Privacy Policy

Guaca is a personal finance application available at useguaca.com and as apps for iPhone, iPad, and Mac. This policy describes what data we collect, how we use it, and the rights you have over it. It applies to the web app and to the native Guaca apps.

Account data. Your name, email address, and — if you sign in with Google — the profile picture associated with your Google account.

Financial data you enter. Accounts, assets, debts, transactions, budgets, income, and your retirement plan settings. You enter this data yourself and it is visible only to you.

Data from integrations you connect. If you connect external services (for example exchanges, wallets, or payment platforms), we read only the balances and movements needed to keep your information up to date, using credentials you provide.

Technical data. Session cookies required to keep you signed in. We do not use advertising cookies or third-party trackers.

If you choose to sign in with Google, we request only your basic profile information: name, email address, and profile picture. We do not access your email messages, contacts, files, or any other data in your Google account.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Provide the service: display your net worth, budgets, expenses, and projections.
• Sync your information across your devices (web, iPhone, iPad, and Mac).
• Run calculations such as valuations, currency conversion, and retirement planning.
• Answer your questions in the AI financial chat, when you choose to use it: your messages and the necessary financial context are sent to the AI provider solely to generate the response.
• Manage your subscription, if you have one.

We do not sell your data or use it for advertising.

We share data only with the infrastructure providers required to operate Guaca, which process it on our behalf:

• Application hosting and execution (Vercel).
• Database (Supabase).
• Cross-device sync (PowerSync).
• Google authentication (Google LLC).
• Subscription management (RevenueCat and the app stores).
• AI providers, only when you use the financial chat.

We may also disclose information when required by law or a competent authority.

We keep your data for as long as your account exists. You can request deletion of your account and all of your data by writing to our contact email; deletion is completed within 30 days at most, except for data we must retain to comply with legal obligations.

All communication with Guaca is encrypted in transit using TLS. Database access is restricted, and your financial data is only reachable from your own account. Still, no system is infallible: we recommend using a unique password or Sign in with Google.

Under Colombia's personal data protection regime (Law 1581 of 2012) and equivalent regulations, you have the right to access, update, rectify, and delete your personal data, and to revoke your consent to its processing. You can exercise these rights from within the app or by writing to our contact email.

Guaca is not directed at people under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us so we can delete it.

We may update this policy from time to time. The current version will always be published on this page with its update date, and if a change is significant we will notify you in the app.

For any privacy questions or to exercise your rights, write to soporte@useguaca.com.