Privacy policy

Last updated: October 29, 2026 · Controller: Adolfo Hernández Salazar · Costa Rica · Contact: [email protected]

What leaves your phone

Your financial records (accounts, transactions, balances, budgets, fixed expenses and people) stay on your device. The Equilibrio server has no copy it can read. Only these data leave your phone:

Apart from what you write by email to buy or ask for support, nothing else. Section 2 explains each item and section 3 how long it is kept.

1 · Who is responsible for your data

Adolfo Hernández Salazar, domiciled in Costa Rica, is the controller responsible for processing the personal data described in this policy. For questions or to exercise the rights in section 6, email [email protected].

2 · What information is collected, and what is not

Equilibrio does not require a user account. To manage a purchase, license or support request, the controller may retain the buyer and contact information you provide, along with the license records described below.

The accounts, transactions, balances, budgets, fixed expenses and people you record in the application are saved on your device. The service does not keep a readable copy of those records: if you turn on Backup in Equilibrio, it stores an encrypted file it cannot read. This is separate from the email text you voluntarily send through Gmail.

In addition to purchase or support information you provide, the service uses these data:

License data. The key, the installation identifier, the date of the first activation and the date of the last verification. The identifier is a random code your browser creates when you activate the key and stores in the space it reserves for this site. It recognizes that installation (a browser, with its profile and its site data) without creating a device fingerprint or identifying hardware. The application verifies the key when it opens, when you return to it and every 5 minutes while it is open and online; each verification updates the date of the last one. Purpose: to check that the license is valid, recognize installations already registered and apply the key's number of uses.

IP address. On each license activation or verification, the IP address the request comes from is stored, counted per minute, to limit how many attempts arrive from the same place. If the address is of the most common type (IPv4), it is stored in full. If it is of the newer type (IPv6), only its first part is stored, which identifies the network and not the device. For Gmail linking, only a hash of the IP is stored, counted every 5 minutes, for the same purpose. A hash is a summary calculated from a piece of data that does not let anyone read it directly; even so it is not anonymous, because it can be calculated again from a known IP. Purpose: to prevent automated programs from guessing other people's keys or abusing the service. It is not used to build advertising profiles.

Emails you send and Gmail linking, only if you use the add-on. To link, you create a code in the application (Settings, Link Gmail) and enter it in Connect Gmail in the add-on. Each license allows up to 10 linked email addresses at a time.

When you link, the server stores: a mailbox identifier calculated from your Google account, that account's Google identifier, your email address, the associated license, the identifier of each linked device, the linking date, the date the link expires and a hash of the access keys, not the keys themselves.

When you tap Send to Equilibrio on an email, its text (up to 4,000 characters) travels to the server and waits in a queue until the application picks it up. Afterwards a mark without the text is kept: the Gmail message ID, a hash of the content and the outcome. The text may contain a merchant name, an amount, a date and the last digits of a card. Purpose: to deliver that email to your application and avoid registering it twice. The verified link with your Google account is what keeps your items separate from those of other people sharing a license.

Backup in Equilibrio, only if you turn it on. It is optional. Your phone compresses and encrypts a copy of your records and of your mode and color with the password you choose, and the server receives an unreadable file: nobody can read its content without that password, not even the controller. The password never leaves the phone and nobody can recover it. From it, the phone calculates an access key, which proves the backup is yours, and from that one, an upload key, which only works for uploading. Backups in Equilibrio are tied to a license: without one they cannot be obtained.

Along with the file, the server stores: the backup name, the license it belongs to, a hash of the access key and another of the upload key (never the password or the keys), a random value used to calculate the access key on another device, the size, the format version, the date of the last upload and, if it is in the trash, the date it went there, the date it was recovered from it, and the device that uploaded it: the identifier of that installation and the type of device, such as iPhone or Android. If a backup is replaced because of a forgotten password from another device, it also stores a mark of replacement from another device, which is deleted when an installation of the license dismisses the notice or when that backup goes to the trash. If someone types the password wrong, the server counts the failure per hour, with a hash of the IP and another of the backup and the installation that asked for it. If a request comes from an installation that is not activated on the license, it also counts as a failure per hour, only with the hash of the IP. Every activated installation of the license sees the list of its backups, including the ones in the trash: the name, the size, the date of the last upload and the type of device that uploaded it. Purpose: to store your backup, check that whoever asks for it knows the password, show from which type of device and when it was uploaded, give notice of a replacement from another device, and limit attempts to guess a password.

3 · How long information is retained

Several periods depend on the daily cleanup: an automatic server process that runs every day at midnight, Costa Rica time, and deletes what has reached its period. If it fails one day, the periods are extended until it runs again. The provider's internal backups may keep deleted data for a limited time set by the provider.

4 · Who information is shared with

Data is not sold or rented for advertising. Neither the website nor the application uses cookies, analytics or trackers. The application loads no third-party resources: it only connects to the Equilibrio server. The providers involved in the service are described below.

Cloudflare hosts the website, the Equilibrio server and its database: it processes license data; if you use Gmail, queued emails and the record of your linked account; and if you use Backup in Equilibrio, the data of each backup, whose encrypted file is stored in Cloudflare R2, its file storage service. Google provides the add-on platform and support email. The add-on stores in Google storage, within your account, the key of its link and, while a link is pending, its code and your email address. The website also requests fonts from Google; loading them connects your browser to that provider. These providers do not receive a readable copy of the application's financial records through ordinary use, but emails you send and your support inquiries may contain financial information.

Apart from those providers, only the controller can see the server data, with his Cloudflare credentials and his private license administration panel.

5 · Google user data

Equilibrio's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

An API is the channel through which one program asks another for data. Limited Use is the set of Google rules that limits what your account data can be used for.

5.1 · What the add-on accesses. Only the email currently open, and only while it is open. It accesses two pieces of data: the message content (permission gmail.addons.current.message.readonly) and your email address, used to identify your linked mailbox (permission userinfo.email). It also asks for technical permissions to work inside Gmail, confirm your Google account, send the chosen email to api.equilibriocr.com, store its link and know your language. None of them reads other emails. It cannot read your inbox, search your emails or access messages you are not viewing. It does not request general mailbox-reading permissions.

5.2 · How that information is used. The message content is transmitted only when you tap Send to Equilibrio, never automatically or in the background. It is queued and deleted when the application confirms it registered or discarded it; if nobody retrieves it, access ends after 7 days and it is deleted in the daily cleanup.

These data are not used for advertising of any kind; they are not sold, rented or shared for purposes other than notification delivery through the providers described in this policy; they are not used to develop, improve or train artificial intelligence or machine learning models, whether Equilibrio's own or third parties'; and they are not used for any purpose other than delivering that notification to your application.

No person reads them during normal operation. Human access may occur only in the cases permitted by Google's policy: with your express consent, for security reasons, to meet a legal obligation, or to resolve a technical issue you reported. Access is limited to those purposes, in accordance with Google's Limited Use requirements.

Text analysis (extracting the amount, date and merchant) happens on your device. The server only delivers the text: it does not interpret it and, once retrieved, keeps only a hash of the content (without the text) for 15 days.

6 · Your rights

Under Costa Rican Law No. 8968 on the Protection of Individuals with Regard to the Processing of Their Personal Data, you may exercise these rights over your data by emailing [email protected] and giving your license key, which is what makes it possible to find your data. Exercising them is free of charge.

If you are dissatisfied with the response, you may contact Costa Rica's Agency for the Protection of Inhabitants' Data (PRODHAB).

7 · How to revoke Gmail add-on access

From the application. In Settings, Link Gmail, the Forget this email button revokes that device's linking on the server. If there is no connection, the application does not forget it and tells you so you can try again. After Reset anyway, the application can no longer remove that link: it stays active until you remove it from Manage devices in the add-on, or until it expires after 90 days without use.

From the add-on. Open Manage devices in Gmail: you can revoke one device or all access. A confirmed revocation applies from the next request to the server; revoked authorizations are kept for 180 days without your email address and are then deleted in the daily cleanup. If you do nothing, each authorization expires after 90 days without activity. Revoking deletes your email address when no other valid authorization remains, but not the mailbox identifier (see section 3).

From your Google Account. You can also open your Google Account settings, find the applications with access to your account and remove Equilibrio. From then on, the add-on can no longer read any email. Removing access in Google does not by itself revoke the authorizations stored on the server: they expire after 90 days without activity or when you revoke them from Manage devices or with Forget this email in the application.

Items already queued are still deleted when retrieved by the application or in the daily cleanup once they are older than 7 days. Records already saved in the application are not deleted when you revoke the add-on.

8 · Security

All communication with the server is encrypted. Exported backups and those in Backup in Equilibrio are always encrypted with a password you choose and Equilibrio does not store: if you lose it, nobody can recover it or open the file for you. Protection of local data also depends on your device's security. Use a screen lock and keep protected backups.

In automatic mode, the phone stores an upload key and the encryption key, never the password or the access key. With the upload key, the server only accepts uploading a backup: downloading it, deleting it, changing its password and recovering it from the trash ask for the password. Failed attempts have a limit per hour: 10 for each backup from each installation and 30 for each IP.

9 · Children

The application is not intended for anyone under 18 and does not knowingly collect information from them.

10 · Changes

If this policy changes, the date above is updated and the application asks you to accept the new version when it opens with that update. If you do not accept it, the application cannot be used, and you can export an encrypted backup.