← Back to home

Privacy Policy

Last updated: February 7, 2025

1. What We Collect

When you sign in with Google, we receive and store:

• Your Google account email address and display name
• An OAuth refresh token to access your Google Sheets on your behalf

When you use the Telegram bot, we store:

• Your Telegram user ID (to link your Telegram account to your Google account)
• Expense data you submit (amounts, categories, descriptions) — written directly to your own Google Sheet

2. How We Use Your Data

• To authenticate you and connect your Telegram and Google accounts
• To read and write expense entries to your personal Google Sheet
• To generate spending reports and budget alerts you request
• To process receipt images through AI for data extraction

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

GYST Budget Bot integrates with:

• Google — for OAuth authentication and Google Sheets storage
• Telegram — as the messaging interface
• AI providers (Google Gemini, Anthropic Claude, or Moonshot Kimi) — to process receipt images and natural-language expense input. Data sent to these providers is limited to the content you submit and is processed according to their respective privacy policies.

4. Data Storage & Security

Your expense data lives in your own Google Sheet in your Google Drive — you retain full ownership and control. OAuth tokens stored on our server are encrypted at rest. Session cookies are signed and HTTP-only.

5. Children's Privacy

GYST Budget Bot is not directed at children under 13. We do not knowingly collect personal information from children under 13.

6. Data Retention & Deletion

You can revoke access at any time by removing the app from your Google account permissions. Upon revocation, we can no longer access your Google Sheet. To delete your account data from our system, contact us and we will remove all stored records.

7. Contact

For privacy-related questions, reach out at support@budget.et.