Legal
Privacy Policy
Last updated: September 26, 2026
This policy explains how Alternly handles your personal information. Alternly is operated by a European company and applies the standards of the EU General Data Protection Regulation (GDPR) to all users, including in the United States.
1. Data controller
Hōnō, SASU — 229 rue de Solférino, 59000 Lille, France. Contact: honoentreprise@gmail.com.
2. Information we collect
We apply strict data minimization:
- Account: email address, password (hashed), display name.
- Household & custody: household name, children’s first names (birthday optional), custody rules, swaps, expenses, and messages you enter.
- Technical: sign-in data and aggregate, cookieless analytics (Vercel Analytics and PostHog — no individual profiling).
- Product analytics (with your consent): pages viewed, actions taken in the app (e.g. "swap proposed", "expense added" — never their content), device and browser type, country derived from your IP address (which is not stored), and session recordings with inputs and personal content masked. This data is linked to a technical identifier, never to your email or name.
No sensitive data (health, opinions, etc.) is required; please do not enter any in free-text fields.
3. Purposes and legal basis
Data is used to provide the Service (performance of the contract), to notify you of changes, and to keep the Service secure. Notification emails are part of providing the Service and can be turned off in your settings. Anonymous, cookieless audience measurement relies on our legitimate interest in improving the Service; detailed product analytics and session replay rely on your consent, which you can withdraw at any time.
4. Hosting and international transfers
Data is hosted in the European Union. If you use Alternly from the United States, your information is transferred to and processed in the EU under GDPR-level protection.
5. Service providers
- Railway — API hosting.
- Vercel — web app hosting and privacy-friendly, cookieless analytics.
- alwaysdata — database (European Union).
- Resend — transactional emails (notifications).
- Paddle — payment processing and billing (reseller / Merchant of Record).
- Google — "Continue with Google" sign-in, if you choose it (name, email address and Google account identifier).
- PostHog Inc. — audience measurement and product analytics; with your consent, session replay (inputs masked). Data hosted in the European Union (Frankfurt, Germany).
6. Retention
Your data is kept while your account is active, then deleted or anonymized within a reasonable period after closure, subject to legal obligations (e.g., billing records). Analytics data is kept for at most 13 months and session recordings for at most 30 days.
6a. Cookies and similar technologies
Without your consent, no analytics cookie is set: traffic is measured anonymously, with no cookie or storage on your device. On your first visit, a banner lets you accept or decline — just as easily — analytics cookies and local storage (PostHog) that help us understand how Alternly is used and improve it. If you accept, a technical identifier is kept on your device and your sessions may be recorded, with all inputs and personal content masked. Your choice is remembered for up to 13 months, after which we ask again.
You can change your mind at any time with the "Cookie settings" link at the bottom of every page of the site, or in the app (Settings → Account → Cookies & analytics). Strictly necessary items (sign-in session, language, remembering your choice) do not require consent.
7. Your rights
You have rights of access, rectification, erasure, restriction, objection, and portability. Write to us at honoentreprise@gmail.com. We do not sell your personal information.
8. Security
Passwords are hashed (bcrypt), access is authenticated and isolated per household, and data is encrypted in transit (HTTPS).