Privacy Policy
Last updated: April 2026
Who we are
Gusty ([legal name], NIF: [NIF]) operates the booking platform at gustyapp.com. Contact: hello@gustyapp.com
What data we collect
- School admins: name, email, phone — for account management (lawful basis: contract performance)
- Students: name, email, phone, optional skill level — for booking fulfillment (lawful basis: contract performance)
- Payment data: handled by Stripe/Revolut and never stored on our servers
Who we share data with
Supabase (database), DigitalOcean (hosting), Stripe/Revolut (payments), Meta (WhatsApp notifications), Resend (email). All processors have Data Processing Agreements in place.
Your rights
Under GDPR, you have the right to access, rectify, erase, restrict processing, and port your data. Contact hello@gustyapp.com to exercise these rights. You may also lodge a complaint with the CNPD (www.cnpd.pt).
Cookies
We use only essential cookies required for the service to function. No analytics or tracking cookies.
Data retention
Student data is retained while the school's account is active. Upon cancellation, data is retained for 90 days then anonymized. Invoicing data is retained for 10 years per Portuguese tax law.