Data processing agreement
GBalance data processing agreement
This agreement explains how GBalance collects, uses, stores, and protects personal data. We follow the Personal Information Protection Law of the People's Republic of China and the related rules, and we protect your privacy and the security of the data. Read it so you know your rights and our duties. Email support@gbalance.gunlabs.cn.
Published: 2025年10月22日
Last updated: 2025年11月11日
The processor is 刘罡.
- Data processor: 刘罡 (GBalance developer).
- Email: support@gbalance.gunlabs.cn
- WeChat: lg8644
- Service location: 中国·南宁
We process data, including ownerKey, for these purposes.
- Features: bookkeeping, asset analysis, and budgets.
- Performance: crash logs and performance metrics, to improve stability and the experience.
- Statistics: anonymous usage statistics, to see which features are used and to improve the design.
- Security: we watch for misuse so we can protect accounts.
- Notices: important updates, feature changes, and security reminders.
- Subscriptions: we use ownerKey, transaction records, and notification events to verify subscription status for support and reconciliation.
The records include an appAccountToken, ownerKey, and the original transaction ID.
- Account: nickname, email address, and a third-party sign-in such as Apple ID or Google.
- Ledger: entries, tags, calendar events, and reminder settings you create.
- Device: model, operating system, app version, and a device identifier used to sync across devices.
- Usage: how often features are used, operation logs, and session length, as anonymous statistics.
- Crash logs: error reports and performance metrics, without identity details.
- Anonymous identity: an appAccountToken and its hash ownerKey, used only to recognize, restore, and bind an anonymous subscription.
- Subscription records: the original transaction ID, auto-renewal status, and benefit-change events, for support and reconciliation.
Storage uses AES-256, and ownerKey is kept apart.
- Location: cloud data is stored with providers in China that meet the classified protection requirements, such as Alibaba Cloud or Tencent Cloud.
- How long: account data stays while the account is active, ledger data follows your settings, and crash logs are kept for 90 天.
- Transit: all transfers use HTTPS/TLS.
- At rest: sensitive cloud data, including ledger contents, uses AES-256.
- Access: only authorized maintainers, only when needed, and access is logged.
- Backups: we back up the data and rehearse recovery.
- The anonymous subscription ownerKey and the account-mapping records are stored apart, with least privilege, an audit trail, and an alert.
Site statistics are counted on api.gunlabs.cn.
- Apple App Store: distribution, in-app purchase, push notifications, and App Store Server API checks.
- Cloud providers: storage, hosting, and CDN.
- Site statistics: this site counts visits on the developer's own server api.gunlabs.cn (page path, referrer, random session id, clicks, IP address, and User-Agent). The data is not used for advertising and is not deleted automatically.
- Payments: Apple processes in-app payments. We do not store your payment information.
- Third parties that process data for us are bound by a data-processing agreement and by privacy duties.
You can ask for deletion.
- Access: you can view account information and ledger data in the app at any time.
- Correction: you can fix personal information that is wrong.
- You can ask for deletion of a ledger entry or a tag in settings, and you can ask us to delete the account and the data tied to it.
- Export: you can export ledger data as JSON or CSV.
- Withdraw consent: you can withdraw consent for processing. Some features may stop working.
- Complaints: email support@gbalance.gunlabs.cn if you have a question about processing.
Some records are removed after 30 天 or 90 天.
- After you close the account, we delete your personal data within 30 天, except what the law tells us to keep.
- Ledger data leaves the client when you delete it. The cloud copy can be recovered for 30 天 and is then deleted.
- Crash logs are deleted automatically after 90 天. Website visit data is not deleted automatically. If you write and ask, we delete the records we can tie to that visit.
- An unbound anonymous purchase identifier and its hash are deleted after you ask. Once it is bound to an account, the original anonymous record is deleted when it is no longer needed. Transaction records keep the fields required for support and reconciliation. To ask for deletion, email support@gbalance.gunlabs.cn.
- Some data may be kept longer when the law or a contract requires it.
Data is stored within China.
- Your data is stored mainly on servers within China.
- A third-party sign-in such as Apple ID may involve a transfer across a border. We follow the applicable law.
- We do not send your personal data outside China on our own initiative unless you clearly agree or the law requires it.
The app is not for children under 14 岁.
- GBalance is not directed at children under 14 岁. If we learn that we collected a child's data, we delete it immediately.
- If you are a guardian and a minor used the service without consent, contact us.
If you continue to use the service, you accept the update.
- We may update this agreement when the law or the product changes.
- We tell you about a material change in the app or by email.
- If you continue to use the service, you accept the updated agreement.
Contact us
If you have a question about this agreement, or you want to use a data right, contact us:
Data protection contact: 刘罡
Email: support@gbalance.gunlabs.cn
WeChat: lg8644
We reply within 3 business days and finish the request within 15 business days.
Your agreement
Using GBalance means you have read, understood, and agreed to this data-processing agreement. If you do not agree with any part of it, stop using the service.