Privacy policy
This policy covers every goodtools app (today, Pipa), the goodtools account you sign in with, and this website. goodtools is operated by Kade Works LLC ("we", "us"), 680 N Lake Shore Dr Ste 110-2537, Chicago, IL 60611-4546, United States. We are the controller of your personal information. Contact: support@goodtools.app.
What we collect
- Account details. Your email address. If you sign in with Google, the name and email Google shares. If you sign in with Apple, the email Apple shares, which may be a private relay address.
- What you put in. The content you add to an app, such as expenses, budgets, categories, notes, and the receipts and statements you upload.
- Purchases. Whether you have a subscription, which plan, and its renewal and expiry dates. We never see or store your full card number.
- Technical data. A session token so you stay signed in, your language, country and time zone settings, and standard server logs (IP address, device or browser type, time of request) kept for security and debugging.
- Usage statistics on the web apps. Pipa's web app uses Vercel Web Analytics to count page views. It does not use cookies or build a profile of you.
What we don't collect
- We never connect to your bank, ask for banking credentials or read your bank accounts.
- No advertising trackers, no advertising ID, no selling of data, and no sharing for targeted advertising.
- The phone apps use the camera, photo library and files only when you choose to add a receipt or statement.
How we use it
- To provide the apps: sign you in, store your content, sync it across your devices and show it to the people you share with.
- To bill you and keep your subscription in sync across the web and the app stores.
- To read receipts and statements you upload, as described below.
- To answer you when you write to us, to send account and service messages, and to keep the service secure.
- To meet legal obligations, such as tax records.
How uploads are read
When you upload a receipt or statement, the app sends that file, or the rows from it, to Anthropic's Claude API to read out the transactions. It may also send transaction descriptions with your category names to suggest a category. Anthropic processes this to return the result and, under its commercial API terms, does not use it to train its models. Nothing is sent to Anthropic unless you upload or import it.
Who processes it for us
We use these service providers. Each one only handles what it needs to do its job.
- Supabase: accounts, sign-in, database and file storage (United States).
- Google and Apple: sign-in, if you choose them.
- Stripe: payments made on the web.
- Apple App Store and Google Play: payments made in the phone apps. They handle your payment details under their own privacy policies.
- RevenueCat: keeps track of in-app purchases. It receives your account ID and your purchase history from the store.
- Anthropic (Claude API): reading the receipts and statements you upload.
- Vercel: hosting for the websites and web apps, and Web Analytics.
- Google Workspace: sending sign-in emails and answering support email.
Other people only see your content if you share a space with them. We share information with authorities only when the law requires it.
How long we keep it
- Your account and content: for as long as you have an account. If a subscription or trial ends, your data stays, read-only, until you delete your account.
- Items you delete inside an app may be kept for up to 90 days so support can recover mistakes, then removed.
- When you delete your account, see Delete your account for exactly what goes and what stays.
- Database backups roll over and expire within 7 days.
- Payment and tax records: as long as tax law requires, usually up to 7 years.
- Support emails: as long as needed to help you, then deleted.
Your rights
You can ask us to confirm what we hold about you, give you a copy, correct it, delete it, or stop a particular use of it. Write to support@goodtools.app. We answer within 15 days. You can delete your account yourself at any time, in the app or by email.
United States
We don't sell personal information or share it for cross-context behavioral advertising, and we don't use sensitive information to infer things about you. If you live in a state with a privacy law, such as California, you have the rights above, and we won't treat you differently for using them. You can use an authorized agent; we may need to confirm your identity first.
Brazil (LGPD)
If you are in Brazil, the Lei Geral de Proteção de Dados (Law 13.709/2018) applies. Kade Works LLC is the controller. We process your data to perform our contract with you (providing the apps and your subscription), to meet legal obligations, and for our legitimate interests in keeping the service secure and working. Where we rely on consent, you can withdraw it at any time.
You have the rights in Article 18 of the LGPD: confirmation and access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about who we share data with, and review of decisions made only by automated processing. Our providers store and process data in the United States and other countries. We transfer it under the safeguards the LGPD allows, including contractual protections with each provider.
For any LGPD request, or to reach our data protection contact (encarregado), write to support@goodtools.app. You can also complain to the Autoridade Nacional de Proteção de Dados (ANPD).
Security
Data is encrypted in transit and at rest with our providers. Each shared space is isolated from every other at the database level. No system is perfectly secure, and if a breach affects you, we will tell you and the authorities as the law requires.
Children
goodtools apps are for adults. We don't knowingly collect information from anyone under 18, and if we learn we have, we delete it.
This website
goodtools.app sets no cookies and uses no analytics. Vercel, our host, keeps standard technical logs. Fonts load from Google Fonts, which receives your IP address as part of that request.
Changes
If this policy changes in a way that matters, we will say so in the apps before it takes effect. The date above shows the current version.