Privacy policy

Version of 27 October 2026 (bot protection)

This is a translation for convenience. The French version (Politique de confidentialité) prevails.

1. Who is responsible for your data

KOOMY (SASU, SIREN 998 971 014, 32 allée de la Robertsau, 67000 Strasbourg), publisher of My Little Budget. For any question about your data: privacy@mylittlebudget.app.

2. What we keep

• Your sign-in identifier (the technical identifier provided by Google Firebase), your sign-up date and the version of the terms you accepted. We do not keep your email address in our database and we do not manage any password: your address is known to Google Firebase, which uses it to sign you in and, if you choose that method, to send you your sign-in link.
• What you enter: accounts and balances, transactions, transfers, envelopes and planned amounts, planned income and scheduled payments, debts and loans, checks with your bank; your first name, country and currency (asked when you create your account, editable in “My account”); and, if you answer, how you heard about us (someone you know, social media, search, article, other).
• The number of messages sent that day to the companion (for the daily limit), without their content.
• The days you open the application: one date per day, with no time, no screen viewed, no IP address or device, and nothing about what you do in it.
• The messages you send us from “A problem? An idea?” (type, text, status and our reply), with technical information only if you choose to attach it (language, screen, screen size, browser). They are deleted with your account.
• Your choice to show your Google photo or not. The photo itself is never kept: your browser displays it directly from Google’s servers, for you only.

We keep neither your conversations with the companion nor receipt photos. No advertising cookies or third-party audience measurement tools are used; only the technical information needed for signing in and for bot protection (reCAPTCHA) is kept in your browser.

3. Why

Only to provide the service you use (legal basis: performance of the terms of use). Your data is never sold, rented or used for advertising, nor to send you marketing.

The days of use only feed overall figures (how many people use the application, how many come back), to decide how it evolves; they are never used to follow a particular person (legal basis: our legitimate interest in improving the service). You can object by writing to privacy@mylittlebudget.app.

Your country and your optional answer to “How did you hear about us?” are also used, only as overall figures (how many sign-ups per country, per source), to know where to make the application known (same legal basis; the question is optional).

4. Who has access

Each account is isolated at the database level: another user can neither read nor change your information. Our technical service providers process data on our behalf, solely to run the service:

• Neon — database, hosted in Frankfurt (European Union).
• Cloudflare — application hosting and request routing.
• Google (Firebase Authentication) — signing in with your Google account or with a link sent to your email address (the email is sent by Firebase), and displaying your Google profile photo if you keep it shown.
• Google (Firebase App Check and reCAPTCHA) — bot protection: without any checkbox, reCAPTCHA checks that the app is used from a real browser, based on technical information about that browser and device. No budget data is sent. This check protects sign-up, the companion and receipt photos (legitimate interest: security of the service). Google’s Privacy Policy and Terms of Service apply.
• Anthropic (United States) — only when you use the companion or the receipt photo: a figures summary of your budget for the cycle (balances, envelopes, due payments, debts, with their labels, and your currency) and your question, or the receipt photo, are sent to it to produce the answer. No identifier, email address or first name is sent. Anthropic does not use them to train its models.

When data is processed outside the European Union (Cloudflare, Google, Anthropic), the transfer is covered by the safeguards provided for by the GDPR (European Commission standard contractual clauses or the EU–US Data Privacy Framework).

5. How long

• For as long as your account exists.
• When you ask for your account to be deleted, the application is blocked immediately and you have 7 days to change your mind. After that, your account and all your data are permanently erased within the following days, along with your sign-in identifier at Google Firebase.
• Technical backups of the database, which are only used to recover from an incident, are deleted automatically when their short retention period expires.

6. Your rights

• Get your data: “My account” → “Export my data” downloads all your transactions in a spreadsheet file.
• Correct: everything you enter can be edited in the application.
• Erase: “My account” → “Delete my account”.
• You also have the rights of access, restriction, objection and portability provided for by the GDPR: write to privacy@mylittlebudget.app. We reply within one month.
• If you believe your rights are not being respected, you can lodge a complaint with the CNIL (French data protection authority) (www.cnil.fr).

7. Security

Encrypted connection (HTTPS), isolation of each account in the database, amounts stored as exact decimals, transaction history kept (a correction never silently rewrites the past). Since no system is infallible, we will inform you without delay of any incident affecting your data.

8. Changes

This policy follows the evolution of the application; the version date appears at the top. In case of a significant change, you will be informed in the application.

Publisher

Application hosting: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States (servers as close as possible to the user). Database hosting: Neon, in an Amazon Web Services data centre located in Frankfurt (Germany).

Back to the app