Privacy policy

• We collect only what the app needs to work: your login, and the money records you choose to add.
• Your personal finances are private. People see them only if you share an account with them.
• We don't sell your data, show ads, or use analytics or advertising trackers.
• You can export your data or delete your login at any time, from inside the app.

G&M Wallet is run by G&M Wallet ("we", "us"). We decide how your personal data is used and are responsible for it. You can reach us at [email protected].

Your login: your email address, your name, and your password, which we store only as a secure hash, never as readable text. If you log in with Google or Apple, we receive an account identifier and your email from them. With Apple's "Hide My Email", that's a private relay address.

Your settings: language, main currency, first day of the week, and which notifications you want.

What you record: accounts (name, type, balance, colour), expenses, income, transfers, contributions, repayments, categories, budgets, savings goals, bills, notes, comments and exchange rates.

Receipt photos: only the photos you choose to attach. The app asks for camera or photo access only when you attach one.

Spaces: the spaces you're in, your role, and invitations. To invite someone, you give us their email and Profile ID.

Devices and security: for each device you log in on, a short description (for example "iPhone"), when it was last used, and a push notification token if you turn notifications on. Your IP address is used to protect logins against abuse, and isn't added to your profile.

Messages to us: what you write when you contact support.

We don't collect bank logins, card numbers, contacts, location, microphone recordings or advertising identifiers.

• To run the app: save and sync your records, calculate balances, and show each person what they're allowed to see.
• To send the notifications you turned on, like a repayment to confirm or a bill that's due.
• To keep G&M Wallet safe: protect logins, stop abuse, and fix problems.
• To answer you when you contact us.
• To follow the law when we have to.

We don't use your data for advertising, and we don't sell it or share it for others' marketing.

• Contract: to provide the app you signed up for.
• Legitimate interests: to keep the service secure and to improve it, in ways you'd expect.
• Consent: for push notifications and camera or photo access. You can withdraw it anytime in the app or in your phone's settings.
• Legal obligation: when the law requires us to keep or share information.

You. Everything you record is yours.

People in your spaces see your name and what's recorded in that space. They never see your personal accounts, your other spaces, or which of your accounts you paid from.

People you share with. If you share an account, the person sees exactly what you chose: balances only, or balances and transactions. Read-only, until you stop.

Our team, only when needed to help you, keep the service safe, or follow the law.

Service providers who run parts of the service for us, under contract, and only for that purpose:

• Our hosting provider, which runs our servers and database.
• Expo, Apple Push Notification service and Firebase Cloud Messaging (Google), which deliver notifications. They receive your device's push token and the notification text.
• Google and Apple, if you choose to log in with them.

We may share information if the law requires it, or to protect people's safety. If G&M Wallet is ever sold or merged, this policy will still apply to your data, and we'll tell you first.

Our service providers may process data in other countries. When data leaves the European Economic Area or the UK, we use safeguards required by law, such as the European Commission's Standard Contractual Clauses.

• All traffic between the app and our servers is encrypted (HTTPS).
• Passwords are stored only as strong hashes. Login tokens are stored on our side only as hashes, and on your phone in its secure storage (Keychain or Keystore).
• Logins are protected against guessing with rate limits.
• A copy of your data is kept on your device so you can look at it offline. Logging out removes your login from the device.

No system is perfectly secure, but we work hard to protect your data, and we'll tell you without delay if a breach affects you.

• Your data is kept for as long as your login exists.
• A device that hasn't been used for 180 days is logged out, and its login record and push token are deleted.
• When you delete your login, we delete your login, profile, personal accounts and records, and the sharing you set up. Copies in backups disappear within 30 days.
• Records you made in shared spaces stay in those spaces, shown as "Former member", so other people's balances stay correct.

Depending on where you live, you have the right to access, correct, export, delete or restrict your data, and to object to how we use it. Most of this you can do yourself in the app:

• Export: Settings → Your data → Export my data (a JSON file).
• Correct: edit your name, settings and records in the app.
• Delete: Settings → Security & devices → Delete my login and data.
• Notifications: Settings → Notifications, or your phone's settings.
• Sharing: change or stop anything you share, anytime.

For anything else, email [email protected]. We reply within 30 days. You can also complain to your local data protection authority.

G&M Wallet isn't meant for anyone under 16. We don't knowingly collect data from children. If you think a child has given us data, tell us and we'll delete it.

This website sets no cookies and uses no analytics. It remembers the language you pick in your own browser, and nothing is sent to us.

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you in the app before it takes effect.

Questions or requests about privacy: [email protected]. Everything else: [email protected].