Privacy Policy

1. Data we process

• Account data: name, email address, authentication metadata, and language preference.
• Budget data: accounts, balances, transactions, categories, rules, projects, and related notes entered or imported by the user.
• Subscription data: billing status and technical references required to synchronize access after payment.
• In-app purchases: App Store or Google Play purchase history (plan, dates, subscription status), linked to your Marolya ID — to open access to the subscribed features (performance of the contract). No payment data is sent to us: it stays with Apple or Google.
• Device type used (website, Android app or iPhone app) and the dates of your first and last visit on each — to assist you if something goes wrong and to steer the service (legitimate interest). Neither your device model, nor your operating system version, nor your location is recorded. This information is deleted along with your account, and therefore also after a year without a visit.

3. Processors and transfers

UseBudget relies on technical providers strictly necessary to operate the service: Vercel for application hosting, Neon for the database (European Union — Frankfurt, Germany), Brevo for transactional emails, and Stripe for payments. Other processors may be used for infrastructure or support when required.

RevenueCat Inc. — management of App Store and Google Play in-app purchases; it only receives your Marolya ID and your purchase history (United States, standard contractual clauses). Apple and Google process the payment as separate controllers, under their own policies.

Google Firebase Cloud Messaging (Google Ireland Ltd) and Apple Push Notification service (Apple) — delivery of notifications in the Android and iPhone apps. They receive the device token (pseudonymous), the screen to open and the text of the notification, which may contain an envelope name or an amount (standard contractual clauses and Data Privacy Framework). This text also appears on the lock screen: you can hide it in your phone's notification settings.

Data is only shared on a need-to-know basis and under appropriate contractual safeguards.

4. Retention

Data is kept for as long as the account remains active and for the limited period needed to handle security, support, or legal obligations.

When an account is deleted, associated personal data is removed or anonymized within the normal technical deletion cycle, subject to legal retention requirements and backup constraints.

5. Your rights

• Right of access, rectification, deletion, restriction, objection, and portability where applicable.
• Right to contact UseBudget for any GDPR or privacy request at usebudget@marolya.fr.
• Right to lodge a complaint with the CNIL (cnil.fr), the French supervisory authority, if you believe your rights are not respected.

7. Cookies

UseBudget only uses strictly necessary cookies: your session (sign-in), the security of the Marolya sign-in, and your language preference. No advertising or tracking cookie — which is why no consent banner is needed.

Audience measurement: anonymous statistics without cookies or personal data (Vercel Analytics, with redacted URLs).

Audience measurement: if you arrive through a tagged link (one of our social media posts, for example) or from a social network or a search engine, the “marolya_provenance” cookie, shared by the marolya.fr sites, keeps for at most 30 days the source, medium, campaign, landing site and day of that first visit — with no identifier: two people coming from the same link get the same cookie. It is only used to count, in aggregate, where sign-ups come from, and it is erased when your Marolya ID is created. It meets the CNIL conditions for consent-exempt audience measurement; it is not set if your browser sends the “do not track” signal (Global Privacy Control), and you can delete it at any time.