How Gracyy handles your data

Gracyy sees your spending. That's the whole point of the product, you scan a receipt, we tell you where your money went. But it means we're asking you to hand over something genuinely personal, and you deserve a plain explanation of what happens to it.

No legal boilerplate. Here's how it actually works.

Where your data lives

Your expenses, receipts, shopping lists and household details are stored in a Postgres database hosted in the EU. Nothing sits on servers outside the European Economic Area except where we've explicitly named a processor below.

Every table is protected by row-level security. That's a database-level rule, not an application setting, it means a query for your data, made with your account's credentials, physically cannot return anyone else's rows. It isn't a filter we remembered to apply in the code. It's enforced by the database on every single request, and it holds even if we ship a bug in the app.

What we can and can't see

We're going to be straight with you here, because a lot of apps aren't.

We can access your data. As the company operating Gracyy, we have administrative access to the database. Any company that says otherwise, while also offering you customer support and backups and account recovery, is being loose with the truth.

What matters is the controls on that access:

• Administrative access is limited to the people who need it to keep the service running.
• We use it for operational work, investigating a bug, restoring an account, understanding aggregate patterns like how many users complete signup.
• We do not read individual users' expenses out of curiosity, and we don't build profiles of your spending for any purpose other than showing it back to you.
• We do not sell your data. We do not share it with advertisers. There is no advertising business model behind Gracyy.

If that distinction sounds pedantic, it's the difference between a promise we can keep and one we can't.

Who else processes your data

Under GDPR we're required to name every third party that touches your information. Here they are.

Supabase hosts our database and handles authentication. Your account credentials and all stored app data sit here.

Anthropic provides the AI that powers Gracyy's spending insights and shopping suggestions. When you use these features, we send the relevant context, item names, recent expense descriptions, your city, to Anthropic's API to generate a response. Anthropic does not train models on data submitted through their API.

Expo delivers app updates and push notifications.

Apple and Google distribute the app and, if you enable them, handle notification delivery.

Each of these operates under a data processing agreement that binds them to handle your information only on our instructions.

Your rights, and how to use them

GDPR gives you specific rights over your data. These aren't favours we grant, they're your entitlement, and we're required to honour them within one month.

Access. Ask us for a copy of everything we hold about you.

Correction. Anything wrong, tell us and we'll fix it.

Deletion. Ask us to erase your account and its data, and we will. Some records may persist briefly in encrypted backups before rotating out.

Portability. Get your data in a machine-readable format to take elsewhere.

Objection. Tell us to stop processing your data for a particular purpose.

Email hello@gracyy.com and we'll handle it. You don't need to explain why.

You also have the right to complain to a supervisory authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information.

What we collect, and why

We try to collect the minimum that makes the product work.

Account details, email address, and optionally your name. Needed to sign you in.

Location, country and city, entered by you during setup. Used to suggest nearby shops and set your currency. We don't track your device's GPS location.

Financial data, the expenses, receipts and budgets you enter. This is the product.

Household details, if you share a household, the members you've invited and what you share with them.

Technical data, crash reports and basic usage analytics, so we can find bugs. Not tied to your spending.

We don't connect to your bank. Gracyy has no access to your accounts, balances, or transaction history from any financial institution.

Retention

We keep your data while your account is active. Delete your account and we remove it from our production systems, with encrypted backups rotating out afterwards on a fixed schedule.

Security

Data is encrypted in transit and at rest. Access to production systems requires multi-factor authentication. We keep credentials out of the app and out of our public code.

We're a small team and we won't pretend to have the security apparatus of a bank. What we can tell you is that we've made deliberate choices, database-enforced isolation rather than application-level filtering, EU hosting, minimal collection, that reduce the damage any single mistake can cause.

When things change

If we add a new processor, start collecting something new, or change how we use what we have, we'll tell you before it takes effect. Not in a silently updated policy page, in the app.

Questions

Have a question about any of this? Email hello@gracyy.com and a person will get back to you.

Last updated: August 22, 2026. This post explains our approach in plain language. It sits alongside our full Privacy Policy, which is the legally operative document.