage Data: App usage statistics and preferences

Automatically Collected Information

• Device information (device type, operating system)
• Log data (access times, app features used)

How We Use Your Information

We use the collected information to:

• Provide and maintain the Gastón service
• Manage your account and authenticate your access
• Store and organize your expense data
• Improve and optimize the app experience
• Send important updates and notifications (with your consent)

Data Storage and Security

• Your data is stored securely on our servers
• We use industry-standard encryption for data transmission
• We implement appropriate security measures to protect your information
• No other Gastón user can see your expenses

Being straight with you: Gastón is not end-to-end encrypted. Your expenses are stored in a form our systems can read — that is what makes categories, budgets, reports and the assistant possible at all. So the small number of people who operate Gastón can technically reach the database, and do so only to keep the service running, investigate a bug, or help you with something you asked us about. Never to browse, never to sell, never for anything outside running Gastón.

Data Sharing

We do NOT:

• Sell your personal information to third parties
• Share your expense data with advertisers
• Use your data for purposes other than providing the Gastón service

We may share information only:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt out of non-essential communications

Third-Party Services

Gastón may use third-party services for:

• Authentication (Google OAuth)
• Cloud hosting and storage
• AI features (Anthropic’s Claude models, accessed through the Vercel AI Gateway) — see “AI Features” below

These services have their own privacy policies governing their use of your information.

AI Features

Some Gastón features use an AI model to turn your expense data into something readable — your Monthly Review summary, and, where available, the assistant that answers questions about your spending.

To do that, the relevant expense records are sent to Anthropic’s Claude models through the Vercel AI Gateway. That includes the descriptions you wrote, category names, amounts, dates and currencies, along with any question you type. It does not include your password, and it is limited to the data needed to answer the question at hand rather than your whole history.

These features are read-only: the AI can look at your data and talk about it, but it cannot create, edit or delete anything in your account.

Where the assistant is available, conversations with it are stored encrypted in our database so you can pick up where you left off. Starting a new chat deletes the conversation and every message in it, straight away. There is no conversation history to browse and no way to restore one, so this is not reversible. The only copies that outlive it are our encrypted backups, which hold it until they age out. Deleting your account removes everything else along with it.

Usage Analytics

We collect usage analytics linked to your account — which features you use, such as logging an expense or opening the Monthly Review. This never includes amounts, merchant names, category names, or note text.

You can turn this off at any time: in the web app, go to Settings → Privacy; in the mobile app, go to You → Preferences.

Children's Privacy

Gastón is not intended for users under the age of 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the “Last Updated” date
• Sending an in-app notification
• Posting a notice in the app

Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your data will be permanently deleted within 30 days
• Backups may be retained for up to 90 days for disaster recovery

Separately, usage analytics events are deleted 180 days after they are recorded — automatically, and whether or not you delete your account.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Email: maxivarela@gmail.com
• App: Use the in-app support feature

Consent

By using Gastón, you consent to this Privacy Policy and agree to its terms.