privacy policy
Last updated: 29 October 2026. This policy covers the Billz app during its closed test (TestFlight) in France.
The short version. We keep as little as we can. We never see your card number or your ID photos. Bill photos are blurred before anyone sees them and deleted after 90 days. No ads, no tracking, and we never sell data.
who is responsible
The data controller is Alaa Elboudali, France. Contact: [email protected].
what we collect and why
| What | Why | Legal basis |
|---|---|---|
| Sign-in: your phone number, or an Apple or Google account ID. With Google, Google also shares your email, name and profile photo link; our sign-in provider stores them, but Billz never uses or shows them. Apple shares no name or email. | To create your account and sign you in. | Contract |
| How you appear: a first name or nickname, or nothing (anonymous). | Shown on your bills and to people you help, as you choose. | Contract |
| ID check result: verified or not, adult (yes/no), and a one-way code made from your document (not the document itself). | One account per real adult, and to stop fraud. | Legitimate interest, legal obligations (anti-fraud) |
| Bills you post: the bill photo, amount, category, due date, what it unlocks, your short story, and optionally a short video (with your face hidden if you choose). | To show your bill to people who can cover it, after moderation. | Contract |
| Receipts you upload after a bill is paid. | To prove the money went to the bill before it is released to you. | Contract |
| Payment records: amounts, dates, and Stripe references (never card numbers or bank details). | To run payments, refunds and disputes, and keep the accounts the law requires. | Contract, legal obligation |
| Reports and disputes you open or that concern you, and moderators' decisions. | To keep Billz safe and fair. | Legitimate interest |
| Notification token for your device, if you allow notifications. | To tell you about your own bills only. No marketing. | Consent |
what we never collect
- Your card number or bank details: Stripe handles them.
- Your ID photos, selfie, document number or date of birth: they stay with Stripe.
- Your location, contacts, or activity in other apps. No advertising or tracking tools.
who we share it with
Only the services that run Billz, each bound by a data processing agreement:
- Supabase: database, sign-in and file storage, hosted in Paris (EU).
- Stripe: payments, payouts to posters, and the ID check.
- Twilio: sends sign-in codes by SMS.
- Apple and Google: if you sign in with them, and Apple for notifications.
Some of these are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Other Billz users only see what you choose to show: your display name (or "anonymous"), your bill with personal details blurred, and never your phone number or email.
how long we keep it
- Public bill copies and videos: deleted when the bill closes.
- Original bill photos and receipts: deleted 90 days after the bill closes, or later if a report or dispute about it is still open.
- Uploads never used in a bill: deleted after one day.
- Payment records: kept as long as French accounting law requires (up to 10 years).
- Your account: until you ask us to delete it.
your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected] and we'll answer within a month. Deleting your account removes your sign-in details; payment records we must keep by law stay until their legal period ends.
If you think we've got something wrong, you can complain to the CNIL (cnil.fr).
age
Billz is for adults (18+). The ID check confirms this.
changes
If this policy changes, we'll update the date above and tell you in the app when it matters.