Privacy Policy

This Privacy Policy explains how DID YOU CATCH IT INC, doing business as Guala ("Guala", "we", "us"), collects, uses and shares information when you use our website, text with Koala, or use the Guala web app (together, the "Service").

• What we collect
• How we use it
• AI
• Who we share it with
• How long we keep it
• Security
• Your choices and rights
• Children
• Changes
• Contact

1. What we collect

What you give us

• Your phone number and name. Your phone number is your account. There's no password. The name is what you tell Koala to call you.
• Your texts with Koala. We keep the messages you send Koala and Koala's replies, with their times. If you send a photo or other attachment, we note that it arrived but don't keep it.
• Your goals. What you tell Koala you're working toward: what each goal is for, and the amount and date if you give them. Also your monthly income goal, if you set one.
• Your settings. How you say you make money, your budget, spending categories and corrections, and how you'd like Koala to talk to you.
• How you got here. If you texted Koala from a link with a tracking code, which code, and which setup steps you've finished (like opening your plan link), so we can see where people get stuck.
• Waitlist details. If you join a waitlist on our website: your name, mobile number, email, your social handle if you give one, and which lists you picked.
• Messages to us. Anything you send to support@gualaapp.com.

From accounts you connect

• Banks, through Stripe: for the accounts you choose, their names, types, last four digits, balances and transactions (amount, date, and description). We never receive your bank username or password.
• Shopify and Stripe, if you connect them: your store or account name, orders, charges, refunds, fees, payouts and disputes.

When you pay

Stripe collects your card details when you subscribe. We receive the card brand, last four digits, expiry date and the status of your payments, never the full card number.

Automatically

• Server logs. When you visit our website or web app, our servers record your IP address, browser type, the pages you request and when, for security and troubleshooting.
• Your browser. Our website uses no advertising or analytics cookies. It uses a security cookie that protects forms like the waitlist, and one that remembers which of Koala's numbers your "Text Koala" button opens, so you keep texting the same number. The web app uses a cookie to keep you signed in and stores small preferences in your browser, such as which tours you've seen. Our pages load the Manrope font from Google Fonts, which receives your IP address when it does.

2. How we use it

• To run the Service: building your ledger, matching sales to fees, payouts and deposits, sorting your spending, tracking your budget and goals, sizing your plan and starting score, producing your statements, and answering your texts.
• To text you as described in Data & Consent.
• To sign you in, by texting a link to your phone number.
• To decide who gets access first from our waitlists, and to email you when your spot opens.
• To bill you through Stripe.
• To help when you ask us for support.
• To keep the Service secure, find and fix problems, and make it work better.
• To meet our legal obligations and enforce our Terms of Service.

We don't use your data for advertising, and we don't use your financial data to train AI models.

3. AI

Koala's replies are written by an AI model, Claude, made by Anthropic. To answer a text, we send it your recent messages and the figures from your ledger that the answer needs. When you text Koala your goals, Claude also reads that text to turn it into a list of goals: what each is for, and any amount and date you gave. Anthropic processes this on our behalf under its commercial terms, which don't allow it to train its models on that data. Koala only quotes numbers from your ledger, and it can't take any action on your accounts.

4. Who we share it with

We share information only as described here.

Companies that run parts of the Service for us

• Linq delivers texts between you and Koala.
• Anthropic writes Koala's replies and reads the goals you text (see AI above).
• Stripe connects your bank accounts. See the Stripe Privacy Policy.
• Shopify and Stripe provide your sales and payout data, if you connect them.
• Stripe processes your subscription payments.
• Google Cloud hosts our servers and database and manages our encryption keys.

They may only use your information to provide their service to us.

Other times we share

• When you ask us to. For example, when you send your statement to your accountant or a lender.
• For legal reasons. When the law, a court order or a government request requires it, or to protect the rights, safety or property of our users, the public or Guala.
• If the company changes hands. If Guala is merged, acquired or sold, your information may transfer as part of that deal, and this policy keeps applying to it.

We don't sell your personal information or share it for targeted advertising. We never share your mobile number with anyone for their marketing.

5. How long we keep it

We keep your information while your account is open. If you close your account or ask us to delete your data, we delete it within 30 days, except:

• payment and tax records, which we keep as long as the law requires;
• the record of any opt-out, so we can honor it;
• anything we need to resolve a dispute or legal claim.

If you're on a waitlist and haven't joined Guala, we keep your waitlist details until you ask us to remove them or we close that waitlist. Server logs are kept for no more than 90 days. Deleted data can remain in encrypted backups for a short time until they're overwritten.

6. Security

Data travels to and from Guala encrypted, and it's encrypted where it's stored. The access tokens that let us read your connected accounts are encrypted again before we store them. Our access to your accounts is read-only, and only the people who need it to run the Service can see your data. Your plan link is random and unique to you. It shows your first name and goals but never signs you in, so keep it to yourself. No system is perfectly secure, so if we learn of a breach that affects your information, we'll tell you as the law requires.

7. Your choices and rights

• See and download your data. Your ledger and statements are in the web app, and statements download as PDF and CSV. Email us for a copy of anything else we hold.
• Correct it. Fix spending categories with a text or in the web app, or email us.
• Delete it. Email support@gualaapp.com.
• Disconnect an account. From Sources in the web app, or email us.
• Stop texts. Text STOP to Koala.

Depending on where you live, including California, Colorado, Connecticut, Virginia and other states with privacy laws, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, to opt out of its sale or use for targeted advertising (we do neither), and not to be treated differently for using these rights.

To make a request, email support@gualaapp.com. To protect your account, we'll confirm it's you by texting the phone number on your account. We respond within 45 days. You can also have someone you authorize make a request for you; we'll ask them for proof that you did. If we turn down a request, you can appeal by replying to our answer.

8. Children

Guala is for adults. We don't knowingly collect information from anyone under 18. If you think a child has given us information, email us and we'll delete it.

9. Where your data is

Guala is for people in the United States, and we store and process your information in the United States.

10. Changes to this policy

When we change this policy, we'll post the new version here with a new effective date. If a change is significant, we'll tell you by text or email before it takes effect.

11. Contact

Email support@gualaapp.com, or write to:

DID YOU CATCH IT INC (d/b/a Guala)
457 Arnold St NE
Atlanta, GA 30308