Privacy notice
Last updated: 29 September 2026
This notice explains what Allotwe does with personal data. It follows the GDPR (Regulation (EU) 2016/679) and the French Data Protection Act (Loi n° 78-17 du 6 janvier 1978, as amended).
Who is responsible
Allotwe is published by its operator, who is the controller. No data protection officer is appointed: Article 37 of the GDPR does not require one for this service. To exercise your rights or ask a question, write to foyer-manager@gmail.com.
foyer-manager@gmail.comData we process
Account: email address, a password stored only as a bcrypt hash (or none, if you use Google), an optional Google account identifier, and the date the account was created. A guest does not have a real address: a technical address is stored for that session. One account can belong to several households, as admin, member or guest. Household: name, type (solo or shared) and how often you review balances. Members: display name, colour, status (active or archived) and an email. If you do not enter an email, the app stores a technical placeholder that is not a real mailbox. Money records you enter: expenses, splits, categories, recurring bills, income, settlements and optional notes. Session: a signed token kept in this browser (local storage), containing only your account id. It is not a cookie. An account token expires after 7 days. A guest visit stays in this browser for 30 days after you last open the household, and each visit renews that window. An account is what opens the household on other devices. Language: the language you pick, kept in this browser. We do not ask for special-category data (health, religion, biometrics and similar). A Google display name is used only once, to suggest a household name, and is not stored as a separate profile field.
Why, and on what basis
Running the service you ask for — account, household, expenses, balances and settlements. Legal basis: performance of a contract (Article 6(1)(b) GDPR). Keeping the account secure and limiting a household to its admin, its members and its guests. Legal basis: contract, and legitimate interest in preventing unauthorised access (Article 6(1)(f)). Google sign-in, when you continue from the sign-in or registration page, including Google’s prompt to use an account already signed in on this browser. We then receive your email, whether Google has verified it, and a Google identifier. Legal basis: contract, including the steps you take before creating an account. Audience measurement of pages visited, without cookies and without your household id (it is removed before the event is sent). Legal basis: legitimate interest in understanding which pages are used (Article 6(1)(f)). This is not advertising and it is not used to profile you. You can object to processing based on legitimate interest by writing to the contact address. We do not make automated decisions that produce legal effects about you.
Who receives the data
The publisher of Allotwe. Vercel, Inc. (United States) hosts the website, the API and cookieless audience measurement. Vercel is certified under the EU-US Data Privacy Framework. Neon hosts the database. Household data is stored in the European Union, in Frankfurt (Germany). Neon acts as a processor. Google LLC, on the sign-in and registration pages. The script is not loaded on the home page, and it is not loaded while a household visit without an account is open. On those two pages, Google may offer to continue with an account already signed in on this browser. We do not sell personal data and we do not share it with advertisers.
Transfers outside the European Union
The database is stored in the European Union (Frankfurt, Germany). The website and the API run on Vercel, a company established in the United States. Vercel is certified under the EU-US Data Privacy Framework, an adequacy decision of the European Commission for certified organisations. Neon is established in the United States. Storage stays in Frankfurt. Neon states that it relies on the Data Privacy Framework for international transfers and offers a data processing agreement. If you use Google sign-in, Google may process that sign-in outside the European Union under its own terms and the same kind of safeguard. Fonts are served by this site. Your browser does not contact Google to load them.
How long we keep it
Account and household data are kept for as long as the account exists. Deleting a household in Settings erases that household and the data attached to it: members, expenses, income, settlements and the rest. The account stays open. The deletion is immediate in the application database. The database host may keep a backup copy for its own backup window, then delete it. An account session token expires 7 days after it is issued. A guest visit stays open for 30 days after the last time this browser opens the household, and each visit renews that window. Signing out of a guest visit keeps that visit in this browser, so the household can be opened again here until the 30 days run out. Signing out of an account removes that account's token from this browser. Creating an account keeps the household on other devices. Audience measurement does not include a household id or query parameters.
Your rights
Under the GDPR and the French Data Protection Act, you can: Access your data in the app (account, household, members, expenses, income, balances). Correct it in the app (household settings, members, expenses). Delete it: Settings, then delete the household. That erases the data for that household. The account stays open. To delete the account itself, write to the contact address. Export expenses as CSV from the expenses page. For a copy of the rest, write to the contact address. Ask us to restrict processing, or object to processing based on legitimate interest, via the contact address. Lodge a complaint with the CNIL, the French supervisory authority: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
www.cnil.frHow the data is protected
Passwords are hashed with bcrypt before they are stored. They are never kept in clear text and they are never returned by the API. Each request is checked with a signed token. An account can only open the households it belongs to. In production the site is served over HTTPS. The source code is public under the AGPL-3.0 license. Anyone can check how the data is handled.
Read the source codeChildren
The service is meant for adults who manage a household. In France, the digital age of consent is 15. We do not knowingly create accounts for children under 15. If you believe we have, write to the contact address and the account will be deleted.
Changes
This notice may be updated when the service changes. The date at the top of the page is the date of the current version.
Legal notice
Publisher: the operator of Allotwe. Contact: the address given in the first section of this page. Hosting of the site and the API: Vercel, Inc., United States (https://vercel.com). Database: Neon, with storage in the European Union (Frankfurt, Germany). This page is the privacy notice required by Articles 13 and 14 of the GDPR and by the French Data Protection Act. It also names the host, as required for a public website under the French LCEN.