Privacy Policy

Gable is made by Nikita, an independent developer, who is the controller of the personal data described in this policy. The developer’s full name is shown as the seller on Gable’s App Store page. You can reach the developer at support@gable-app.com.

Everything you enter stays on your iPhone: transactions, categories, budgets and budget periods, wallets and currencies, savings, trips, the items read from your receipts, and the name and picture in your profile. We have no access to any of it. If you turn on Cloud Backup, an encrypted copy is also kept in your own iCloud account (see below).

Receipts are read on your iPhone using Apple’s on-device text recognition. Gable uses the photo only to read the receipt and does not keep it. The items read from it are saved on your iPhone and are not sent anywhere, except inside your encrypted Cloud Backup if you turn it on.

Cloud Backup is off until you turn it on (Settings → Cloud Backup, part of the Personal plan). When it is on, Gable encrypts a copy of your data on your iPhone and stores it in your own iCloud account. The encryption key is kept in your Keychain — in iCloud Keychain if you use it, so that it can reach a new iPhone — and is never sent to us, so we cannot read your backup. So that Gable can find and check the backup, its iCloud record also holds a few details that are not encrypted: when it was made, its size and checksum, the app version, the random user ID described under “Purchases and subscription status”, and counts of the transactions, categories, budgets and households in it. iCloud is provided by Apple under Apple’s Privacy Policy.

To delete the backup, go to Settings → Cloud Backup → Turn off and choose “Turn off + delete remote” while your iPhone is online. This deletes the backup from iCloud; the encryption key stays in your Keychain.

When the app crashes, freezes or runs into an error, it sends a report to Sentry (Functional Software, Inc., USA) so we can fix the problem. A report contains technical details such as the type of error and where in the code it happened, the app version, your device model, iOS version, language and time zone, and the state of the device at that moment — for example free memory, battery level and whether the device is jailbroken.

An error report names only the kind of error and the part of the app where it happened. A crash report also records what the app’s code was doing at the moment it crashed. Reports are set up not to include amounts, balances, notes or anything you type, and they carry no user identifier. The app replaces your IP address with 0.0.0.0 before a report is sent, Sentry is set not to store IP addresses, and it removes device identifiers before storing a report. Sentry stores reports in the European Union (Frankfurt, Germany) and deletes them after 30 to 90 days, depending on our Sentry plan.

To see which features are used, the app sends a short, fixed list of events to TelemetryDeck, a provider based in Germany: the first launch, finishing onboarding, adding a first transaction, creating a trip, a savings pot or a wallet, importing a file, linking a repayment to an expense, the outcome of a receipt scan, opening the subscription screen and buying a plan. It also notes which days the app is opened and, once a week, a rough range of how many entries were added (for example 6–20), so we can tell whether people keep using it.

TelemetryDeck’s software adds technical details to each event: the app and iOS versions, device model, language, region and time zone, screen size, light or dark mode, some accessibility settings (such as larger text or reduced motion), and the day and hour. Events never contain amounts, balances, notes or anything you type.

Each event carries a code for your installation, which the app makes on your iPhone by hashing an ID that iOS gives our app; TelemetryDeck says it hashes the code again before storing it. TelemetryDeck says it does not store IP addresses. It stores the statistics in the European Union, with no fixed deletion date.

Go to Settings and switch off “Share crash reports and usage stats”. It is on by default. Switching it off stops new crash reports and statistics straight away; statistics already waiting on your iPhone to be sent may still go out. Reports already sent stay with the providers for the periods above.

We rely on our legitimate interest in keeping the app stable and knowing which features matter (Article 6(1)(f) GDPR). If you want to know how we weighed this against your interests, write to us.

You can object at any time to processing that we base on our legitimate interest (Article 21 GDPR). For crash reports and usage statistics, switch off “Share crash reports and usage stats” in Settings — no reason needed. For anything else we base on our legitimate interest, such as checking your subscription with Adapty or answering your emails, write to support@gable-app.com.

Payments are handled by Apple, and we never see your payment details. Apple’s processing of your purchase is covered by Apple’s Privacy Policy.

To know whether you have an active subscription and to show the right plans and prices, the app uses Adapty (Adapty Tech Inc., USA). When the app starts, it connects to Adapty, which keeps a profile for your installation that is not linked to your name or email. Adapty receives the country of your App Store account, an identifier that iOS gives to our app on your device (the identifier for vendor), and basic app and device details. Adapty’s software also tells Adapty each time you open the app, at most once a minute; switching off “Share crash reports and usage stats” does not stop this. The app itself never sends your IP address to Adapty, and it tells Adapty not to collect or share it. Like any server, Adapty still sees the address while your iPhone is connected; it works out from it the country you are in and keeps that country in the profile for your installation as well. If you buy a subscription, Adapty also receives your purchase history and a random user ID that the app creates on your iPhone. This user ID is kept in your Keychain (in iCloud Keychain if you use it), so it may stay after you delete the app and is used again if you reinstall Gable.

When you open the subscription screen and share usage stats, the app also tells Adapty that the screen was shown, so we can see how often it leads to a purchase. Switching off “Share crash reports and usage stats” stops this too.

Apple’s privacy label on Gable’s App Store page lists the country Adapty works out from your IP address (as location), these notes about opening the app and the subscription screen, the identifier for vendor, the user ID and your purchases as data linked to you, because Adapty keeps them in the profile for your installation.

The app never asks for permission to track you, so the advertising identifier (IDFA) is not available to it or to Adapty. Adapty processes this data in the United States; transfers from the European Union are covered by the European Commission’s Standard Contractual Clauses in Adapty’s data processing agreement.

We rely on the need to provide the subscription you bought (Article 6(1)(b) GDPR) and on our legitimate interest in knowing whether a subscription is active (Article 6(1)(f) GDPR).

The app does not send your data to any server we run.

gable-app.com sets no cookies and uses no analytics or tracking scripts. It is hosted by Cloudflare (Cloudflare, Inc., USA), which processes technical details of each request, such as the IP address, to deliver the pages and protect the site, and may handle a request outside the EU. Cloudflare also asks your browser to report pages that fail to load to Cloudflare, for up to 7 days. We rely on our legitimate interest in running a working and secure website (Article 6(1)(f) GDPR).

If you write to us, we use your email address and message to answer you, relying on our legitimate interest in dealing with your request (Article 6(1)(f) GDPR). Email to support@gable-app.com is received by Cloudflare Email Routing and forwarded to the mailbox we read. We keep your emails only as long as we need to deal with your request.

Only the providers named above. Adapty, Sentry and Cloudflare process data on our behalf under data processing agreements that require them to protect personal data at least as well as this policy describes. TelemetryDeck receives only the statistics described above and handles them under its own terms, which treat them as anonymous data. Apple processes payments, iCloud and iCloud Keychain data as described in its own privacy policy.

TelemetryDeck stores statistics in the European Union, and Sentry stores crash reports there too (Frankfurt, Germany). Adapty processes data in the United States under the European Commission’s Standard Contractual Clauses. Sentry and Cloudflare are US companies; where they process data in the United States, their data processing agreements rely on the EU–US Data Privacy Framework, with the Standard Contractual Clauses as a fallback.

Under the GDPR you can ask for access to your personal data, and for it to be corrected, deleted, restricted or given to you in a portable format. You can also object to processing based on our legitimate interest, as described under “Your right to object”.

Most of your data never leaves your iPhone: deleting the app deletes it, except the random user ID and backup key that may stay in your Keychain, and you can delete your backup as described above. For data held by our providers, write to support@gable-app.com. If you have a subscription, include the ID shown under Settings → Subscription → Your User ID so we can find your records. If you have never bought a subscription, Adapty holds only a profile for your installation that is not linked to your name, email or user ID, and nothing you can see in the app lets us find it.

You don’t have to share crash reports or usage statistics; the app works the same without them. The connection to Adapty is needed to buy a subscription and to check it. We make no decisions about you by automated means.

You also have the right to complain to a data protection authority, in particular in the EU country where you live or work or where you believe the GDPR was breached.

Gable is not intended for children under 16, and we do not knowingly process their personal data.

Your data is protected by iOS on your iPhone, your backup is encrypted before it leaves your iPhone (apart from the few details listed under Cloud Backup), and the app talks to the providers above only over encrypted connections.

If this policy changes, we will update this page and the date at the top. Significant changes will also be mentioned in the app’s release notes.

Nikita, developer of Gable — support@gable-app.com