Privacy policy

1. Who is responsible for your data

The controller of your personal data is the operator of the Rachunki service. Contact details are given at the end of this page.

2. What data we process and on what basis

We process only the data necessary for the app to work:

• Account data (first name or name, email address, secured password, language, time zone) – to run your account and provide the service. Basis: performance of the contract for using the app.
• The content you enter (properties, bills, categories, leases, payments, attachments) – to store and show your settlements. Basis: performance of the contract.
• Login sessions (device, browser, time) – to show the list of your devices and allow remote sign-out. Basis: performance of the contract and security.
• Event and security log (successful and failed logins with IP address, data changes, blocks) – to protect accounts from abuse and reconstruct the change history. Basis: our legitimate interest (security).
• Reports (suggestions and bugs) you send us – to respond and improve the app. Basis: legitimate interest.
• Usage statistics (visited pages, failed forms without the entered content, browser type) – without an IP address, to improve the app. Basis: legitimate interest.
• When you sign in with Google we receive your first name and email address – only if you choose that sign-in method. Basis: your consent.

3. Tenants' and other people's data

If you manage a rental, you enter tenants' data (first and last name, phone, email). For that data you are the controller, and we process it on your behalf under the terms of the data processing agreement, which you accept when creating your account. You are responsible for the legal basis for entering it.

Data of people without an account whom you add to bill splitting (first name or name) is processed only to show whom a settlement concerns.

4. Who we share data with

We do not sell data and do not use it for advertising. We use only the providers necessary for the app to work:

• Email provider – to send messages (address confirmation, password reset, reminders, invitations). It receives the recipient's address and the message content.
• Google – authentication when signing in with Google.
• Server infrastructure – we keep data on the operator's own server and in its backups; a traffic-protection provider (a proxy server or tunnel) that sees IP addresses may relay the connection.

These providers process data only on our instruction and only as far as needed for the service.

5. Transfers outside the European Economic Area

Some providers (e.g. Google for sign-in, the AI assistant provider) may process data outside the EEA, including in the USA. This is done on the basis of an adequacy decision (the Data Privacy Framework) or standard contractual clauses. If you do not use these features, your data stays on the operator's server.

6. How long we keep data

• Account data and content – until the account or property is deleted. A property deleted by a manager is permanently erased after 90 days.
• Security log (logins with IP address) – for as long as needed to protect against abuse, including after the account is deleted.
• Usage statistics – 180 days.
• Backups – according to their rotation (daily, weekly, monthly); deleted data disappears from them once the backup expires.

7. Your rights

You have the right to:

• access to your data and a copy of it – in your profile you can download all your data as JSON, and a property's bills and balance as CSV;
• rectification – you can change your name, email address and settings in your profile;
• erasure – you can delete your account yourself in your profile;
• restriction of processing and objection to processing based on legitimate interest;
• data portability – the same JSON and CSV export;
• withdrawing consent (e.g. disconnecting Google sign-in or an AI assistant) – without affecting processing carried out before the withdrawal.

We do not profile you and do not make decisions about you automatically. You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO). Providing account data is voluntary, but without it the app cannot be used.

8. Cookies

We use only the cookies the app needs to work: your sign-in session, form protection and your language. There are no advertising or analytics cookies.

9. Contact and changes

For personal-data matters, write to:[email protected] . We will announce any significant changes to this policy in the app.