Privacy policy

Who we are

Pebblenaut is provided by the company below. We are the controller of your personal data. Write to us any time at privacy@pebblenaut.app.

In short

• We collect only what the app needs to work for you.
• We never sell your data and show no ads.
• There is no bank connection. Everything you see is what you typed in yourself.
• All data is stored and processed in the EU.
• You can export or delete everything yourself, from Account.

What we collect and why

• Your name, email and a hash of your password, so you can sign in and we can send account emails. Basis: our contract with you.
• Everything you enter: your currency and settings, categories, income and expense items, check ins, paid ticks, what if scenarios, loans, investments and holdings. Basis: our contract with you, since this is the service.
• Sign in sessions, with the IP address and the browser's user agent of each, so you stay signed in and we can spot misuse. Basis: our contract with you, and our legitimate interest in keeping accounts secure.
• Your cookie choices, if you make any while signed in, as a record of what you agreed to. Basis: our legal obligation to be able to show consent.
• Error events when something breaks, carrying a random user id but never your name, email or amounts. Basis: our legitimate interest in a working service.
• Backups of the database, encrypted, so a failure never loses your data. Basis: our legitimate interest in a reliable service.

Who processes it for us

These services run parts of Pebblenaut on our behalf, under data processing terms. None of them may use your data for their own purposes.

• HostingerThe app server and the nightly database dumpsVilnius, Lithuania
• NeonThe databaseFrankfurt, Germany
• Cloudflare R2Encrypted backup copies and the deletion logEU
• ResendAccount emailsIreland
• SentryError eventsFrankfurt, Germany

How long we keep it

• Your account and everything you enterUntil you delete your account
• Encrypted backupsThey age out within about 91 days
• Server logsThey roll over within days
• Error events in SentryUp to 90 days
• Your user id and the time of deletion, in the deletion log101 days after you delete your account

When you delete your account, we keep only your random user id and the time of deletion in a separate deletion log, for 101 days. If we ever have to restore an older backup, this log lets us delete your data again, so a restore can never bring it back. We keep it because the law requires us to honor your erasure, and in our legitimate interest in doing that reliably. It holds no name, email or amount.

Cookies and browser storage

Pebblenaut uses only the cookies and storage it needs to work, listed below. If we ever add an optional one, such as analytics, we will ask you first and it will not run until you agree. Cookie choices you make while signed out stay only in your browser.

• Keeps you signed in

  Name

  better-auth.session_token, __Secure-better-auth.session_token

  Kind

  Cookie, Necessary

  Set by

  Pebblenaut

  Kept for

  30 days, renewed while you use the app

• Remembers your cookie choices

  Name

  pn_consent

  Kind

  Cookie, Necessary

  Set by

  Pebblenaut

  Kept for

  180 days

• Remembers the light or dark theme you picked

  Name

  theme

  Kind

  Local storage, Necessary

  Set by

  Pebblenaut

  Kept for

  Until you clear it

Change your choices any time in Cookie settings.

Your rights

You have the right to:

• access your data and get a copy of it,
• have it corrected,
• have it erased,
• take it elsewhere (portability),
• restrict how we use it,
• object to processing based on our legitimate interest.

You can use most of these yourself: Account → Your data has Export your data (one file with every record you own) and Delete account. For anything else, email privacy@pebblenaut.app. We answer within one month.

You can also complain to the State Data Protection Inspectorate of Lithuania (VDAI, vdai.lrv.lt), or to the authority where you live.

Minimum age

You must be 18 or over to use Pebblenaut.

If you live outside the EU

The same rights and protections apply to every user, wherever you live. All data is stored and processed in the EU.

Changes to this policy

When we change this policy in a way that matters, we update the date at the top and ask you to read and confirm it the next time you open the app.