GuriGO – Privacy Policy

Legal document version: v6.04.02
Effective from: 1 June 2026
Last updated: 1 June 2026

Language / Nyelv / Sprache: HU | EN | DE | PL | RO | DA | NO

← Back to GuriGO

This policy explains how we process personal data when you use GuriGO (web/PWA, Android TWA via Google Play Store, and native iOS app) under the EU General Data Protection Regulation (GDPR) and applicable Hungarian law.

1. Data controller

Name: Princz Attila egyéni vállalkozó
Registered office: 8474 Csabrendek, Kossuth utca 21., Hungary
Tax number: 91688695-1-39
EU VAT number: HU91688695
Registration number: 61712119
Email: info@gurigo.eu
Website: https://gurigo.eu

2. Categories of data processed

2.1. Account and authentication

• email address, password (encrypted, Firebase Authentication);
• Firebase user identifier (UID);
• sign-in provider (email/password, Google, Apple);
• Apple “Hide My Email” relay address, if you choose it.

2.2. Profile and settings

• display name, language, theme, notification settings;
• billing details (name, address, tax number – if you provide them);
• trial and subscription metadata (e.g. trialStartedAt, trialEnd, plan status).

2.3. Working time and trip data

• working, driving and rest time entries you record;
• trips, stops, notes;
• optional GPS/location data (only if you allow it; we do not perform continuous background tracking).

2.4. Camera and document photos

The app lets you photograph or upload documents (e.g. CMR, receipts, permits). The camera activates only on your explicit action. We do not perform automatic face recognition on uploaded images. Images are stored on Google Firebase (Google Cloud Storage).

2.5. Document and permit expiry (optional)

The app may optionally store expiry dates of documents and permits. Providing this is your choice. Reminders are informational only and are not official notifications.

2.6. Subscriptions and payments

• Stripe (web/PWA and Android TWA): subscription metadata, Stripe customer ID; full card data is handled by Stripe, we do not store it.
• Billingo: invoicing data (name, address, email, tax number) for automated invoicing of Stripe payments (Billingo API).
• Apple In-App Purchase (native iOS): purchase metadata, product identifiers. For Apple In-App Purchase, purchase, payment, receipt and refund processes are handled by Apple’s systems; Billingo is not used for these.

2.7. Technical data

• device/browser type, app version;
• technical logs, crash reports;
• IP address for a short time (security, abuse prevention).

2.8. Customer support

Content of emails sent to info@gurigo.eu.

3. Purposes and legal bases

• Registration data – account creation, sign-in, cloud sync (contract performance, GDPR Art. 6(1)(b)).
• Working time / trip data – core service functionality (contract performance).
• Location data (optional) – more accurate recording if you enable it (consent, GDPR Art. 6(1)(a)).
• Subscriptions and invoicing – fee collection, invoicing (contract; legal obligation – accounting).
• Trial management – plan change when trial ends (contract performance).
• Statistics, debugging, performance – see section 9 (legitimate interest, GDPR Art. 6(1)(f), where applicable).
• Security and abuse prevention – legitimate interest.
• Service-related email communication – contract performance; legitimate interest where applicable (see section 3.1).

We do not use your data for marketing newsletters or selling data to advertisers.

3.1. Service-related email communication

The Provider may contact you at your registered email address about the service — for example bug reports, account or subscription issues, important operational changes, legal document updates, prior notice of inactive account deletion, or customer support. These messages are not marketing newsletters.

4. Retention of document photos

The following retention rules apply only to documents, images and document photos uploaded on the Documents tab. They do not apply to recorded work-day entries (e.g. start, end, border crossing, driving and working time data, other logged events).

Without an archival subscription, the default retention for documents on the Documents tab is 6 weeks / 42 days. With an active Archival subscription, documents are retained for the active subscription period. After the Archival subscription ends, a 1-week grace period applies; documents older than 6 weeks may then be deleted automatically.

5. Data retention – account and other data

• While the account is active, data is retained.
• Account deletion: can be started in the app. Deletion starts with a 14-day withdrawal period; afterwards the account and deletable related data are permanently removed.
• Deleting the account does not automatically cancel a Stripe or Apple subscription; cancel where you purchased to avoid renewal.
• Also via https://gurigo.eu/delete-account.html or email: info@gurigo.eu.
• Accounting records may be kept as required by law.
• Technical logs are kept as needed for troubleshooting, then deleted or anonymised.
• Inactive accounts: the Provider reserves the right to delete accounts inactive for an extended period (e.g. at least 6 months) and related deletable data, with prior email notice and a reasonable period to keep the account or sign in again.

6. Storage location

Data is primarily stored on Google Firebase / Google Cloud infrastructure, in data centres accessible from the European Union. Google acts as a processor.

7. Transfers to third countries

Some data may be processed outside the EU/EEA (e.g. United States). In such cases, transfers are based on an adequacy decision, Standard Contractual Clauses (SCC) or the processor’s GDPR compliance guarantees.

8. Processors and third parties

We share data only as necessary to operate the service with the following partners:

• Google Firebase / Google Cloud – authentication, database, file storage, backend functions;
• Google (Sign-In) – OAuth sign-in;
• Apple – Sign in with Apple; App Store In-App Purchase;
• Stripe – web subscription payments;
• Billingo – automated invoicing for Stripe payments (Billingo API);
• Sentry – error tracking;
• Firebase Analytics and Google Analytics – statistics, performance monitoring, product development;
• Rackhost – web hosting, serving and related technical logs.

We do not sell data or share it with ad brokers for advertising purposes.

9. Statistics, debugging and performance

GuriGO may use Firebase Analytics, Google Analytics and Sentry for statistics, debugging, performance monitoring and product development. Data is handled in anonymous or pseudonymised form and is not used for ad profiling, personalised ads, remarketing or campaign tracking.

10. Automated decision-making

We do not use automated decisions with legal or similarly significant effects on you — except rule-based service flows required for operation (e.g. switching to Free after trial expiry).

11. Legal liability

GuriGO is not an official tachograph and does not automatically verify compliance with traffic law. Compliance with rules remains your responsibility.

12. Age limit

GuriGO is intended for adult professional drivers. We do not knowingly collect data from anyone under 18.

13. Your rights

You may request access, rectification, erasure, restriction of processing, data portability and object where applicable, and withdraw consent (e.g. location). Send requests to info@gurigo.eu; we respond within 30 days (up to 60 days in complex cases, with notice).

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): https://naih.hu

14. Security

We use encrypted connections (HTTPS), access controls and regular updates. Complete security on the internet cannot be guaranteed.

15. Changes to this policy

The current version is published at https://gurigo.eu/legal/privacy-en.html. We will inform you reasonably about material changes.

16. Contact

Email: info@gurigo.eu
Website: https://gurigo.eu
Terms of Use: Terms of Use