Privacy policy

Account and identification

By default Pivunio works without an email address or password: on your first visit an anonymous authentication session is created and kept on your device. It only exists to link your groups and expenses to a technical identifier.

You may optionally attach an email address to that session so you can find your groups on another device. Without an email, access stays tied to the device you used and can be lost if you clear your browser data.

• Technical session identifier (required for the service to work).
• The display name you choose, visible to members of your groups.
• Email address, only if you choose to add one, to send a sign-in link.

Data you enter

The content you create in the app is stored so it can be shown back to you and shared with the members of the relevant group.

• Groups: name, emoji, dates, currency, archived state.
• Participants: display name and colour, group membership.
• Expenses: label, category, amount in cents, date, payer, split between participants, and any foreign-currency amount you entered yourself.
• Recorded settlements: amount, date, participants involved.
• Invitations: the invitation link and its state (used, expired, revoked).

Who can see your data

Read access to a group's data is restricted to its members and enforced server-side by the database. Someone who is not a member cannot read a group's expenses, participants or settlements, even knowing its identifier.

Pivunio does not sell your data and does not share it with third parties for advertising purposes.

Usage analytics

Pivunio uses first-party analytics only, with no ad network and no third-party tracker. The recorded events are usage steps, such as “a group was created” or “a public page was viewed”.

These events contain no name, email, expense label, amount or invitation link. They are not used for advertising profiling.

• Step name, date, technical session identifier, and where relevant the group identifier.
• For public pages: page identifier, page type, language, and a referrer category (search engine, external link, direct).
• These events store no full URL, no query parameter and no IP address. As with any online service, an IP address may technically transit through the hosting infrastructure to route requests.

Error logging

To fix outages, technical failures are logged: error type, the operation involved, a page template, and a truncated and cleaned error code and message. Email addresses, identifiers, invitation tokens and long digit sequences are automatically redacted before storage.

Storage on your device

Pivunio uses browser storage for your session, your language preference and, briefly, the public page you arrived from. No advertising cookie or third-party tracker is set, which is why there is no consent banner.

Messages sent to support

If you use the support form we keep the text of your message, its category, the page it was sent from, the language, the date and, if you are signed in, your technical session identifier. No name or email is requested; only include one if you deliberately choose to.

Hosting and processors

Technically, the service relies on the Lovable platform (Lovable Cloud), whose delivery infrastructure runs on Cloudflare, and on a managed Supabase database; sign-in emails are sent by the provider configured for the pivunio.com domain. These providers act on behalf of Pivunio as the technical stack. The legally designated hosting provider is stated in the legal notice.

Retention

Group, expense and settlement data is kept for as long as the group exists, so that the shared accounts stay consistent for every member.

Public-page usage events, logged technical errors and messages sent to support are kept for a maximum of 12 months. A daily scheduled database job automatically deletes records in those three categories once they are older than 12 months. This automatic deletion covers nothing else: groups, participants, expenses, settlements and accounts are not affected.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data. You can exercise these rights through the support form in the app.

Some deletions may be limited by the consistency of a shared group's accounts: removing an expense used to compute other members' reimbursements changes their balances. In that case the request is handled while preserving the group's accounting integrity.

You may also lodge a complaint with your supervisory authority; in France this is the CNIL.

Changes

Pivunio is in beta and changes regularly. This page is updated when the way the service works changes; the last update date is shown at the top.