Privacy Policy

Welcome to Gisti ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Device Information

We collect a unique device identifier to provide personalized app functionality and manage your subscription status. This identifier does not contain personally identifiable information.

Usage Analytics

We use Firebase Analytics to understand how users interact with our app. This includes:

• App opens and session duration
• Feature usage patterns
• Device type and operating system
• General location (country/region level)

Advertising Identifier

We collect your device's Google Advertising ID (GAID) to measure the effectiveness of our advertising campaigns and attribute app installs to specific ads. The Advertising ID is a resettable, non-personally-identifiable identifier. You can reset or opt out of the Advertising ID in your device's Settings under Privacy > Ads.

Crash Reports

We use Firebase Crashlytics to collect crash reports and diagnostic information. This helps us identify and fix issues to improve app stability.

Content You Provide

When you use our AI-powered features (Create with AI, Fill with AI), you may provide:

• Photos and images
• PDF documents
• Text content
• Web links
• Voice recordings

This content is processed by Google's Gemini AI to generate or fill checklists. We do not permanently store your uploaded content on our servers.

AI Chat Assistant Content

When you use the AI Chat Assistant, the following data is processed:

• Your typed messages — the natural-language commands or questions you send in the chat.
• Conversation history — when you ask an open question (planning, summary, "what should I do this week?"), we send the last few exchanges of the current conversation so the AI can keep context.
• Optional checklist summary — for open questions, we may send the names and completion counts (e.g. "Shopping — 5 items, 2 done") of your most recent checklists, together with the text of a small number of your most recently added items from those checklists (capped at a few items per list and a small overall limit), so the AI can answer questions such as "what did I add recently?" or "find the task about X". This item text is sent only when you ask an open (Deep Thinking) question; routine in-app actions and the on-device parser never send it. We do not send attachments, notes, or the full contents of large lists.
• System locale and timezone offset — so the AI can answer in your language and resolve relative dates ("tomorrow", "Friday at 6pm") into your local time.

This data is processed by Google's Gemini AI through our serverless functions (Google Cloud Functions) hosted in the United States (us-central1). It is not stored permanently on our servers; it is forwarded to Gemini, which under the Gemini API terms does not use API-key requests for model training by default.

Your full chat history is stored only locally on your device so you can refer back to it. We do not have access to it. Uninstalling the app or clearing app data removes the history completely.

Third-Party Services

Our app uses the following third-party services:

Google Firebase

• Analytics - for usage statistics and ad conversion tracking
• Crashlytics - for crash reporting
• Remote Config - for app configuration

Privacy Policy: firebase.google.com/support/privacy

Google Ads

We use Google Ads to promote our app. Firebase Analytics shares conversion events (such as trial starts and purchases) with Google Ads to measure ad campaign effectiveness. No personally identifiable information is shared — only anonymized conversion data and the Advertising ID for attribution.

Privacy Policy: policies.google.com/privacy

Google Gemini AI

We use Gemini AI for three independent features:

• Create / Fill checklists from content — photos, PDFs, links, text, voice recordings you intentionally upload.
• AI Chat — intent classification — your typed chat command, when our on-device parser is unsure how to handle it.
• AI Chat — free-form answers — the recent conversation history plus an optional summary of your checklist names, completion counts, and the text of a small number of your most recently added items, when you ask an open question.

All AI requests go through our serverless functions in Google Cloud (us-central1) so the API key is never exposed to your device. We do not store the request bodies; we keep only anonymized usage statistics (number of calls, intent labels) and a credit-deduction audit log keyed by your anonymous device identifier.

Privacy Policy: policies.google.com/privacy

Gemini API data usage: ai.google.dev/gemini-api/terms

RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes payment information through the respective app stores (Google Play, Apple App Store).

Privacy Policy: revenuecat.com/privacy

Consent and Data Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we ask for your consent before collecting analytics data and using your Advertising ID for ad measurement. You can choose to accept or decline when first using the app.

If you decline consent:

• Analytics data will not be collected or shared
• Your Advertising ID will not be used for ad attribution
• Core app functionality remains fully available

For users outside the EEA/UK, analytics and ad attribution data is collected by default as permitted under applicable law. You can always reset your Advertising ID or opt out via your device settings.

Data Storage

Your checklists, chat history, and app data are stored locally on your device. We do not store your personal checklists or your AI chat history on our servers.

The only data we keep server-side is the minimum required for subscription and credit accounting: your anonymous device identifier, current credit balance, premium status, and an aggregated usage counter per AI feature. None of this contains the text of your checklists or chat messages.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share anonymized analytics and conversion data with Google (Firebase Analytics and Google Ads) for app improvement and advertising measurement purposes. All other data is shared only with the third-party services listed above as necessary to provide app functionality.

Your Rights

You have the right to:

• Access the data we collect about you
• Request deletion of your data
• Opt-out of analytics collection
• Uninstall the app at any time, which removes all locally stored data

Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.