Privacy Policy

The controller of your personal data is:

• DATAEKKO, a French limited liability company (SARL) with share capital of €100
• Registered with the Versailles Trade and Companies Register under number 890 922 073 (SIREN 890 922 073)
• Registered office: 3 rue des Près, 78300 Poissy, France

For any question regarding your personal data or to exercise your rights, you can contact us at: support@pyzo.app.

Pyzo only collects the data that is strictly necessary to operate the service. Here is exactly what is collected.

a) Account and identity

• Email address
• First name
• Gender (optional)
• Date of birth (optional)
• Profile photo / avatar (optional), stored on Supabase Storage
• App language
• Payment handles you provide (PayPal, Revolut, Lydia usernames): these are simply usernames. Never any banking data, bank details, IBAN or card numbers.

Authentication: sign-in is done via a one-time code sent by email, or through Apple and Google. Pyzo does not create or store any password.An encrypted refresh token is kept locally on your device and can be unlocked with Face ID / biometrics: this verification is handled by your device — Pyzo never accesses your biometric data and keeps none of it.

b) Couple and relationship

• Couple name, relationship type, anniversary date (optional)
• Data entered within a couple is shared between its two members and synchronized in real time across their two devices

c) Financial data you enter

• Expense amounts, recurring expenses, income, budgets, savings goals, settlements and balances
• This data is entered manually by you
• No raw banking data, no card numbers, no connection to your bank accounts. Real payments between partners are made through external services (PayPal, Revolut, Lydia, handing over cash, etc.), outside the app, under your sole responsibility

d) Notifications

• Push notification token (provided by Expo), used only to send you notifications
• This token is deleted as soon as you sign out

e) Usage measurement and crash reports

• To improve the app and fix errors, Pyzo collects usage events and, when a crash occurs, diagnostic reports, via two processors hosted in the European Union (PostHog and Sentry)
• These tools never receive: the amount of your expenses, your payment handles, the names of your custom categories, or your partner’s name.
• No advertising identifier (neither Apple’s IDFA nor Google’s GAID)
• What each service receives is detailed in the “Measurement and stability tools” section below

f) In-app purchases (Pyzo Premium)

• The Premium subscription is managed via RevenueCat and billed by Apple or Google
• Pyzo never sees your card data: it is handled exclusively by Apple and Google

g) Device permissions

• iOS: Photos and Camera (only to set a profile photo), Face ID (local unlock)
• Android: notifications and vibration
• No advertising tracking: no ATT prompt, no IDFA/GAID, no data sent to ad networks.

h) Support and feedback

• When you contact us, your message and email address are sent to support@pyzo.app (via Resend) so we can reply

What Pyzo does not collect

• No banking data (bank details, IBAN, card numbers)
• No connection to your bank accounts
• No precise geolocation (GPS or device position). Only an approximate location (country, region) is derived from your IP address by our usage-statistics tool (see “Measurement and stability tools”)
• No access to your contacts or address book
• No advertising identifier (IDFA/GAID), no cross-app/ATT tracking
• No health data, and no biometric data retained

Your account and couple data is hosted in the European Union. The pyzo.app marketing website is hosted by Vercel.

• Database, authentication and profile photo storage: Supabase, Paris region (eu-west-3, France)
• Usage statistics: PostHog, hosted in the European Union
• Crash reports: Sentry, hosted in the European Union (Germany)
• pyzo.app website: Vercel

In accordance with article 28 of the GDPR, Pyzo enters into data processing agreements with each of the providers below. None of your data is sold, rented or shared with third parties for advertising or commercial purposes.

SCCs: standard contractual clauses adopted by the European Commission (see §6).

Measurement and stability tools

Pyzo uses two third-party services, acting as processors, both hosted in the European Union. No data is transferred outside the EU, sold, or used for advertising purposes.

Sentry (Functional Software, Inc.) — crash reports. When the app crashes, Sentry receives diagnostic data: the technical stack trace of the error, the device model, the OS and app version. These reports contain no identifier: not your name, not your email, not your IP address, and no account identifier. They are not tied to your identity and are used solely to fix errors and improve stability. Hosting: EU (Germany).

PostHog (PostHog, Inc.) — usage analytics.To understand which features are used and improve the app, PostHog receives usage events (for example: tab opened, expense added with its category, budget created), the device model, the app version, and an approximate location derived from your IP address (country, region). You are identified there by an internal account identifier, never by your email address: your email is never sent to PostHog in any readable form — only an irreversible (hashed) fingerprint accompanies sign-in events. These aggregated statistics also help us guide our outreach. PostHog does not receive your expense amounts, your custom category names, or your partner’s name. Legal basis: legitimate interest. Hosting: EU.

Your account and couple data is hosted in the European Union. Some processors (Apple, Google, Expo, RevenueCat, Resend, Vercel) may process data from the United States or internationally. These transfers are governed by the standard contractual clauses adopted by the European Commission, ensuring a level of protection equivalent to the GDPR.

• Account and associated data: kept for as long as your account is active, then deleted within 30 days of your deletion request
• Billing and accounting obligations: 10 years (legal obligation)
• Technical logs: 12 months
• Usage statistics (PostHog): 24 months
• Push notification token: deleted as soon as you sign out

You can request the deletion of your account at any time from the app settings or by writing to support@pyzo.app. Your data is then erased within 30 days, except where legal retention obligations apply (billing: 10 years).

Since the Pyzo account is shared by both members of a couple, deleting the couple relies on a double confirmation: one partner makes the request, the other must accept it. Upon acceptance, all of the couple's data as well as both accounts are erased, and both devices are signed out. A member without an associated partner can delete their account directly.

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request the deletion of your data (the “right to be forgotten”)
• Right to restriction: restrict processing in certain cases
• Right to portability: retrieve your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interest
• Right to withdraw your consent at any time (notifications), without affecting the lawfulness of prior processing
• Right to set post-mortem directives regarding your data

To exercise these rights, write to us at support@pyzo.app. We will respond within one month at the latest.

If you believe that your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority).

Pyzo implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure or destruction:

• TLS encryption for all network exchanges;
• encryption of data at rest on the databases hosted by Supabase;
• an encrypted refresh token stored locally on the device, unlockable by biometrics;
• data minimization for the measurement and crash-reporting tools (no amount, no payment handle, no content);
• strict access control on the server side;
• logging of sensitive access.

The Pyzo mobile app does not use cookies.

On the pyzo.app website, only strictly necessary technical cookies may be used (for example your language or theme preference). No consent is required for these cookies (article 82 of the French Data Protection Act). No advertising or third-party profiling cookie is set.

Pyzo is intended exclusively for adults (18 years or older). We do not knowingly collect data concerning minors. If we learn that a minor has created an account, we will delete it.

This policy may be updated to reflect legal or technical developments. Any substantial change will be notified to you by email or in the app. The date of the last update is shown at the top of this page.

The terms of use of the service are detailed in our Terms of Service.