GuetshiPrivacy Policy
Privacy Policy
Last updated 22 September 2026
The short version
Your vouchers live on your iPhone. There is no Guetshi account and no Guetshi server holding them. Scanning happens on the device. The only things that ever leave your phone are crash reports, a small daily count of how much the app is used, and — if you buy Pro — the purchase receipt Apple issues.
What the app stores on your device
Everything you type or scan into a voucher: its title, issuer, amount and currency, redemption code, notes, expiry date, whether you marked it redeemed, and the reminder days you picked. It is kept in the app's own database on the device, along with a few settings (default currency, whether sync is on, whether you have Pro).
iCloud sync (Pro)
With Pro you can turn on sync. Your vouchers are then copied into your own private iCloud database through Apple's CloudKit, so your other devices signed into the same Apple Account can read them. They sit in your iCloud account, not ours — we cannot see them. Apple's handling of that data is covered by the Apple Privacy Policy. Turn sync off and new changes stay on the device.
Camera and scanning
Scanning uses the camera to read a paper voucher. The image is processed on your device by Apple's document scanner and, on devices that support it, Apple's on-device language model to pull out the fields. The photo is not uploaded anywhere and is not kept — only the fields it filled in, which you can edit before saving.
Notifications
Reminders are scheduled by iOS on your device and fire at 9am on the days you chose. The reminder text is built on the phone and is not sent through any server of ours.
Purchases
Guetshi Pro is sold through Apple's In-App Purchase. Apple processes the payment; we never see your payment details. We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous identifier for your installation and the receipt Apple issues, and returns whether Pro is on. It receives nothing about your vouchers.
Crash reports and usage counts
The app sends crash reports to a GlitchTip instance we run ourselves, so we can fix what breaks. A crash report contains the technical details of the failure — device model, iOS version, and where in the code it happened.
Once a day, at most, the app also sends a single anonymous snapshot of how it is being used. It contains only coarse ranges, never content:
- how many vouchers you have, in buckets (0, 1, 2–5, 6–20, 21–100, 100+)
- how many of them are active, expiring, expired or redeemed, in the same buckets
- how many reminders are set
- how often you have scanned, created, redeemed, or seen the paywall
- whether Pro is active
Voucher titles, issuers, codes, amounts, notes and dates are never sent. There is no advertising, no tracking across apps or websites, and no analytics profile tied to you personally.
This website
guetshi.app counts page views and referrers with Umami, a cookieless analytics tool we host ourselves. It sets no cookies, stores nothing on your browser, does not identify you, and does not follow you to other sites. The tracker is served from this domain, so nothing about your visit goes to a third party. The app itself contains no Umami.
Deleting your data
Delete a voucher in the app and it is gone from the device, and from iCloud if sync is on. Delete the app and everything local goes with it; to clear what CloudKit holds, sign into iCloud settings on your device and remove Guetshi's data. Deleting the app also stops any further crash reports or usage counts. For anything held by Apple or RevenueCat about a purchase, or to ask what we hold, write to us.
Children
Guetshi is not directed at children and does not knowingly collect anything from them.
Changes
If this policy changes, the date at the top changes with it.