Privacy Policy

Last Updated: December 2025

Important: This Privacy Policy explains how GoodShare collects, uses, and protects your personal data.

1. Data Controller

GoodShare

Website: goodshare.app
Email: support [at] goodshare.app

2. Data We Collect

2.1 Account Data

Email address - for account creation and authentication
User ID - unique identifier from Firebase
Login timestamps - for security purposes

2.2 Financial Data

Budget books - names and settings
Transactions - income and expense entries
Categories - custom and default categories
Standing orders - recurring payments
Receipt images - photos you attach to transactions

2.3 AI Receipt Scanner (Optional)

When you use the AI Scanner feature:

Receipt images - temporarily sent to Google Gemini AI for text extraction
Extracted data - amount, date, merchant, category
Not stored - images are processed in real-time and not permanently stored by Google

Your Control: The AI Scanner requires your explicit consent before each scan. You can always add transactions manually or attach receipts without AI processing.

2.4 Analytics & Crash Reports

Firebase Crashlytics - crash logs to fix bugs and improve stability
Firebase Analytics - anonymized usage statistics (e.g., feature usage, conversion events)
No Advertising ID - we explicitly disabled advertising tracking

2.5 Shared Budget Books

When you share a budget book, all members can see all transactions
Members can invite or remove other users
When you leave a book, your contributions remain visible to others

3. How We Use Your Data

Provide app functionality
Sync data across devices
Enable shared budgets with other users
AI Receipt Scanning (with your consent) - extract transaction data from receipt images
Improve the app and fix bugs

4. Legal Basis (GDPR)

Your consent (Art. 6(1)(a) GDPR)
Contract performance (Art. 6(1)(b) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)

5. Data Storage & Third-Party Services

5.1 Firebase (Google LLC)

We use Google Firebase for secure data storage:

Firebase Authentication - user login
Cloud Firestore - structured data storage
Realtime Database - real-time synchronization
Firebase Storage - receipt image storage

Data is primarily stored in EU region servers.

5.2 Google Gemini AI (Receipt Scanner)

When you use the AI Scanner:

Service - Google Gemini 2.0 Flash API
Data sent - Receipt images (only when you tap "Scan & Fill")
Purpose - Extract amount, date, merchant, category
Storage - Images processed in real-time, not stored permanently by Google
Legal basis - Your explicit consent (opt-in per scan)

Google AI Terms | Google Privacy Policy

5.3 Premium & Payments

14-day free trial - no credit card required
Payment processing - handled by Google Play (we do not store payment data)
Cancellation - anytime via Google Play Store

5.4 Data Retention

Account data - retained while account exists + 30 days after deletion
Receipt images - stored until you delete the transaction or account
AI Scanner data - processed in real-time, not retained by Google
Crash reports - 90 days (Firebase Crashlytics default)
Analytics data - 14 months (Firebase Analytics default)

6. Your Rights

Right of access (Art. 15) - request a copy of your data
Right to rectification (Art. 16) - correct your data
Right to erasure (Art. 17) - delete your data
Right to data portability (Art. 20)
Right to object (Art. 21)

7. Data Security

Encryption in transit (HTTPS/SSL)
Firebase security rules
Regular security updates

8. Contact

Questions? Contact us: support [at] goodshare.app

Data protection authority: edpb.europa.eu