Legal

Privacy Policy

Last updated: September 19, 2026

GGyst is a tool for independent gig workers to schedule work, keep client records, send invoices, and track money. This policy explains what we collect, why we have it, who we share it with, and how you get it back or get rid of it. It is written to be read, not to be survived.

The short version: we collect what the app needs to work. We do not sell your data, we do not run ads, and we do not build advertising profiles. You can export everything as JSON or delete your account outright, at any time, from Settings.

Who we are

GGyst is operated by GGyst.com LLC, a California limited liability company (“we”, “us”), which provides the GGyst web and iOS apps. GGyst.com LLC is the controller of the personal information described in this policy. For questions about this policy or your data, email chad@ggyst.com.

What we collect

Almost everything in GGyst is information you type in yourself. We do not buy data about you, and we do not import your contacts.

CategoryWhat it includesWhy we have it
AccountEmail address, name, and either a password (stored only as a bcrypt hash) or a Google, Microsoft, or Apple sign-in.To create your account and sign you in.
Business profileBusiness name, phone, address, logo, brand color, trade types, timezone, tax rate, default and surcharge rates, business structure.To fill in your invoices and calculate what you're owed.
ClientsNames, email addresses, phone numbers, addresses, tags, and any notes you write.So you can keep track of the people who pay you.
Care and family detailsCare instructions, house notes, pet details, children's names and dates of birth, allergies, medical notes, and emergency contacts.Optional. For sitters and caregivers who need this on hand during a job. Encrypted — see below.
Work and moneyGigs, calendar entries, availability, invoices, line items, payments, expenses, and receipt or logo files you upload.The core of the product.
TechnicalSign-in sessions, OAuth account links, and refresh tokens (stored hashed).To keep you signed in securely and let you sign out everywhere.

Care details and information about children

This is the most sensitive data in GGyst, and it is treated that way.

If you use GGyst for childcare work, you can store a child’s name, date of birth, allergies, medical notes, and emergency contacts. Those fields — along with care instructions, house notes, and pet details — are encrypted with AES-256-GCM at the application layer before they are written to the database. They are not readable from the database alone.

You are entering information about someone else, usually a client’s child. You are responsible for having that family’s permission to store it, and for storing only what you actually need to do the job. If a family asks you to remove it, you can delete the child, the family profile, or the whole client record, and it is gone.

GGyst is a tool for working adults. It is not directed at children, and children do not have GGyst accounts. Information about a child reaches us only because an adult user chose to record it for their own work.

How we use it

  • To run the app: show your calendar, build invoices, total your money.
  • To send email you ask for — an invoice to a client, or a feedback message to us.
  • To keep the service secure: rate limiting, abuse prevention, and diagnosing errors.
  • To answer you when you contact support.

We do not sell personal information, share it for cross-context behavioral advertising, or use your business data to train machine-learning models.

Analytics and cookies

We use a small first-party beacon to count page views and catch uncaught errors. It is deliberately built not to identify anyone:

  • No advertising cookies, no fingerprinting, and no third-party trackers.
  • No IP addresses and no query strings — URLs can carry invoice tokens, so they are stripped before anything is sent.
  • Paths inside the signed-in app are redacted, and same-origin referrers are removed.
  • The only identifier is a random per-tab id kept in sessionStorage. It is not tied to your account and it dies when you close the tab.

The cookies we do set are strictly functional: a sign-in session cookie, and a short-lived one used to re-confirm your identity before dangerous actions like deleting your account. There is no tracking cookie to opt out of.

Who else touches your data

We use a small number of infrastructure providers to run GGyst. They process data on our instructions only.

ProviderWhat it handles
VercelApplication hosting and delivery.
Managed PostgreSQLThe primary database.
Cloudflare R2Files you upload — receipts and invoice logos.
ResendSending invoice emails and feedback messages.
UpstashRate-limit counters that keep sign-in and the API from being abused.
SupabaseStoring the anonymous page-view and error events described above.
Google, Microsoft, AppleOnly if you choose to sign in with them. They tell us your email and name; we do not get your password.

Beyond that, we share data only when you direct us to — emailing an invoice sends it to the client address you enter, and a public invoice link is viewable by anyone who has it. We may also disclose information if the law requires it, or to protect someone’s safety.

How it's protected

  • Sensitive care, child, and emergency-contact fields are encrypted with AES-256-GCM before storage.
  • Passwords are stored as bcrypt hashes. We never see or store them in the clear.
  • All traffic is HTTPS, with HSTS enabled.
  • Mobile sessions use rotating refresh tokens with reuse detection — a stolen-and-replayed token revokes the whole family.
  • Every record is scoped to your account, and that isolation is covered by automated tests.
  • Sign-in and other sensitive endpoints are rate-limited.

No system is perfectly secure, and we will not pretend otherwise. If we discover a breach affecting your personal information, we will notify you.

Your data, your call

  • Export. Settings → Export your data hands you a JSON file with everything in your account.
  • Delete. Settings → Delete account removes your account and every record attached to it, including uploaded files. It is a real deletion, not a flag, and it cannot be undone. We re-confirm your identity first.
  • Correct. Every field is editable in the app.
  • Sign out everywhere. Settings can revoke every active session and mobile token at once.

Depending on where you live, you may also have the right to object to processing, request portability, or complain to a data protection authority. Email us and we will help — we will not make you fill in a form to exercise a right. We do not discriminate against anyone for using these rights.

How long we keep it

Your data stays as long as your account exists, because it is the content of the product. When you delete your account, the records are removed immediately and uploaded files are purged from storage. Backups age out on their own cycle. Anonymous analytics events contain nothing that identifies you and are kept in aggregate.

Where your data lives

GGyst is operated from the United States and our providers process data there. If you use GGyst from outside the US, you are sending your information to the US, where privacy law differs from your own.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email before it takes effect. Continuing to use GGyst after that means you accept the new version.

Contact

Questions, requests, or concerns: chad@ggyst.com. See also our Terms of Service.