Privacy Policy

Bonjour Finance is an account-based service: your data is stored on our servers so that it can be shared with the members of your groups and synced across your devices. We collect the categories of information described below, and nothing more.

In the iOS and Android apps and on signed-in pages, we do not collect advertising identifiers, we do not track you across other companies' apps or websites, and we never connect to your bank accounts. On our public website only, an advertising cookie from Meta is used if you accept it (see section 6).

The information we collect is used for the following purposes:

• Creating and managing your user account
• Operating the features of the App (groups, expenses, balances, budgets, rewards)
• Sending transactional emails (group invitation, password reset, notifications you enable)
• Improving and personalizing your experience
• Keeping the App secure and preventing fraud and abuse
• Meeting our legal obligations

We do not sell your personal information to third parties, and we never use your financial information for advertising purposes.

Your personal information will not be sold, traded, transferred or disclosed to third parties without your consent, except in the following cases:

• Other members of your groups: when you add an expense, a payment or a member to a group, the other members of that group can see your name, your profile picture and the details of the shared entries. Only people who have been invited to and have joined a group can see its content.
• Service providers: we rely on trusted partners to host the App (Vercel), store data (Neon PostgreSQL), store files such as receipts and avatars (Vercel Blob) and send emails (Resend). These partners are bound by strict confidentiality obligations and may only process data on our instructions.
• Meta Platforms (public website only, with your consent): if you accept the advertising cookie on our public website, Meta receives visit data from those pages, as described in section 6.
• Google (public website only, with your consent): if you accept the analytics cookies on our public website, Google Analytics receives visit data from those pages, as described in section 6.
• Legal obligation: where required by law or in the context of legal proceedings.
• Protection of rights: to protect the rights, property or safety of Groupe 24, our users or the public.

Bonjour Finance lets you sign in with Google. When you use that option:

• We receive your name, email address and profile picture from Google, in accordance with the permissions you grant.
• We never store your Google password — authentication is handled entirely by Google through the OAuth 2.0 protocol.
• Your use of the Google service is also governed by Google's privacy policy.

Protecting your data is a priority for us. We apply the following security measures:

• Passwords are hashed and salted with the bcrypt algorithm
• All communications are encrypted over HTTPS/TLS
• Optional two-factor authentication (TOTP) is available in your profile
• Access to data is restricted to authorized members of Groupe 24
• The database is hosted on secure infrastructure (Neon PostgreSQL)
• Authentication tokens have a limited lifetime

While we take every reasonable measure to protect your data, no system is infallible. We encourage you to use a strong, unique password for your account and to enable two-factor authentication.

Your personal data is retained for as long as your account is active, or as long as necessary to provide our services.

• Active account: your data is retained for the lifetime of your account.
• Account deletion: upon request, we delete your personal data within a reasonable time frame, unless the law requires us to keep it.
• Group financial data: expenses and payments tied to a group may be retained after you leave that group, in order to preserve the integrity of the balances for its other members.

In accordance with the laws applicable in Quebec and Canada (notably Law 25 and the Personal Information Protection and Electronic Documents Act — PIPEDA), you have the following rights:

• Right of access: obtain a copy of the personal data we hold about you
• Right to rectification: correct inaccurate information
• Right to erasure: request the deletion of your account and your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data in certain circumstances

To exercise these rights, contact us at the address given in section 11.

Bonjour Finance allows a parent to create linked accounts for their children, with a simplified view of the App. These accounts are created and managed by the parent, who remains responsible for them.

• A child account holds only the first name, the data entered in the family groups and the reward points earned
• Child accounts are never used for advertising or profiling purposes
• A parent may delete a child account at any time from their profile

Groupe 24 reserves the right to modify this privacy policy at any time. If a significant change is made, we will notify you by email or through an in-app notification. The date of the latest update is always shown at the top of this page.

By continuing to use Bonjour Finance after a change takes effect, you accept the updated privacy policy.

If you have any question, comment or request regarding your privacy or this privacy policy, please feel free to contact us: