Privacy Policy
This policy covers the Brokeometer iPhone app and this website. It explains what is collected, why, where it's stored, and what you can do about it.
In short: only what the app needs to show your budget is stored, it's never sold, and there are no ads or tracking.
Who is responsible
Brokeometer is developed and published by Farah BEN SLAMA, founder and CEO of HER Innovation Lab (a company in the process of incorporation), who is the data controller. Contact: privacy@brokeometer.app.
What is collected
- Your account
- Email address and name, and either a password (stored hashed, never readable) or your Sign in with Apple or Google identity. Used to create your account and sign you in.
- Your preferences
- Currency and the day your pay cycle starts. Used to calculate what's left to spend.
- What you enter
- Transactions (amount, date, shop or payer, category, note), income sources, bills and subscriptions, and your categories. Used to show your budget and history.
- Merchant categories
- The category you last chose for each shop, so it's filled in next time.
- Apple Pay payments (optional)
- Only if you set up the Shortcuts automation: amount, currency, shop and card name of in-store Apple Pay payments, so they can be added for you to review.
The app doesn't collect your location, contacts, photos, advertising identifiers or bank logins, and contains no analytics, advertising or tracking code.
What stays on your iPhone
- Your sign-in session is kept in the iPhone Keychain.
- Face ID and Touch ID are handled by iOS. No biometric data is ever received.
- Apple Pay payments caught by the automation wait on your iPhone until you next open the app, then they're sent to your account and removed from the device.
Where your data is stored
In the European Union (Frankfurt, Germany), by these service providers, who only process it to run the app:
- Supabase: sign-in and the database
- Render: the server behind the app
- Apple and Google: only if you sign in with them
- Cloudflare: this website and email forwarding
Everything between the app and the servers is encrypted (HTTPS).
What never happens
- Your data isn't sold or rented.
- It isn't shared with advertisers or data brokers.
- It isn't used to train AI models.
- Nobody reads it, unless you ask for help and give permission.
How long it's kept
As long as your account exists. When you delete your account, your profile and all your transactions, bills, income sources, categories and merchant categories are deleted straight away. Any copies in server backups are removed within 30 days.
Your rights
You can see and change your data in the app at any time, and delete your account and everything in it from Settings → Account → Delete Account.
Under the GDPR you can also ask for a copy of your data, ask for it to be corrected or deleted, or object to how it's used. Write to privacy@brokeometer.app; you'll get an answer within 30 days. In the EU you can also complain to your data protection authority (in France, the CNIL).
Your data is processed to provide the app you signed up for (performance of a contract, Article 6(1)(b) GDPR).
Children
Brokeometer isn't meant for children under 16, and their data isn't knowingly collected.
Changes
If this policy changes, the date at the top changes too, and the app will tell you if the change matters.