Contents
1. Who we are
Beitmate was born from real experience — after living in shared apartments and seeing firsthand how much friction comes from tracking expenses, chores, and who's actually home. We built it to make shared living simpler and more peaceful.
Beitmate is a flatshare app that helps roommates track expenses, shared chores, and who's home each night. We're a tracking tool — we don't move money between you and your roommates.
The data controller responsible for your personal data is Beitmate, operated by an independent developer based in France.
For any privacy questions or requests, contact us at: support.beitmate@gmail.com
2. The data we collect
2.1 Data you give us
- Account info: your name, email address, a hashed password (we never see your real password), and an optional profile picture.
- Household info: the name of your colocation, your role in it, invite codes, and the other members you add.
- Activity: expenses you log, how they're split, settlements you record, presence days (nights you're home), tasks and chores, shopping list items, and optional "memories" you choose to save.
- Sign-in info: if you log in with Google, we receive your name, email, and profile picture from Google — only what's needed to create your account.
- Support messages: anything you send us when you contact support.
2.2 Data we collect automatically
- Device info: device type, operating system, app version, language, and time zone.
- Crash and diagnostic logs: if the app crashes, we collect technical info to figure out what went wrong.
- Minimal usage analytics: aggregated info like how often a feature is used, so we can make Beitmate better. No advertising trackers, no data sale, ever.
2.3 Payment data
If you subscribe to a paid plan, your card details are handled directly by Stripe (on web) or by Apple/Google and RevenueCat (on mobile). We never see or store your full card number. We only receive a confirmation that you paid, plus billing metadata like your subscription status, billing country, and the last 4 digits of the card for your invoices.
3. How we use your data
We use your data to:
- Run Beitmate and let you and your roommates manage your colocation.
- Sync your data across your devices.
- Send you essential service emails (e.g. "your invite code", "your password was reset", "your subscription renewed").
- Provide customer support when you contact us.
- Process payments for premium subscriptions through Stripe and RevenueCat.
- Detect bugs, crashes, and abuse, and improve the product.
- Comply with our legal obligations (accounting, tax, and lawful requests from authorities).
We do not sell your data, we do not use it for advertising, and we do not share it with data brokers.
4. Our lawful basis (GDPR Article 6)
Under the GDPR, we have to tell you the legal reason we process your data. Here's the breakdown:
- Performance of a contract (Art. 6(1)(b)): creating and running your account, syncing your colocation data, and providing the premium features you've paid for.
- Legitimate interests (Art. 6(1)(f)): keeping the service secure, debugging crashes, preventing abuse, and improving the product through minimal analytics. You can object to this — see your rights below.
- Consent (Art. 6(1)(a)): optional things like Google sign-in, uploading a profile picture, and (if we ever send them) marketing emails. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): keeping invoices and accounting records as required by French and EU law.
5. Sub-processors
We rely on a small number of trusted providers to run Beitmate. They process data on our behalf, under contract, and only for the purposes we tell them.
- Supabase — database, authentication, and file storage. EU-hosted.
- Stripe — payments on the web.
- RevenueCat — subscription management on iOS and Android.
- Vercel — web hosting and content delivery for beitmate.com.
- Google — only if you choose "Sign in with Google".
- A transactional email provider — to send system emails such as password resets and invite confirmations.
If our list of sub-processors changes in a meaningful way, we'll update this policy.
6. International data transfers
We try to keep your data inside the European Union. Our main database (Supabase) is EU-hosted. But some of our sub-processors are based in the United States or operate globally — Stripe, RevenueCat, Vercel, and Google in particular.
When your personal data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where appropriate, additional safeguards required under GDPR (such as encryption and access controls). We only work with providers that offer these contractual protections.
7. How long we keep your data
- Active account: for as long as you keep your Beitmate account.
- Deleted account: we delete your personal data within 30 days of you closing your account, except for data we have to keep by law.
- Billing and invoicing records: 10 years, as required by French commercial and tax law.
- Crash logs and diagnostics: typically up to 90 days.
- Backups: rolling backups are overwritten on a normal schedule, usually within 30 days of deletion.
- Long-inactive accounts: we may delete an account after a long period of inactivity, after warning you by email.
8. Your rights under GDPR
You have rights over your personal data. You can exercise any of them by emailing us at support.beitmate@gmail.com. We'll reply within one month, in line with GDPR.
- Access: ask us for a copy of the data we hold about you.
- Rectification: ask us to correct anything that's wrong or incomplete.
- Erasure ("right to be forgotten"): ask us to delete your data. You can also delete your account directly from inside the app.
- Restriction: ask us to pause processing your data in certain situations.
- Objection: object to processing based on our legitimate interests.
- Portability: ask for a copy of your data in a structured, machine-readable format.
- Withdraw consent: for anything based on consent, you can change your mind at any time. This doesn't affect processing we did before.
- Lodge a complaint: you can complain to the French Data Protection Authority (CNIL) at www.cnil.fr, or to your local EU data protection authority. We'd appreciate the chance to fix things first, but it's your call.
10. Children
Beitmate is for people aged 16 and over. We don't knowingly collect data from anyone younger than that. If you believe a child has created an account, email us at support.beitmate@gmail.com and we'll delete it.
11. Security
We take reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), encryption at rest where supported, hashed passwords, strict access controls, and regular reviews of our setup. No system is 100% secure, but we take this seriously and we'll tell you (and the relevant authority) if there's ever a data breach that affects you.
12. Changes to this policy
If we make meaningful changes, we'll let you know — by email, an in-app notice, or both — before they take effect. The "Last updated" date at the top will always tell you which version you're reading.
13. Contact us
For anything privacy-related — questions, requests, complaints, or just feedback — email us at support.beitmate@gmail.com.