Gastify Legal

Terms of Service (ToS)

By using the Gastify app or website, you agree to these Terms, which apply together with the EULA.

1. Service nature

• Gastify is an informational tool focused on grocery shopping and consumption habits.
• We do not provide financial, accounting, or tax advice.
• Usage is personal and non-commercial unless Gastify grants prior written authorization.

2. Platform use

• You are responsible for the information you submit and for having authorization to upload documents.
• You may not use the platform for unlawful, abusive, or security-compromising activities.
• We may suspend access in cases of fraudulent use, malicious behavior, or breach of these Terms.

3. Accuracy and availability

• Automated processing may contain errors due to image quality, format, or document content.
• We may change, improve, or update features of the service; when a change is significant we will let you know in the app or on this website.
• AI-generated analyses and answers are informational and should be reviewed before making purchase decisions.

4. Liability

To the extent permitted by law, Gastify is not liable for indirect damages, loss of profits, or service interruptions caused by third parties (for example, infrastructure providers). This limitation does not apply where the law prohibits limiting liability or where non-waivable consumer rights apply.

Privacy Policy

This policy applies to the Gastify app (iOS, and Android once available) and to the gastify.io website. We process your data under Colombia's Law 1581 of 2012 and related regulations. We do not show ads, we do not track you across other apps or websites, and we do not sell your data.

1. Data controller

• Controller: Gastify.
• Location: Pereira, Risaralda, Colombia.
• Contact: hola@gastify.io.

2. Data we process

• Using the app without an account: you can use Gastify without creating an account. Your purchases, lists, and preferences are stored on your device.
• Photos and documents you scan or upload: when you scan a receipt or a product label, or upload a PDF invoice, the file is sent to our server to extract the store, products, prices, and totals. It is processed in real time and we do not keep it after returning the result.
• Insights and "Pregúntale a Gastify" (Ask Gastify): to generate summaries and answer your questions we send your question and a summary of the purchases and lists stored on your device. They are processed in real time and not kept.
• Optional account (Inbox Gastify): if you create one, we process your email address, the alias you choose (@gastify.io), a user identifier, the electronic invoices delivered to your alias (PDF, XML, or ZIP attachments, with the email sender and date), and the data extracted from them. PDF invoices sent to your alias are analyzed automatically by Google Gemini on arrival as part of the Inbox service; this does not depend on the app's AI permission. XML invoices are read without AI.
• Notifications: if you have an account and allow notifications, we store your device's push notification token to tell you when a new invoice arrives.
• Shared lists: when you share a list, its name, its items, and the names your guests type are stored on our server to keep it in sync. The link expires after 12 hours or when you revoke it.
• App rating: the app may ask you for an App Store rating through the standard system prompt of the Apple App Store. Gastify sends no data for this.
• Technical data: minimal operational logs (for example IP, timestamp, and request type) for security and operations.
• Website: the email you submit through the website form to receive Gastify updates, and aggregate analytics via Google Analytics 4 on the website.
• Usage analytics in the app: we use Google Analytics for Firebase to measure how Gastify is used: events such as completing onboarding, scanning an invoice, creating or sharing a list, viewing insights, and sharing the monthly summary card. Events carry only categories and approximate counts (ranges); they never include amounts, product names, store or merchant names, your name, or your email. The SDK also receives an app-instance identifier (pseudonymous, not tied to your Gastify account: the app never sends your user ID to Analytics), approximate location that Google derives from your IP address (city or region level), device and app information (model, OS version, app version), and usage sessions. You can turn it off at any time under Perfil (Profile) → Estadísticas de uso (Usage statistics); it is on by default.
• We do not collect your precise location, contacts, health data, or advertising identifiers (IDFA). The only approximate location is the city- or region-level location Google derives from the IP address in usage analytics.

3. Purposes

• Extract and organize data from your invoices, receipts, and labels.
• Generate insights, spending summaries, and answers to your questions about your purchases.
• Receive and process electronic invoices sent to your Inbox Gastify and notify you.
• Sync shared lists with the people you invite.
• Operate, maintain, and secure the platform, and provide support.
• Send you Gastify updates if you left your email on the website, and measure website usage.
• Understand and improve the product through in-app usage analytics.

We do not use your data for advertising or to train artificial intelligence models. In the app's usage analytics we do not collect the advertising identifier (IDFA), Google Signals and ads personalization are turned off, and there is no tracking across other companies' apps or websites.

4. Processors and transfers

To provide the service we rely on the following processors:

• Google Cloud (Vertex AI, Gemini models): AI analysis of the photos and documents you scan or upload, the invoices in your Inbox, and your questions to "Pregúntale a Gastify". Google processes this data on Gastify's behalf and, under Google Cloud's terms, does not use it to train its models.
• Cloudflare: servers, database, and storage.
• Google Firebase Cloud Messaging and Apple Push Notification service: push notification delivery.
• Brevo: account activation and verification emails, and the updates you requested on the website.
• Google Analytics: website analytics.
• Google LLC (Google Analytics for Firebase): in-app usage analytics, as described above. See Google's Privacy Policy.

Some providers process data outside Colombia (for example in the United States). Before your data is sent to the AI for the first time (scanning, PDF upload, insights, or "Pregúntale a Gastify"), the app explains what is sent to Google Gemini and asks for your permission. If you decline, those features send nothing, and you can change your choice at any time from the app's Profile. This permission does not cover PDF invoices delivered to your Inbox Gastify: if you create an account, those invoices are analyzed by Google Gemini on arrival as part of the service. The app asks for this permission when you create the account; if you later turn it off, invoices delivered to your alias keep being analyzed for as long as the account exists. To stop it, delete your account. We apply reasonable contractual and security safeguards to protect your information.

5. Data retention

• Data on your device: until you delete it or uninstall the app.
• Scanned photos, documents, and AI questions: not kept after processing.
• Inbox Gastify account, received invoices, and extracted data: for as long as your account exists.
• Shared lists and guest names: deleted within 24 hours after the link expires or is revoked (also if you delete your account).
• Emails submitted on the website to receive updates: until you request deletion or for up to 24 months from the last interaction.
• In-app usage analytics event data (Google Analytics for Firebase): 14 months.
• Technical logs: according to each provider's operational and security windows.
• If legal retention is required, we may keep data for the applicable legal period.

6. Deleting your account and data

You can delete your account from the app (Perfil (Profile) → Datos (Data) → Eliminar cuenta (Delete account)) or by email. See the steps, what is deleted, and what is kept in Delete your account and data.

7. Your rights

You may request access, updates, corrections, or deletion of your data, and you may revoke consent, by emailing hola@gastify.io with subject Data Rights.

We handle requests according to Colombian law. If additional information is needed to process your request, we will ask for it through the same contact channel. These rights also apply to usage analytics data. Because the app-instance identifier is pseudonymous and not tied to your account, turning analytics off in the app is the most direct way to stop sending it.

8. Security

All communication between the app and our servers is encrypted (HTTPS/TLS), and access to data is limited to what is needed to operate the service.

9. Minors

Gastify is a general-purpose tool for organizing household shopping and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you are a minor, create the optional account (Inbox Gastify) only with the authorization of your parent or legal guardian. If we identify data from a minor without valid authorization, we will delete it as soon as reasonably possible.

10. Changes to this policy

If we change this policy, we will publish the new version on this page with its update date.

Delete your account and data

This section applies to the Gastify app, developed by Gastify. You can delete your account and data from the app or, if you no longer have it installed, by emailing us. Deletion is permanent and cannot be undone.

From the app

1. Open Gastify and go to Perfil (Profile).
2. In the Datos (Data) section, tap Eliminar cuenta (Delete account).
3. Confirm in the prompt. If deletion on our servers fails, your local data is not erased and you can try again.

Without the app (by email)

If you no longer have the app or cannot open it, email hola@gastify.io with the subject Delete account and include:

• Your Inbox Gastify address (for example, youralias@gastify.io) or the email you used to create the account.
• Optionally, the name you used in the app, to help us identify you.
• We may ask you to confirm you own the account before deleting it. We will confirm by email once it is done.

What is deleted

• Your Inbox Gastify account: email, name, currency, and alias.
• Invoices received at your alias (PDF, XML, or ZIP attachments) and the data extracted from them.
• The notification tokens of your devices.
• The automatic email-forwarding verification records.
• Data stored on your device (invoices, purchases, lists, and preferences), when you delete from the app. If you email us, remove it by uninstalling the app.

What is kept and for how long

• Shared lists: a shared list link is not removed when you delete your account. It stops working 12 hours after creation or when you revoke it, and its data (name, items, and guest names) is deleted within the following 24 hours.
• Authentication record in Firebase (Google): if you activated your account with an email link, Google keeps a record with your email and identifier. Deleting from the app does not remove it automatically; if you want us to delete it, ask by email.
• Technical logs: our providers' operational logs (for example Cloudflare) may include identifiers, sender, subject, and file names of received emails, and are kept according to each provider's windows. We cannot delete them on request.
• Usage analytics (Google Analytics for Firebase): pseudonymous events not linked to your account, for 14 months. You can turn it off in Profile → Usage statistics (Estadísticas de uso).
• Legal obligation: if the law requires us to keep any data, we keep it only for the applicable legal period.

For more on how we process your data, see the Privacy Policy.

Support

Need help with Gastify? Email us at hola@gastify.io. We reply within 2 business days.

• Do I need an account? No. You can scan invoices, create lists, and see insights without an account. The account (Inbox Gastify) is optional and is only used to receive electronic invoices by email and to share lists.
• How do I delete my account? In the app go to Perfil (Profile) → Datos (Data) → Eliminar cuenta (Delete account), or see Delete your account and data.
• The AI misread something. Send us the invoice at hola@gastify.io and we will look into it.

Cookie Policy and Similar Technologies

1. What we currently use

We currently use Google Analytics 4 to measure landing-page usage (for example page views, sessions, and aggregate events). This may include analytics cookies such as _ga and _ga_*.

We do not use advertising cookies. If we ever enable marketing pixels or cookies, we will update this policy and request prior consent where required.

2. How to manage cookies

You can block or delete cookies through your browser settings. Please note this may affect certain measurement functions or parts of the site experience.

End User License Agreement (EULA)

This agreement applies to your use of the Gastify app, together with the terms of the app store you downloaded it from.

1. License

A limited, personal, non-exclusive, non-transferable, and revocable license is granted to use the app in accordance with these terms.

2. Restrictions

• You may not copy, resell, sublicense, or commercially exploit the app without authorization.
• You may not attempt to reverse engineer, interfere with, or compromise service security.

3. Intellectual property

The software, brand, design, code, and components of Gastify are owned by their rights holder and protected by intellectual property laws. Your data remains yours.

4. Termination

We may suspend or terminate access in case of serious breach of these terms or misuse of the platform.

5. Governing law and jurisdiction

These terms are governed by Colombian law. Any dispute will be submitted to the competent courts in Pereira, Risaralda, without prejudice to mandatory consumer protection rules that may apply.