Privacy Policy

Last updated: November 6, 2026

gastos is a personal finance tracker for iPhone and Android. It is built to keep your money data private.

What gastos stores

• On your phone: everything you enter — wallets, balances, transactions, categories, budgets, recurring items, and cards & passes. This stays in the app on your device, even if you never create an account.
• In your gastos account (optional): if you choose to sign in (with Apple on iPhone, or with Google on Android), your wallets, transactions, categories, budgets and recurring items are also stored on our server so they can sync between your devices. We also store the account identifier and email address that Apple or Google share with us, and, for Google, the name and profile picture link on your Google account (gastos doesn't use them). With Apple's "Hide My Email", that email is a private relay address.
• Never synced: cards & passes (loyalty cards, IDs, health cards and their codes) and card photos stay on the phone where you added them.

We don't collect anything else. There are no ads, no analytics SDKs, no tracking across apps or websites, and no access to your contacts, location or bank logins. gastos never connects to your bank.

Payments

The gastos subscription is sold and billed by Apple through the App Store on iPhone, and by Google through Google Play on Android. We never see your card or payment details; the store only tells the app whether your subscription is active.

Camera and photos

gastos uses the camera only when you choose to scan a QR code or barcode, and your photos only when you pick a card photo or a picture of a code. Codes are read on your phone and images are never uploaded.

How synced data is stored and protected

• Synced data is stored by our database provider, Supabase, in Singapore.
• Data is encrypted in transit (HTTPS) and at rest.
• Each account can only read and change its own records; the database enforces this with row-level security.
• App lock uses your phone's own lock: Face ID, Touch ID or your passcode on iPhone; fingerprint, face unlock or your screen lock on Android. gastos never sees your biometric data.

How we use it

Only to run the app: showing your data and syncing it between your devices. We don't sell, rent or share your data, and we don't use it for advertising or profiling.

Your choices

• Use gastos without an account. Nothing leaves your phone.
• Sign out in Settings → Sync. Syncing stops; data on your phone stays.
• Delete your account in Settings → Sync → Delete account, or ask us by email if you no longer have the app. This permanently deletes your account and everything stored on our server. Data on your phone stays until you delete the app.

Children

gastos isn't directed at children under 13.

Changes

If this policy changes, we'll update this page and the date above.

Contact

Questions or requests about your data: gasto@air-rally.com.