Privacy Policy
Last updated:
1. Who we are
JourX is a project currently undergoing legal structuring (company name, corporate form and registration forthcoming).
Website: jourx.fr — Mobile app: “JourX” (iOS & Android)
Contact: contact@jourx.fr
Full legal notices will be updated upon finalization: see Legal notice.
2. Data we collect
We follow a data minimization approach and collect only what is necessary.
- Account data: email, password (hashed), preferences, language.
- Budget data: entered amounts (expenses/income), categories, goals, daily budget settings.
- Support: content you send via the contact form (subject, name, email, attachment/link if provided).
- Technical data: access logs (date/time, truncated IP, user-agent), error diagnostics.
- Bank connection (if enabled): see §4.
3. Purposes & legal bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Service provision | Account creation/management, daily budget calculation, data storage | Contract performance |
| Support & communication | Responding to requests, service emails | Legitimate interest / Contract performance |
| Improvement & security | Logs, debugging, abuse prevention | Legitimate interest |
| Billing (if subscribed) | Payments & renewal management | Contract performance / Legal obligation |
| Privacy-friendly analytics | Aggregated and anonymized statistics | Legitimate interest / Consent where required |
Advertising: JourX uses no ad tracking.
4. Bank connection (optional)
The bank connection is optional and read-only, via a licensed aggregator being selected (AISP/payment institution). It enables automatic import of transactions and updates cumulative expenses for daily budget calculation.
- Authentication occurs with the licensed provider; we do not store your banking credentials.
- You can enable/disable the connection and remove linked accounts at any time.
- Without a bank connection, JourX remains fully usable (manual entry).
5. Retention periods
| Category | Retention |
|---|---|
| Account data | Life of the account + 24 months after deletion/inactivity (then anonymization/deletion) |
| Budget data | Life of the account (configurable: ability to erase from the account, coming) |
| Imported transactions (bank) | As needed for the service (useful history) — erasable upon request or by removing the connection |
| Support (tickets/emails) | Up to 24 months |
| Technical logs | Up to 12 months |
| Analytics | Up to 13 months (aggregated/anonymous data may be kept longer) |
6. Recipients & processors
Access is limited to authorized persons (JourX team) and processors acting on our behalf (hosting, email, privacy-friendly analytics, banking aggregator where applicable). These processors are contractually committed to confidentiality and security.
A detailed list of processors will be published and kept up to date as the service evolves.
7. Hosting & transfers
Website host: o2switch — Chemin des Pardiaux, 63000 Clermont-Ferrand (France) — www.o2switch.fr
By default, data is hosted within the European Union. If a transfer outside the EU were to occur (by a processor), it would be governed by appropriate safeguards (standard contractual clauses, additional measures) and brought to your attention.
8. Security
- Encrypted communications (HTTPS) and server-side protection measures.
- Access controls, incident monitoring, regular backups.
- Passwords stored in hashed form.
9. Your rights (GDPR)
You have the following rights: access, rectification, erasure, restriction, objection, portability. You may also define what happens to your data upon death.
Exercise your rights: write to contact@jourx.fr with your request and proof of identity where needed.
If you believe your rights are not respected, you can contact the competent authority (CNIL: cnil.fr).
11. Underage users
The service is not intended for users under 15. If a parent/guardian believes a minor has submitted data to us, they may request deletion at contact@jourx.fr.
12. Changes to this policy
This policy may evolve to reflect service changes or legal requirements. The update date will be adjusted and, where necessary, specific notice will be provided.
13. Contact
For any question about this policy or your data: contact@jourx.fr.
See also: Legal notice · Terms of Use.