This Privacy Policy explains how Gtransact ("we", "our", or "us") collects, uses, and protects your information when you use the Gtransact Android application.
1. Information We Collect
a) Account Information
When you sign in with Google, we collect your Google account email address to identify your account and link your subscription.
b) Subscription Information
When you purchase a subscription through Google Play, we receive your purchase token and order ID from Google Play to activate your account. We do not store full payment card details.
c) Business Registration Information
We only store your business registration data in our database — your store name, owner name, registered Main Phone GCash number, email, and subscription plan. This is the only GCash-related information we hold on our servers. Additional GCash receiver accounts you add (reader phones, iPhone numbers, labels, balances) are stored only in your own Google Sheet and never sent to us.
d) GCash Notification Content (Notification Listener)
If you use the GCash Reader Phone feature, the app uses Android's NotificationListenerService to read incoming notifications from the GCash app (com.globe.gcash.android) on your device.
- We read only GCash notifications that contain payment received alerts (e.g., "You received ₱500 from Juan Cruz").
- We extract: sender name, sender GCash number, and payment amount.
- This data is saved to a Google Sheet in your own Google Drive account so you can track incoming payments.
- We do not read notifications from any other apps.
- We do not sell or share notification content with third parties.
e) Transaction Records
Transaction data you manually enter (amount, reference number, customer info, photos) is stored in your account to provide transaction history and reports.
f) Device Information
We store a device identifier and phone label to associate GCash Reader Phones with your store account.
2. How We Use Your Information
- To activate and manage your subscription
- To automatically record incoming GCash payments to your Google Sheet
- To display transaction history and reports in the app
- To process referral commissions and payout requests
3. Data Storage
Your data is stored in the following services:
- Supabase — Business registration data (store name, owner name, email, Main Phone GCash number, subscription plan), wallet and payout records, and the device identifiers needed to enforce your plan's reader-phone limit.
- Google Sheets (your Google Drive) — Transaction records, GCash notification logs, fee table, and the full list of your GCash receiver accounts. You own this data and can access, edit, or delete it directly from your Google Drive. We do not have a copy.
- Your device (SharedPreferences) — Role, store ID, and the GCash phone details of that one device, stored locally.
4. Data Sharing
We do not sell your personal information. We share data only as necessary to operate the service:
- Google — For authentication (Sign in with Google), Google Sheets, and Google Play Billing
- Supabase — Database hosting for account and subscription data
- Vercel — Serverless API hosting
5. Notification Listener Justification
The NotificationListenerService permission is used exclusively to:
- Read GCash payment received notifications on designated GCash Reader Phones
- Extract the payment amount and sender details
- Automatically log this to the store owner's Google Sheet
This feature replaces the need to manually enter each payment, reducing errors for high-volume GCash merchants. The service runs only on phones the store owner designates as GCash Reader Phones by scanning a QR code.
6. Data Retention
We retain your account data while your subscription is active and for 90 days after expiry. You may request deletion at any time using the contact form below. Notification data in your Google Sheet is yours — you control its retention directly in Google Drive.
7. Children's Privacy
Gtransact is intended for business use by adults (18+). We do not knowingly collect information from children.
8. Security
All data is transmitted over HTTPS. We use industry-standard security practices for data storage. However, no system is 100% secure — please protect your Google account credentials.
9. Your Rights
You may request to access, correct, or delete your personal data by submitting the contact form below. You may also disconnect GCash Reader Phones at any time from within the app.