Privacy Policy

About this app

GBH is an internal company management tool operated by Global Bali Home for its team. Access is by invitation only; accounts are created by a company administrator. The app is not offered to the general public and does not serve ads.

Data we collect

• Account data: your email address, display name, and role within the company, used to sign you in and control what you can see and do.
• Financial records: transactions, payment requests, contracts, and related details that you or your colleagues enter as part of your work.
• Attachments: receipts and documents you upload to support financial records.
• Device push token: if you allow notifications, a token identifying your device so we can deliver push notifications about approvals and payments.
• Audit records: actions you take in the app (for example creating or approving a transaction) are logged for accountability.
• Usage data:when and for how long you use the app, which sections and records you open (the record's type and number only, never its contents), and basic device details (device model or browser, operating system, app version). It is visible only to the company administrator and is used to understand how the tool is used and to improve it.

How we use it

Data is used solely to run the company's financial workflows: recording and approving transactions, reporting, and notifying you about events that require your attention. We do not sell personal data, use it for advertising, or share it with third parties beyond the service providers listed below.

Where it is stored

Data is stored with our infrastructure providers: Supabase (database, authentication, and file storage) and Vercel (application hosting). Push notifications are delivered through the Apple Push Notification service. These providers process data on our behalf and do not use it for their own purposes.

Retention

Financial records are retained for as long as the company is required to keep its books. Usage data is kept for the company's internal analysis and is never shared outside the company. Your account data and device push tokens are removed when your account is deactivated. You can revoke push notifications at any time in your device settings.

Contact

For any questions about your data, including requests to access or delete it, or to deactivate your account, contact your company administrator or email winstik@gmail.com. See also our Support page.