VVolletPrivacy policy
VVollet is a budgeting app. To work out what you can spend, it needs the numbers you type into it. This page explains what we keep, where it lives, who else sees any of it, and how to have it deleted.
Who we are
VVollet is published by {{YOUR FULL NAME}}, an individual developer based in Morocco, who is responsible for your data under Moroccan Law 09-08 on the protection of personal data.
Questions or requests: support@safespend.app
What we collect
| What | Why |
|---|---|
| Account details | Your email address and a hashed password, or the identifier Google or Apple gives us if you sign in with them. A display name if you set one. Used to sign you in and keep your data in your account. |
| Financial records you enter | Accounts and balances, cash, transactions, categories and budgets, bills and subscriptions, savings goals, debts, money lent or borrowed, Daret groups and stock holdings. Used to show your balances and organize your finances. |
| Photos you add | Receipt photos, account logos and a profile picture, only when you choose to add one. Location and camera details (EXIF data) are removed before upload. |
| Settings | Language, currency, pay day, monthly income and display preferences. Your app PIN is kept only on your device, in its secure storage. |
VVollet does not connect to your bank. Everything in it is something you typed or added yourself.
What we don’t do
- We don’t sell your data or share it for advertising.
- We don’t show ads.
- We don’t use analytics, tracking or crash-reporting tools.
- We don’t read your contacts, messages or location.
Where it’s stored
When you sign in, your data is saved to your VVollet account on Supabase, the database and file storage service we use. Database rules make sure each record can only be read by the account that created it. A copy is also kept on your phone so the app works offline, and it syncs when you’re back online.
If you use VVollet in local mode, without an account, your data stays on your device and is not sent to us.
Supabase may store data on servers outside Morocco. Where it does, it is protected by Supabase’s own security and data processing commitments.
Device permissions
- Camera: only when you choose to take a photo, for example of a receipt.
- Photos: only when you choose a picture from your library.
- Internet: to sync your data and fetch stock prices.
Keeping and deleting
We keep your data for as long as you have an account. You can delete individual records in the app at any time.
To delete your account and everything in it, follow the steps on Delete your account. We delete your account, financial records and photos within 30 days of your request.
Your rights
You can ask us at any time to:
- give you a copy of your data (you can also export it yourself from Settings → Data & storage);
- correct anything that is wrong;
- delete your data;
- stop processing it.
Email support@safespend.app from the address on your account. We reply within 30 days. If you are not satisfied with our answer, you can complain to Morocco’s data protection authority, the CNDP (cndp.ma), or to the authority where you live.
Security
Data travels to and from our servers over encrypted connections (HTTPS). Database rules keep each person’s records separate. In the app, you can add a PIN lock and hide your balances in the app switcher. No system is perfectly secure, so please use a strong password and keep your phone locked.
Children
VVollet is not meant for children under 13, and we don’t knowingly collect their data. If you believe a child has created an account, contact us and we’ll delete it.
Changes
If we change this policy, we will update the date at the top of this page. If a change affects what we collect or who receives it, we will also tell you in the app.