Privacy Policy

Last updated: 21 May 2026

1. Introduction

This Privacy Policy explains how What's the Gist? ("we", "our", or "the app"), operated by Piotr Kowalik, collects, uses, and protects your information when you use our mobile application available on the Apple App Store and Google Play Store.

By using the app, you agree to the practices described in this policy.

2. Information We Collect

a) Anonymous Account Data

We use Firebase Anonymous Authentication. When you first open the app, a unique anonymous user ID (UID) is automatically created in the background. No name, email address, or personal information is required or collected during this process.

b) Documents and Images You Submit

When you photograph, scan, or upload a document, that file is temporarily transmitted to our secure servers (Firebase Storage) solely for the purpose of AI analysis. Documents are processed and then deleted. They are never stored permanently, shared with third parties, or used to train AI models.

c) Conversation History

AI-generated summaries and your follow-up chat messages are stored in Firebase Firestore, linked to your anonymous UID. This allows you to access your history within the app. This data is not linked to your real identity.

d) Purchase Information

In-app purchases are handled by Apple (App Store) or Google (Google Play). We use RevenueCat to manage credit transactions. We do not store your payment card details. RevenueCat may collect anonymised purchase data in accordance with their own privacy policy.

e) Usage Data

We may collect anonymised usage analytics (e.g. number of scans, app crashes) via Firebase Analytics to improve the app. This data cannot be used to identify you personally.

3. How We Use Your Information

  • To provide and improve the core document analysis service
  • To maintain your credit balance and purchase history
  • To store your conversation history for your convenience
  • To diagnose technical issues and improve app stability

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

All data is stored on Google Firebase infrastructure, which uses industry-standard encryption in transit (TLS) and at rest. Our AI processing is handled server-side via Google Cloud Functions, ensuring your API keys and data are never exposed to the client device.

Documents you submit are processed in real time and are not retained on our servers beyond the immediate processing window.

5. Children's Privacy

What's the Gist? is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted data through our app, please contact us and we will delete it promptly.

6. Your Rights

You have the right to:

  • Request deletion of your data (including conversation history and anonymous account)
  • Request a copy of any data associated with your anonymous UID
  • Withdraw consent at any time by uninstalling the app

To exercise these rights, contact us at petekovalyk80@gmail.com.

7. Third-Party Services

The app uses the following third-party services, each governed by their own privacy policies:

  • Google Firebase – Authentication, Storage, Firestore, Cloud Functions
  • Google Gemini AI – Document analysis (server-side only)
  • RevenueCat – In-app purchase management
  • Apple App Store / Google Play – Payment processing

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact: