Giya privacy policy
Effective Date: 9th of October, 2026
Giya is run by Ting Software Development Services ("Giya", "we", "us"). This policy explains what personal information we collect through the Giya app and the heygiya.ph website, why we collect it, who sees it, and the choices you have. We don't sell your personal information.
1. Who is responsible for your data
Ting Software Development Services is the personal information controller for the Service. You can reach us at support@heygiya.ph or at Bacolod City, Negros Occidental, Philippines.
2. What we collect
When you create an account: your name and email address, and your profile picture if you sign in with Google. We use Google, Apple or an emailed sign-in link, and never see your password. Apple may give us a private relay email address if you choose to hide yours.
What you add to Giya: expenses (title, amount, currency, date, category, who paid and how it was split), groups, friends, balances, and when someone is marked as paid back. Your app settings, such as your currency and notification choices, are saved too.
Information about other people you add: you can add friends and group members who don't have Giya yet. This can include their name and, if you choose, their email or phone number. We keep this so splits and balances work. If they later join Giya with the same email, their entries link to their new account.
Camera: if you allow it, the camera is used only to scan a group's QR code on your device. We don't store the camera image.
Push notifications: if you allow notifications, we store a device token so we can send you notifications, such as when you are added to an expense, when a payment is marked as settled or unsettled, and settlement reminders. The notification goes through Expo's push service and then Apple or Google to reach your phone.
Purchases: Premium is bought through the App Store or Google Play. They process payment and we never receive your card details. We receive confirmation of your subscription status.
Waitlist and website: if you join the waitlist, we collect your email address. Our website is hosted by Webflow, which may use cookies and similar technology to run the site. We don't run analytics or advertising trackers in the app.
Technical data: our hosting provider may log basic technical data, such as IP address, device type and error messages, to keep the Service secure and working.
We don't access your contacts, location or photos, and Giya doesn't collect sensitive information such as government ID numbers or health data. Please don't put that kind of information in expense titles.
3. How we use it
- To provide the Service: show your expenses and balances, split costs, and share them with the people in your groups.
- To send you notifications, reminders and messages about your account.
- To manage Premium and apply plan limits.
- To convert amounts between currencies using exchange rates.
- To keep Giya secure, prevent abuse, fix problems, and meet legal obligations.
- To send you updates about Giya's launch if you joined the waitlist. You can unsubscribe at any time.
We rely on your consent, our need to provide the Service you asked for, our legitimate interest in running it safely, and legal obligations.
4. Who sees your information
- Other people in your groups. They see the expenses, amounts, names and balances that involve them. They don't see your account email unless you share it.
- Service providers that help us run Giya, under agreements that limit how they use your data: cloud hosting, database and sign-in emails (Supabase, in Singapore), push notification delivery (Expo's push service, which passes notifications to Apple and Google), our website platform (Webflow), and tools we use to manage waitlist sign-ups.
- Apple and Google, when you sign in with them or buy Premium. Their own privacy policies apply.
- Authorities or advisers when the law requires it, or to protect rights, safety or the Service.
- A buyer or successor, if Giya is part of a sale or reorganisation. We'll tell you if that changes how your data is handled.
We don't sell your personal information or share it for advertising.
5. Where your data is stored
Your data is stored on Supabase servers in Singapore and may be processed by our providers in other countries. When we transfer data abroad, we use contracts and safeguards so it stays protected to the standard this policy describes.
6. How long we keep it
We keep your data for as long as your account exists. When you delete your account in the app, we delete your sign-in, profile, notifications, push tokens and friend list, along with expenses, settlements and groups that no other account is part of.
Records that another Giya user takes part in stay, because their balances depend on them. Your details on those records are removed: your name becomes "Deleted user" and your email, phone and avatar are cleared. We may keep limited records for longer if the law requires it. Waitlist emails are kept until you unsubscribe or the waitlist closes.
7. Your choices and rights
You can view and update your name, currency and notification settings in the app. You can delete your account in the app. Depending on where you live, you may also have the right to:
- be informed about how we use your data and ask for a copy of it;
- correct inaccurate or outdated data;
- ask us to erase or block data, or object to certain uses;
- withdraw consent you gave us, such as for notifications;
- receive your data in a common format (data portability);
- claim compensation if your rights were violated.
Email support@heygiya.ph to use these rights. We'll answer within 30 days. If you're in the Philippines and aren't satisfied, you can complain to the National Privacy Commission (privacy.gov.ph). If you're in the EU or UK, you can contact your local data protection authority. We don't sell personal information, and we don't discriminate against you for using your privacy rights.
If someone added you to Giya and you don't have an account, you can ask us to remove or anonymise your details by emailing us.
8. Security
We use encryption in transit, access controls and other measures that suit the sensitivity of the data. No online service is completely secure, so we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and the authorities as the law requires.
9. Children
Giya is for people aged 13 and over. We don't knowingly collect information from children under 13. If you think a child under 13 has given us their data, email us and we'll delete it.
10. Cookies and similar technology
The Giya app doesn't use cookies or advertising trackers. Our website, heygiya.ph, is built on Webflow and uses cookies and similar technology that are needed to run the site. If we add analytics or advertising cookies in future, we'll update this policy and ask for consent where required.
11. Changes to this policy
We may update this policy. For material changes, we'll notify you in the app or by email before they take effect, and update the effective date above.
12. Contact us
Ting Software Development Services
Email:
support@heygiya.ph
Address: Bacolod City, Negros Occidental, Philippines