Privacy Policy

What we collect

Your account

• Email address and password. Your password is stored by our sign-in provider in a scrambled form (a one-way hash), so nobody, including us, can read it.
• Profile details you choose to add: your name, phone number, profile photo, an email address for receipts and notices, and up to three additional email addresses.

Your budget

Everything you enter to run your budget: your income, bills and other entries, amounts and due dates, payments you record, account balances, savings and loan details, notes, and categories. For an entry you can also add the company's name, your account number with them, their phone number and website, and the username you sign in with there.

Family plans

If you own a Family plan, the email addresses of the people you invite and, if you add them, their birthdates. Members must be 13 or older.

Payments

When paid plans are available, you pay through Stripe. Stripe collects your card details directly; we receive only a customer reference, your plan, billing period and subscription status.

The waitlist

If you join a waitlist for a paid plan, your email address and the plan you chose.

Invitations you send

If you use Share to invite someone, we send the email on your behalf to the addresses you enter, with your name on it. We don't keep those addresses afterwards.

Technical information

Our hosting and sign-in providers automatically record basic request information, such as IP address, browser type and time of request, to run the service and protect it from abuse. Gobboo uses cookies only to keep you signed in, and your browser's own storage to remember display preferences. We don't use advertising cookies, analytics, or tracking pixels.

How we use it

• To run Gobboo: show your budget, calculate your figures, and keep your data between visits.
• To sign you in and keep your account secure.
• To manage your subscription and billing, once paid plans open.
• To email you about your account: receipts, security notices, replies to your messages, and, if you joined the waitlist, a note when paid plans open.
• To fix problems and prevent misuse.

We don't sell your personal information, share it for advertising, or use your budget to market anything to you.

Who we share it with

Only the companies that run parts of Gobboo for us, and only what each needs:

• Supabase: our database and sign-in provider. Stores your account and budget.
• Vercel: hosts the website.
• Stripe: processes payments.
• Resend: sends Gobboo's emails, such as invitations and replies to your support requests.
• Anthropic: answers the questions you type into the Help assistant. It receives only what you type there, not your budget.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a transfer of the business, such as a sale or a change of legal owner. If that happens, this policy keeps applying to your data.

Family plans: what the owner can see

The owner of a Family plan can open any member's account and see or change that member's budget. This is how a Family plan works, so join one only with someone you are comfortable having that access. The owner can also see each member's email address, status and birthdate. Members can't see the owner's budget or each other's.

Help & Support, and when Support looks at your budget

When you send a support request, we keep it and the conversation that follows so we can help you and see what was said. Replies are also emailed to you. Screenshots you attach are kept privately with that request: only you and Gobboo Support can open them.

Support conversations are kept for 2 years after they close, so that we can look back at what was said if there is a question or a dispute about it. This applies even if you delete your account: your name and email are removed from them, but the messages (and which member of our team wrote them) are kept until the 2 years are up, and then deleted along with any screenshots.

Gobboo Support only looks at your budget when you say yes. If seeing your budget would help with one of your requests, Support asks in that request's conversation, and nothing happens unless you choose Allow. Then:

• Support can only view your budget. Nothing can be added, changed or deleted while they look.
• Each Allow is for one look, of at most 30 minutes. When Support finishes, your permission ends with it; to look again they must ask again, and you choose again.
• You can turn it off at any time in the conversation, and closing the request ends it.
• Your conversation shows when Support asked, what you answered, and when they started and finished looking.
• We record who looked, when, and for which request.

Support can also change or cancel a paid plan for you, but only when you ask. Those changes are made through Stripe, follow the same rules as changing your plan yourself, and are recorded too.

How long we keep it

We keep your data while your account is open. If you ask us to delete your account, we delete it and your budget within 30 days. Copies in our providers' routine backups expire on their normal schedule after that. Payment records may be kept longer where tax or accounting law requires it. Waitlist entries are deleted when you ask, or once paid plans have opened and we've let you know.

Your choices and rights

Wherever you live, you can ask us to:

• Give you a copy of your data.
• Correct it. Most of it you can edit yourself in the app.
• Delete your account and all its data.

Email privacy@gobboo.com from the address on your account. We'll respond within 30 days and won't treat you differently for asking. Some US states give residents additional rights; we honor those requests the same way.

Children

Gobboo is not meant for children under 13. We don't knowingly collect information from anyone under 13, and family members must be 13 or older. If you believe a child under 13 has an account, email privacy@gobboo.com and we'll delete it.

Security

How we protect your data, and what we deliberately don't hold, is described on our Security page.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use information we already have, we'll tell you by email or in the app before it takes effect.

Contact

Questions or requests: privacy@gobboo.com.