Privacy policy

Lemoine Agency, 742 rue des Exemples, 69002 Lyon, France, is the data controller for the personal data described on this page.

You can reach the publisher at contact@example.com or on 01 99 00 12 34.

Your account email address, which you enter when you sign up and use to log in.

The expenses you log: amount, category, optional note of up to 140 characters, and date.

Cookies: a session cookie that keeps you signed in, and a short-lived cookie used while you reset your password or confirm your email address. They are the only cookies Depensia sets.

The account records kept by the authentication provider: the date the account was created and the date it was last used to sign in.

Nothing else. Depensia does not collect your bank details, your location, your contacts, your device identifiers or any analytics or tracking data.

Email address: to create your account, sign you in, send a password-reset link when you ask for one, and show you which account you are using. The legal basis is the performance of our contract with you (Article 6(1)(b) of the GDPR).

Expenses: to store them and show them back to you as totals, categories, trends and lists. The legal basis is the performance of our contract with you (Article 6(1)(b) of the GDPR).

Session cookie: to keep you signed in between pages and requests. It is strictly necessary for the service, so it does not require your consent (Article 82 of the French Data Protection Act).

We use your data for nothing else: no profiling, no advertising, no marketing email and no sale of data.

The session cookie is set by Supabase Auth, the authentication provider. It holds the token that proves you are signed in.

A password reset or an email confirmation also sets a short-lived cookie that holds the one-time code linking the emailed link to this browser. It is removed when the flow finishes or expires.

These cookies are strictly necessary: without them, the app cannot keep you logged in or complete a password reset. They are not used for analytics, advertising or tracking.

The access token in the session cookie expires after one hour and is refreshed while you use the app. The session cookie stays on your device until you sign out or the session expires; signing out removes it.

Depensia sets no other cookie, so there is no cookie banner: there is nothing optional to consent to.

Your account email address is kept until you delete your account.

An expense is kept until you delete that expense or your account. Deleting is permanent: there is no archive, no soft delete and no undo.

The session cookie lasts until you sign out or the session expires, and the short-lived sign-in cookie lasts only until the password reset or email confirmation finishes. Nothing is kept beyond the life of your account: when the account goes, the expenses go with it.

You, and only you, can see your expenses. The database restricts every read and write to the signed-in account, so no other user can open, search or change your records.

The publisher and the providers that run the service can access the data technically: Supabase for authentication and the database, and Vercel for hosting. They process it on the publisher's instructions to provide the service, not for their own purposes.

Nobody else. Depensia does not share, sell or publish your data, and does not show it to advertisers.

Depensia uses no analytics and collects no tracking data. There is no analytics service, no advertising or social pixel, no fingerprinting and no cross-site tracking.

No third-party script profiles you. The only cookie is the session cookie described above.

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and the right to data portability.

Right to erasure: you can delete your account and every expense in it from the account menu in the web app or the Account screen in the iPhone app. Deletion is immediate and permanent.

Access and portability: there is no export feature, so to obtain a copy of your data, email contact@example.com.

Rectification: you can correct or delete any expense in the app. For anything else, email the publisher. Restriction and objection: email contact@example.com and explain what you want.

We answer within one month, as the GDPR requires.

You can also lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

For any question about this policy or your data, email contact@example.com, call 01 99 00 12 34, or write to Lemoine Agency, 742 rue des Exemples, 69002 Lyon, France.