Privacy

Who is responsible

[to be filled in], [to be filled in]. Send questions about your data to [to be filled in].

What we keep

• An anonymous account per device. A random number, with no email address, phone number or password.
• Your name and face: the name, colour and face you pick yourself. A first name is enough.
• Your groups: the names of the people in them, including those without the app. Who paid, the amounts, the lines of a bill, who had what, whose birthday it was and who paid back.
• Your devices: a label like “iPhone · Safari” and when you last used the device, so you can see under You which devices can open your groups.
• A log per group: who added, changed or undid what, so everyone in the group sees what changed.
• Codes and links: invite codes, link codes and personal codes are temporary. Your restore code and the links behind QR codes are only stored as a hash, which nobody can turn back into the code.
• Against abuse: when codes are typed in, we log the attempts with a hashed fingerprint of your IP address. We delete those after 7 days.

What we don’t do

• No money goes through the app. Tournée doesn’t know your account number or your card and doesn’t connect to your bank.
• The photo of a receipt stays on your device. Your device reads the receipt itself. Only the lines you save go to the group.
• No ads, no trackers and no analytics, in the apps or on the website. We don’t sell anything on.
• This website sets no cookies and loads nothing from other servers. The web app keeps your session in your browser’s storage, so you stay signed in.

Who sees your data

• People in the same group see that group’s names, amounts and bills. People outside your groups see nothing.
• Someone who gets a link only sees what belongs to that link: for example their own share of a dinner and who they pay back.
• Supabase stores the database for us, in a data centre in Ireland. Supabase only processes that data on our behalf.
• GenX (genx.be) hosts the website and the web app.
• Apple and Google distribute the apps through the App Store and Google Play. What they keep is in their own privacy policies.

Why we’re allowed to

We use your data to do what you ask the app to do: keep your groups and show whose turn it is (Article 6(1)(b) GDPR).

Names of people without the app and the attempts we log against abuse fall under legitimate interest (Article 6(1)(f)): a group doesn’t work without those names, and the app has to be protected against people guessing codes. When you add someone without the app, use only a first name.

How long

Your groups are kept for as long as you use them, also when you archive a group. When you remove someone from a group, earlier rounds and dinners keep that name, so the amounts still add up.

Temporary codes expire on their own. The attempts we log against abuse are deleted after 7 days.

“Erase everything and start over” under You erases everything on your device. If you want us to delete your account and your data on the server as well, email [to be filled in].

Your rights

You can see your data, have it corrected or deleted, object to how it’s used and ask for it in a file. Email [to be filled in]. Because your account is anonymous, we’ll ask you to show it’s yours, for example with a personal code from the app.

If you’re not happy with how we handle your data, you can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be).

Children

You can add a child to a group by name, for example when they don’t pay along. Use only a first name. Anyone under 13 uses the app together with a parent.

When this changes

When we change this policy, the date at the top changes too.