Privacy Policy
Last updated: July 2026
Pre-launch version
Pre-launch version. This privacy policy may be updated before the official launch to reflect Dispola's final administrative information.
In short
Dispola is designed to collect the bare minimum. Dispola never connects to your bank account. No banking credentials are requested or stored. Your data is hosted securely and encrypted, and never sold or shared with third parties. You can delete your account and all your data at any time.
Your financial data
What you enter in the app — amounts, dates, categories, notes, income, fixed charges, savings goals — is stored on our servers so your real available balance can be computed and your data follows you across devices. It is encrypted in transit and at rest, and isolated account by account: no other user can access it. It is never sold or shared with third parties. Dispola never connects to your bank account and never asks for banking credentials.
What we collect
Your account email and password (encrypted), your locale, optional marketing consent, the content of messages sent through the contact form (email, subject, message), and the data you enter in the app: amounts, dates, categories, notes, income, fixed charges and savings goals. Nothing else — no banking credentials, no data fetched from your bank.
Why we collect it
To provide you with a Dispola account, reply to requests sent through the contact form, and — only if you opt in — send you occasional product updates by email. No other purpose.
Legal basis
Performance of the service (your account) and your explicit consent (marketing updates, contact messages). You can withdraw consent at any time.
Retention
Your account data and financial data are kept as long as your account exists. When you delete your account from the settings, they are erased immediately and permanently from our database — including spending, accounts, categories, fixed charges, savings, settings and profile. Contact messages are kept for the time needed to handle your request and archived for a maximum of 24 months.
Hosting and processors
The site and its database are hosted on Lovable Cloud infrastructure, in data centres located in the European Union (Frankfurt, Germany). Transactional emails (account confirmation, password reset, contact form replies) are sent through Resend. These providers act solely on our behalf and do not reuse your data.
Analytics
We use a cookieless, privacy-friendly analytics tool to count visits and conversions. No personal profiles, no cross-site tracking, no cookie banner needed.
Sharing
We never sell, rent, or share your data with third parties for commercial or advertising purposes.
Receipt scanner
If you use the receipt scanner (Premium feature), the photo is securely sent to our analysis provider Google Gemini only for the time it takes to read it. It is not written to any storage: no database, no file server, and not on your phone under Dispola's name. Only the four extracted fields — date, amount, merchant and category — are kept with your transaction.
Beta monitoring
During the beta phase, the publisher of Dispola may review, for usage-monitoring purposes, the email address linked to an account along with its usage statistics: sign-up date, date of last entry and number of entries. No access is possible to the content of your financial data (amounts, categories, notes).
Your rights
You have the right to access, correct, delete, object to and port your data. To exercise these rights, write to contact@dispola.app. You can also delete your account yourself at any time from the app settings: deletion is then immediate and irreversible. If you write to us, deletion will be effective within 7 days.
Contact
For any question about your personal data: contact@dispola.app