Privacy policy

Data controller

Alexandre Pletty, 5 rue Alsace Lorraine, 42000 Saint-Étienne, France, is responsible for the processing described below. Contact: support@fleen.app.

Data collected

Your email address, and the identifier sent by Apple or Google if you sign in with them. Your first and last name and, if you choose to add them, your photo, date of birth, phone number, birthday and an emergency contact. If you add an emergency contact, make sure they agree.

The bills, spending, income, budgets and split preferences you enter; your spaces (Pro, Investment, pots and free spaces) and what you write in them; for a pot, the email address of the people you invite to it; the members of your household and settlements between them; the state of your subscription; your device’s notification token; messages sent to support; the reason for cancelling and the satisfaction rating you choose to give; your notification and email preferences; and the technical data needed for the service to work, stay secure and be analysed, including a log of the requests made to the servers (date, route called, result, duration and account concerned, without the content of what was exchanged) and, for each sign-in attempt, the IP address, the approximate place it points to (country, city and the approximate coordinates of that city, never the location of your device), the type of device and the outcome.

If you join the waiting list or choose to receive our news: your email address, your language and those choices.

Only the email address is needed to create an account; the other profile details are optional.

Data never collected

No bank login, no bank statement, no location of your device (only the approximate place of a sign-in, drawn from its IP address, is kept), no access to your contacts. The day a bank connection is offered, it will rely on the consent given to your bank and will stay optional and revocable.

No decision with legal or similarly significant effects on you is taken solely by automated processing.

Purposes and legal bases

Providing the service, managing the account and the subscription, and support (performance of the contract), including the account’s emails: sign-in codes, invitations, receipts, due reminders, the monthly summary and status alerts, the last three of which can be turned off in the app or from each email; meeting accounting obligations and answering requests to exercise your rights (legal obligation); security, including spotting suspicious sign-ins, fraud prevention, error monitoring, analysing how the service and sign-ins are used, reasons for cancelling, and site analytics (legitimate interest: protecting accounts, understanding how fleen is used and improving it; you can object by writing to support@fleen.app); sending the launch message, the news you chose to receive and fleen’s own information notifications (consent, withdrawable at any time).

Members kept apart

Within a household, other members only see the shared bills, how they are split and the balance. Your income, what you have left and your personal spending are never accessible to them.

Your spaces are visible to you alone. A pot is also visible to the people who joined it: they see its name, its target, its date and what each person has paid in.

What you choose to show them (photo, phone number, birthday, emergency contact) is only visible to the members of your households, and stops being so when you leave.

Recipients and processors

Data is never sold, rented or used for advertising. Only technical processors needed for the service can access it, within the limits of their task: Hetzner Online GmbH (server hosting); Cloudflare (delivering the site and the app, storing profile photos and encrypted backups); Resend (sending emails, waiting list and email preferences); RevenueCat (tracking subscriptions bought on the stores); Stripe (payment of subscriptions taken on fleen.app); Expo (delivering notifications); Sentry (error monitoring, in the European Union); Apple and Google (sign-in, purchases and notifications). Site analytics (Umami) are hosted by the publisher itself.

The fleen team can access, from a console protected by two-factor authentication, only what support and operations need: the account’s identity, plan, household without amounts, spaces without their name or amounts (their kind, when they were made and how many people take part), devices and messages sent to support. It never accesses the amounts you enter. To help you when you get stuck and to see where people give up, it can also read the request log of your account turned into actions (household created, shared charge added, notifications read), with no amounts and no labels, and your personal space shows only as a single line. Every time an account is opened, it is logged. Support messages are translated automatically on our own servers, without any third party.

Hosting and transfers

fleen’s servers and database are hosted in the European Union. Some of the processors above are based in the United States. Transfers to them are covered by the safeguards the GDPR provides, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Retention

Budget data is kept for the life of the account. A deleted account can be restored for thirty days, then its data is erased. It then leaves the encrypted backups as they rotate, no later than three months afterwards, except for what the law requires us to keep.

An address on the waiting list is erased after the launch message, unless you chose to receive our news; those choices are kept until you withdraw them.

A sign-in code is deleted after seven days. An expired or closed session, and an expired, accepted or withdrawn invitation (with the address invited), are deleted thirty days later. The log of requests made to the servers is deleted after thirty days, the log of who opened your account after ninety days, the sign-in history after six months, reasons for cancelling and satisfaction ratings after one year, the history of sign-ups to and unsubscriptions from our news after one year. A request to exercise your rights is kept three years after it is closed, as proof of the answer.

Security

Exchanges are encrypted in transit, backups are encrypted, server access is restricted, unusual sign-ins (repeated wrong codes, a country or device never seen) are spotted and may lead the team to close your sessions or block an address, and the app can be locked with Face ID or the device passcode.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. Exporting your data is available at any time from the app, for everyone, subscribed or not, and you can delete your account there. Other requests are handled at support@fleen.app within one month.

Complaints

You can lodge a complaint with the CNIL, 3 place de Fontenoy, 75334 Paris Cedex 07, France, or at cnil.fr.

Minors

The service is for adults only.

Changes

Any substantial change to this policy is notified in the app or by email before it takes effect.