Legal
Privacy Policy
Last updated: September 19, 2026
GGyst is a tool for independent gig workers to schedule work, keep client records, send invoices, and track money. This policy explains what we collect, why we have it, who we share it with, and how you get it back or get rid of it. It is written to be read, not to be survived.
The short version: we collect what the app needs to work. We do not sell your data, we do not run ads, and we do not build advertising profiles. You can export everything as JSON or delete your account outright, at any time, from Settings.
Who we are
GGyst is operated by GGyst.com LLC, a California limited liability company (“we”, “us”), which provides the GGyst web and iOS apps. GGyst.com LLC is the controller of the personal information described in this policy. For questions about this policy or your data, email chad@ggyst.com.
What we collect
Almost everything in GGyst is information you type in yourself. We do not buy data about you, and we do not import your contacts.
| Category | What it includes | Why we have it |
|---|---|---|
| Account | Email address, name, and either a password (stored only as a bcrypt hash) or a Google, Microsoft, or Apple sign-in. | To create your account and sign you in. |
| Business profile | Business name, phone, address, logo, brand color, trade types, timezone, tax rate, default and surcharge rates, business structure. | To fill in your invoices and calculate what you're owed. |
| Clients | Names, email addresses, phone numbers, addresses, tags, and any notes you write. | So you can keep track of the people who pay you. |
| Care and family details | Care instructions, house notes, pet details, children's names and dates of birth, allergies, medical notes, and emergency contacts. | Optional. For sitters and caregivers who need this on hand during a job. Encrypted — see below. |
| Work and money | Gigs, calendar entries, availability, invoices, line items, payments, expenses, and receipt or logo files you upload. | The core of the product. |
| Technical | Sign-in sessions, OAuth account links, and refresh tokens (stored hashed). | To keep you signed in securely and let you sign out everywhere. |
Care details and information about children
This is the most sensitive data in GGyst, and it is treated that way.
If you use GGyst for childcare work, you can store a child’s name, date of birth, allergies, medical notes, and emergency contacts. Those fields — along with care instructions, house notes, and pet details — are encrypted with AES-256-GCM at the application layer before they are written to the database. They are not readable from the database alone.
You are entering information about someone else, usually a client’s child. You are responsible for having that family’s permission to store it, and for storing only what you actually need to do the job. If a family asks you to remove it, you can delete the child, the family profile, or the whole client record, and it is gone.
GGyst is a tool for working adults. It is not directed at children, and children do not have GGyst accounts. Information about a child reaches us only because an adult user chose to record it for their own work.
How we use it
- To run the app: show your calendar, build invoices, total your money.
- To send email you ask for — an invoice to a client, or a feedback message to us.
- To keep the service secure: rate limiting, abuse prevention, and diagnosing errors.
- To answer you when you contact support.
We do not sell personal information, share it for cross-context behavioral advertising, or use your business data to train machine-learning models.
Analytics and cookies
We use a small first-party beacon to count page views and catch uncaught errors. It is deliberately built not to identify anyone:
- No advertising cookies, no fingerprinting, and no third-party trackers.
- No IP addresses and no query strings — URLs can carry invoice tokens, so they are stripped before anything is sent.
- Paths inside the signed-in app are redacted, and same-origin referrers are removed.
- The only identifier is a random per-tab id kept in
sessionStorage. It is not tied to your account and it dies when you close the tab.
The cookies we do set are strictly functional: a sign-in session cookie, and a short-lived one used to re-confirm your identity before dangerous actions like deleting your account. There is no tracking cookie to opt out of.
How it's protected
- Sensitive care, child, and emergency-contact fields are encrypted with AES-256-GCM before storage.
- Passwords are stored as bcrypt hashes. We never see or store them in the clear.
- All traffic is HTTPS, with HSTS enabled.
- Mobile sessions use rotating refresh tokens with reuse detection — a stolen-and-replayed token revokes the whole family.
- Every record is scoped to your account, and that isolation is covered by automated tests.
- Sign-in and other sensitive endpoints are rate-limited.
No system is perfectly secure, and we will not pretend otherwise. If we discover a breach affecting your personal information, we will notify you.
Your data, your call
- Export. Settings → Export your data hands you a JSON file with everything in your account.
- Delete. Settings → Delete account removes your account and every record attached to it, including uploaded files. It is a real deletion, not a flag, and it cannot be undone. We re-confirm your identity first.
- Correct. Every field is editable in the app.
- Sign out everywhere. Settings can revoke every active session and mobile token at once.
Depending on where you live, you may also have the right to object to processing, request portability, or complain to a data protection authority. Email us and we will help — we will not make you fill in a form to exercise a right. We do not discriminate against anyone for using these rights.
How long we keep it
Your data stays as long as your account exists, because it is the content of the product. When you delete your account, the records are removed immediately and uploaded files are purged from storage. Backups age out on their own cycle. Anonymous analytics events contain nothing that identifies you and are kept in aggregate.
Where your data lives
GGyst is operated from the United States and our providers process data there. If you use GGyst from outside the US, you are sending your information to the US, where privacy law differs from your own.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email before it takes effect. Continuing to use GGyst after that means you accept the new version.
Contact
Questions, requests, or concerns: chad@ggyst.com. See also our Terms of Service.