Privacy policy
This policy explains what data MyDaret processes, why, and how to exercise your rights (GDPR). No banking data is collected: no money ever goes through the app. The French version prevails.
Data controller
The publisher of MyDaret (a private individual, see the legal notice). Contact: contact@mydaret.com.
Data processed
Account: email address, display name, phone (optional), preferred language.
Darets: daret name, amounts, dates, members (name and optional phone, including members without an account added by the organiser), contribution status and action history.
Notifications: technical identifier of your browser's notification subscription, if you turn them on.
Technical: connection logs needed to keep the service secure, and the type of device used (phone or computer, installed app or browser) to improve the app.
Purposes and legal bases
Providing the service (account, daret tracking, reminders): performance of the contract.
Security and abuse prevention: legitimate interest.
Push notifications: your consent, which you can withdraw at any time from your profile.
Recipients and processors
The publisher may view account information (email, name, phone, language, sign-up and sign-in dates) to run the service and answer support requests. It is never sold or used for advertising.
A daret's information is visible to its members. It is never sold or used for advertising.
Processors: Supabase (database, authentication, EU), Vercel (hosting), Resend (emails), Apple, Google and Mozilla notification services, Google (if you use Google sign-in). Some are based in the United States; transfers are covered by the European Commission's standard contractual clauses or the Data Privacy Framework.
Retention
Account data is kept until the account is deleted. A daret is kept until its organiser deletes it.
When an account is deleted, past actions remain in daret histories without their author's name.
Cookies
MyDaret only uses strictly necessary cookies (sign-in session, language preference, country detected from the connection to suggest the right currency and phone code). Traffic is measured by MyDaret itself, anonymously and without cookies: page views, referrer, country, device type. IP addresses are never stored; a technical identifier, renewed every day, is only used to count visitors. This data is kept for 13 months. No advertising cookies, so no consent is required.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. You can edit your details and delete your account yourself from your profile, or write to contact@mydaret.com.
You can lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).