This translation is provided for convenience; the French version prevails.
Benii is a budget management application for individuals and households. This page explains which personal data is processed, why, on what legal basis, for how long, by whom, and how to exercise your rights (General Data Protection Regulation, “GDPR”, and the French Data Protection Act, “loi Informatique et Libertés”).
Antoine Vaillant, sole trader (entrepreneur individuel, EI), trading name Benii
SIRET 851 180 570 00026 · 72 rue de la République, 02300 Bichancourt, France
Contact for any question about your data: support@benii.app
Legal bases used: contract (providing the service you request), consent (optional features, can be withdrawn at any time), legitimate interest (security and prevention of abuse) and legal obligation (accounting).
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Budget data without an account (transactions, subscriptions, categories, goals, preferences) | Running the application on your device | Contract | On your device only, until you delete it or uninstall the application |
| Account: email address, password (never stored in plain text), sign-in sessions, history of email address changes | Identifying you, securing the account | Contract; legitimate interest (security) | As long as the account exists. An account with no sign-in for 3 years is deleted, after a warning email sent 30 days before |
| Synchronised budgets (transactions, subscriptions, categories, goals) | Synchronising your data between your devices | Contract | As long as the budget and the account exist |
| Shared budget: display name, membership, invitation codes, requests to join a budget (with the requester's email, visible to the owner) | Sharing a budget with other people | Contract | As long as you are a member and the budget exists; invitation code attempts: 2 days |
| Subscription: Premium status, dates, customer identifier at Stripe or RevenueCat, refund history | Managing the subscription, applying the withdrawal rules of the general terms | Contract; legal obligation | As long as the account exists; invoices and accounting records: 10 years (French Commercial Code); encrypted fingerprint of the email address that used the free trial on the web: 3 years, even after the account is deleted (so the trial can only be used once) |
| Referral: link between referrer and referred person, dates, reward granted | Running the referral programme | Contract | As long as the accounts concerned exist |
| Receipt scanning (optional): photo of the receipt, scan counter | Reading the amount and the merchant; limiting abuse | Contract; legitimate interest (counter) | Photo not kept by Benii, deleted by OCR.space after processing; scan counter: 7 days |
| Voice input (optional): your voice during dictation | Dictating a transaction instead of typing it | Consent (microphone permission) | The voice is processed online by Apple or Google; Benii only receives and keeps the text, which becomes your transaction |
| Notifications (optional): technical device token | Sending you reminders | Consent | Until notifications are turned off or the account is deleted |
| Support (with or without an account): email address, messages, attachments, satisfaction rating | Answering your requests | Contract; legitimate interest (requests without an account) | 2 years after the request is closed |
| Support form: IP address, technical browser fingerprint, temporary blocks | Fighting spam and abuse | Legitimate interest | IP address and fingerprint: 2 days; blocks: 30 days after they end |
| Team access to a budget with your single-use code | Helping you with a specific problem | Consent | The code expires, then it is erased 1 day after it expires |
| Service emails (recipient, subject, content) | Sign-up confirmation, password, support replies, account information | Contract | 14 days after sending (30 days at most) |
| Technical log (errors, security events) and access attempts during maintenance | Security, fixing errors | Legitimate interest | Log: 90 days; attempts: 1 day |
| Log of the administration team's actions | Keeping a record of interventions on accounts | Legitimate interest | Your email address is replaced with “deleted account” when the account is deleted |
| Contribution to subscription prices (option turned off by default) | Anonymous price statistics for all users | Consent | Anonymised records, kept for 180 days |
| Hosting providers' connection logs (IP address, date, page requested) | Server security | Legitimate interest; legal obligation | Limited period set by the hosting provider, 1 year at most |
A team member never sees the amounts in your budget without your consent, given through a single-use code. Benii does not make any automated decision producing legal effects concerning you and does not carry out advertising profiling.
Bank connection: it is not offered at this time. If it is offered one day, precise information will be given to you before any activation, which will remain optional.
Your data is only accessible to the publisher and, for a shared budget, to the members of that budget. The following providers process it on our behalf, only to provide their service, without selling it:
Some providers (Resend, RevenueCat, Expo, and depending on the case Stripe, Apple, Google and Supabase technical support) may process data in the United States or outside the European Union. These transfers are based on the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework or, failing that, on the standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to support@benii.app.
Exchanges are encrypted (HTTPS). Each user can only access their own data and the budgets they are a member of, thanks to access rules enforced by the server. Passwords are never stored in plain text. Administrative access is limited and protected.
You have the right of access, rectification, erasure, restriction, objection (in particular to processing based on legitimate interest), portability, the right to withdraw your consent at any time, and the right to set instructions regarding what happens to your data after your death.
The website and the application use no advertising cookies, no audience measurement tool and no third-party trackers. They only use the storage of your device or browser for what is strictly necessary: your budget data without an account, your sign-in session, your preferences (language, theme) and, on the Support page, the tokens that let you find your requests again. These items do not require consent. Fonts are hosted on our own servers: no browsing data is sent to a third party to display them.
Benii is intended for people aged at least 15. A person under 15 can only create an account with the consent of one of their parents. If you learn that a child under 15 has sent us data without this consent, write to us: we will delete it.
This policy may change, for example if a new feature is added. In the event of a significant change, you will be informed in the application or by email. The date of the last update is shown at the top of the page.