Privacy Policy
Privacy Policy
Last updated: 2026-09-22
Guetshi is built and operated by Alessandro Nicoli, Switzerland (the "Operator", "we"). This policy explains what data we collect, why, and your rights under GDPR (EU) and the Swiss FADP.
1. Summary
- Your vouchers stay on your device. There is no Guetshi account and no Guetshi server holding them.
- With Pro they sync through your own iCloud account, which we cannot read.
- Scanning happens on the device — the photo is never uploaded and never kept.
- We collect anonymous crash reports and coarse usage counts so we can fix bugs and see what gets used.
- We do not sell data, run ad trackers, or send your data to brokers.
2. Data Controller
Alessandro Nicoli
Zürcherstrasse 53b
8104 Weiningen, Switzerland
Email: info@guetshi.app
3. What we collect & why
Voucher data
Everything you type or scan into a voucher — title, issuer, amount and currency, redemption code, notes, expiry date, whether you marked it redeemed, and the reminder days you picked — is stored in the app's own database on your device, together with a few settings (default currency, whether sync is on, whether you have Pro). We receive no copy. Lawful basis: Contract (GDPR Art. 6(1)(b)).
iCloud sync (Pro)
With Pro you can turn on sync. Your vouchers are then copied into your own private iCloud database through Apple's CloudKit, so your other devices signed into the same Apple Account can read them. They sit in your iCloud account, not ours — we cannot see them, and Apple's handling of that data is covered by the Apple Privacy Policy. Turn sync off and new changes stay on the device. Lawful basis: Contract.
Camera and scanning
Scanning uses the camera to read a paper voucher. The image is processed on your device by Apple's document scanner and, on devices that support it, Apple's on-device language model to pull out the fields. The photo is not uploaded anywhere and is not kept — only the fields it filled in, which you can edit before saving. Lawful basis: Contract.
Notifications
Reminders are scheduled by iOS on your device and fire at 9am on the days you chose. The reminder text is built on the phone and is not sent through any server of ours. Lawful basis: Contract.
Purchases
Guetshi Pro is sold through the App Store. We use RevenueCat to manage purchases and unlock your Pro entitlement across devices. The app sends RevenueCat an anonymous installation identifier (not your email or name) together with the store's purchase and entitlement status. We never send your payment details — your card is handled by Apple, and neither RevenueCat nor we ever see it. RevenueCat is based in the United States; transfers rely on the Standard Contractual Clauses in our data processing agreement with them. RevenueCat receives nothing about your vouchers. Lawful basis: Contract (GDPR Art. 6(1)(b)).
Crash reports
When the app crashes we send an anonymous report (stack trace, device model, OS version, app version) to GlitchTip, a crash reporter we host ourselves. No voucher content is attached. Lawful basis: Legitimate interest in fixing bugs (GDPR Art. 6(1)(f)). You can opt out by uninstalling the app.
Usage counts
Once a day, at most, the app sends a single anonymous snapshot to the same GlitchTip instance. It contains only coarse ranges, never content:
- how many vouchers you have, in buckets (0, 1, 2–5, 6–20, 21–100, 100+)
- how many of them are active, expiring, expired or redeemed, in the same buckets
- how many reminders are set
- how often you have scanned, created, redeemed, or seen the paywall
- whether Pro is active
Voucher titles, issuers, codes, amounts, notes and dates are never sent. Lawful basis: Legitimate interest in understanding which features are used (GDPR Art. 6(1)(f)). You can opt out by uninstalling the app.
Website analytics
Our marketing website (guetshi.app) uses Umami, a privacy-focused, cookieless analytics tool, to count page views and referrers in aggregate. Umami sets no cookies, does not collect data that identifies you personally, and does not track you across other websites. The Guetshi app itself contains no Umami. Lawful basis: Legitimate interest in understanding site traffic (GDPR Art. 6(1)(f)).
What we don't collect
- No advertising identifiers (IDFA / GAID).
- No third-party analytics SDKs in the app (no Mixpanel, no Amplitude, no GA).
- No precise location.
- No address book / contacts.
- No microphone access.
- No photo library access, and no camera images beyond the moment of a scan.
- No account: we never ask for your email or a password.
4. Where the data is stored
Your vouchers live on your device, and — if you turn on sync — in your own iCloud account, held by Apple under your Apple Account. Crash reports and usage counts go to our own GlitchTip instance on a VPS in Germany. We operate no database of vouchers.
5. Sub-processors
| Provider | Purpose | Region |
|---|---|---|
| Apple Inc. | App Store purchases, iCloud sync (your own account) | Apple's applicable region (see Apple privacy policy) |
| RevenueCat, Inc. | Purchase & subscription entitlement management | USA (Standard Contractual Clauses) |
| Hetzner Online GmbH | Server hosting (crash reporting, analytics, website) | EU (Germany) |
| GlitchTip (self-hosted) | Anonymized crash reports and usage counts | EU (Germany) |
| Umami (self-hosted) | Cookieless website analytics (guetshi.app) | EU (Germany) |
6. How long we keep your data
Your vouchers are kept until you delete them or delete the app — we hold no copy to keep. Crash reports and usage events are auto-deleted after 90 days. Website analytics are kept in aggregate only.
7. Your rights (GDPR / FADP)
- Access: request a copy of all data we hold about you. For most people the honest answer is anonymous crash reports and counts that cannot be tied back to you.
- Rectification: correct anything inaccurate.
- Erasure: delete a voucher in the app and it is gone from the device, and from iCloud if sync is on. Delete the app and everything local goes with it; to clear what CloudKit holds, remove Guetshi's data in your iCloud settings.
- Portability: your voucher data is already on your device, and is included in an encrypted device backup.
- Objection / withdrawal: opt out of crash reports and usage counts by uninstalling the app.
- Complaint: lodge a complaint with the Swiss FDPIC (Switzerland) or your national EU data protection authority.
To exercise any of these: info@guetshi.app.
8. Children
Guetshi is not directed at children under 13 and we do not knowingly collect their data.
9. Changes
We'll post material changes on this page and, where required, notify you in-app. Continued use after a change means you accept the updated policy.
10. Contact
Questions? info@guetshi.app
← Guetshi