Last Updated: October 2026
1. Financial Data Stored Exclusively on Your Device
Guinto is architected around an offline-first, local-storage foundation:
- Local Database: All account balances, transactions, transfers, category budgets, savings goals, recurring rules, and custom labels are stored exclusively in a local SQLite database (powered by Drift) located in your device's private internal storage.
- Zero First-Party Servers: ChronDev does not maintain cloud database servers or sync servers. Your financial ledger data is never transmitted, synced, uploaded, or accessible to ChronDev.
- App Preferences: Settings such as display currency, appearance theme (System/Light/Dark), balance privacy masking, and user preferences are stored strictly on your device using local storage.
- Passcode & Biometric Security: If you enable App Access Lock, your PIN passcode is hashed locally using a unique per-device cryptographic salt. Biometric authentication (fingerprint or face) is performed entirely by standard platform security APIs. Biometric sensor data remains in your device hardware element and is never accessed or stored by Guinto.
2. Information We Do NOT Collect
We deliberately avoid collecting sensitive personal or financial information:
- No Financial Credentials: We never connect to your banks, credit unions, credit card providers, or online banking services. We do not use financial aggregators. All transactions are recorded manually or imported directly by you.
- No Personal Identity: Guinto does not require creating an account, email address, phone number, name, or social logins to use the app.
- No Behavioral Analytics or Session Tracking: ChronDev does not deploy first-party or third-party behavioral analytics, user engagement trackers, session recording tools, or heatmaps.
- No Sensitive Device Data: Guinto never accesses your GPS location, contacts, camera, microphone, photos, or media library.
3. Advertising & Consent Choices (Free Tier)
The free tier of Guinto is monetized via a single compact banner advertisement on the dashboard to support ongoing development:
- Google AdMob: In the free version, exactly one banner advertisement is served by Google Mobile Ads (AdMob). In accordance with Google Play Data Safety, AdMob may collect and process: (a) Approximate Location (coarse location derived from IP address for regional ad routing); (b) Device or Other IDs (pseudonymous identifiers such as Android Advertising ID); (c) App Activity (ad impressions, views, and clicks); and (d) App Info & Performance (SDK latency and diagnostic error reports).
- Google User Messaging Platform (UMP): In regions subject to privacy regulations (including the EEA, UK, Switzerland, and regulated US states), we use Google's official UMP SDK to present consent choices and record user preferences. Ads are requested only when permitted by your choices.
- Managing Privacy Choices: You can review, update, or revoke consent preferences at any time in the app via More → Ad Privacy Choices, or reset your Advertising ID in your device settings.
- Ad-Free with Guinto Pro: Purchasing Guinto Pro immediately and permanently disables all advertisements, terminates all ad requests, and deactivates the ad controller.
4. In-App Purchases & Digital Entitlements
Upgrades to Guinto Pro (Lifetime Ad-Free) are processed through official platform store infrastructure:
- Google Play Billing: Purchases are processed directly by Google Play. We never receive, process, or store your credit card numbers, bank account details, or billing addresses.
- RevenueCat: We use RevenueCat to validate digital purchase receipts and verify entitlement state. RevenueCat processes anonymous purchase history (order identifiers, product IDs, purchase tokens, and timestamps) and an anonymous, randomly generated App User ID UUID. RevenueCat does not receive personal identities or any information from your local financial ledger.
5. Device Permissions
Guinto requests only the minimal permissions required for operation:
- Internet Access (INTERNET, ACCESS_NETWORK_STATE): Required exclusively for Google AdMob ad serving (free tier), Google UMP consent evaluation, and Google Play Billing / RevenueCat receipt validation.
- Biometric Authentication (USE_BIOMETRIC): Enables optional device biometric unlock (fingerprint or face) via the system security prompt.
- In-App Billing (BILLING): Enables Google Play to process purchases for Guinto Pro.
- File Storage: Guinto uses the standard Android Storage Access Framework (SAF) and system share sheet for user-initiated CSV exports and database backups without requesting broad storage permissions.
6. Local Backups & CSV Exports
You maintain complete ownership of your data. Guinto allows you to generate local database backup files and CSV transaction exports saved directly to locations you select. Guinto never sends your backups to third-party cloud servers. You are responsible for the physical security and cloud sync settings of files saved outside Guinto.
7. Data Retention & Deletion Rights
You can permanently erase all locally stored financial records, accounts, budgets, and settings at any time by navigating to More → Data Management → Clear All Data. Uninstalling Guinto permanently deletes all local database files from your device internal storage. To request deletion of purchase verification records maintained by RevenueCat, you may email support@chrondev.com with your Google Play Order Number.
8. Children's Privacy
Guinto is intended for general audiences and is not directed toward children under 13 (or under 16 in the European Economic Area). We do not knowingly collect or solicit personal information from children.
9. Contact ChronDev
If you have questions, concerns, or feedback regarding this Privacy Policy or Guinto's privacy practices, please contact ChronDev by email at support@chrondev.com.