Privacy policy
Draft: to be reviewed by a legal professional before the public launch. Highlighted items need to be completed.
This policy explains what data MyDaret processes, why, and how to exercise your rights (GDPR). No banking data is collected: no money ever goes through the app. The French version prevails.
Data controller
[Name or company name], [address]. Contact: contact@mydaret.com.
Data processed
Account: email address, display name, phone (optional), preferred language.
Darets: daret name, amounts, dates, members (name and optional phone, including members without an account added by the organiser), contribution status and action history.
Notifications: technical identifier of your browser's notification subscription, if you turn them on.
Technical: connection logs needed to keep the service secure.
Purposes and legal bases
Providing the service (account, daret tracking, reminders): performance of the contract.
Security and abuse prevention: legitimate interest.
Push notifications: your consent, which you can withdraw at any time from your profile.
Recipients and processors
A daret's information is visible to its members. It is never sold or used for advertising.
Processors: Supabase (database, authentication, EU), Vercel (hosting), Resend (emails), Apple, Google and Mozilla notification services, Google (if you use Google sign-in). Some are based in the United States; transfers are covered by the European Commission's standard contractual clauses or the Data Privacy Framework.
Retention
Account data is kept until the account is deleted. A daret is kept until its organiser deletes it.
When an account is deleted, past actions remain in daret histories without their author's name.
Cookies
MyDaret only uses strictly necessary cookies (sign-in session, language preference). No advertising or analytics cookies, so no consent is required.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. You can edit your details and delete your account yourself from your profile, or write to contact@mydaret.com.
You can lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).