Privacy policy — BudGénie

Last updated: 27 September 2026

This is an English translation provided for convenience. The French version of this policy is the legally binding one; in case of discrepancy, the French text prevails.

In one sentence

BudGénie keeps your financial data on your Mac. It is not sent to any server of ours: the only exchanges with our servers (budgenie.eu and data.budgenie.eu) are downloads of public reference files (points 3 c bis and c ter) — nothing travels the other way.

1. Who processes your data, and to what extent

Publisher: Vincent Clémençon, sole trader (entrepreneur individuel), trading as Drévalio
SIREN: 807 534 235 · SIRET: 807 534 235 00047
Registered office: 59 rue de Ponthieu, Bureau 326, 75008 Paris, France
Contact: support@budgenie.eu

This information comes from the French SIRENE business register, where it is already public.

A clarification with legal consequences

The data you enter in BudGénie is never sent to us and we have no technical access to it. We determine neither the purposes nor the means of any processing of it: within the meaning of article 4 of the GDPR, we are not its controller. It falls under your personal use, which article 2.2.c of the GDPR excludes from its scope.

We are the controller only for the data we actually receive: the messages you send us at support@budgenie.eu.

This distinction is not a way of passing the buck — it describes exactly how the app is built, and it is what protects you best: there is nothing to claim, hack or subpoena on our side.

Data protection officer

No DPO has been appointed: the activity does not fall under any of the three cases requiring one under article 37 of the GDPR. Requests go through support@budgenie.eu.

1 bis. Legal bases and retention periods, processing by processing

2. What BudGénie stores, and where

Everything you enter — bank accounts, transactions, net worth, loans, investments, projects, rental properties — is stored in the app's sandbox on your Mac, at this location:

~/Library/Containers/com.drevalio.budgenie/Data/Library/Application Support/

No user account, no sign-up, no server-side password. We cannot look at your data: technically, we have no access to it.

There is no iCloud sync and no online backup in this version. Your data exists on your machine and nowhere else — unless you export it yourself.

No analytics, no tracking

BudGénie contains no statistics, telemetry or tracking tool. No Google Analytics, no Firebase, no Sentry, no advertising tracker. We do not know how often you open the app, or what you do in it.

We do not sell, rent or exchange any data. There is nothing to sell: we have nothing.

3. What leaves your Mac, and when

Four situations, all triggered by you.

a) Share prices, exchange rates and logos

When you add an investment or refresh a price, the app queries public sources of financial data:

These requests contain neither your name, nor your amounts, nor your balances — only the asset's symbol. These services see your connection's IP address, like any website you visit.

Your bank's logo, if you ask for it

By default, each account is shown by its initials on a coloured badge. No bank logo ships with the app.

If you want a real logo, you can ask for it yourself: you enter your bank's website and the app queries hunter.io, a third-party service, once. Three things to know:

• this request reveals your bank's name to hunter.io, together with your IP address. That is the only information sent — no amount, no balance;
• it only happens when you do it, never automatically, and only once in the account's life: the image is then stored on your Mac;
• logos belong to their owners. BudGénie supplies none and is affiliated with no institution.

If you prefer to send nothing: leave this field empty. The monogram does the same job of identification.

b) Artificial intelligence analysis — read this paragraph

This feature is off by default, and two actions on your part are needed before a single piece of data leaves:

1. giving your explicit consent in Settings → Artificial intelligence. A screen then tells you, before you decide, exactly what is sent, what is never sent, and who receives it;
2. entering your own API key — it is your access with the provider, and you pay for it.

Until consent is given, no request can leave, however you use the app: the refusal is enforced in the network component itself, not in a screen that could be bypassed.

What is sent

Depending on the analysis requested:

• the amounts of your income and expenses;
• the labels and categories of your transactions;
• the details of your loans: principal, rate, term, monthly payment;
• the make-up of your net worth and investments — asset name, type, ticker, platform, amount invested, quantity, price, current value and gain.

What is never sent

• your name, your address and your contact details;
• your bank credentials — the app holds none;
• your API key, kept in the macOS Keychain, encrypted by the system, and never included in an export.

Who receives this data

The provider you select: Mistral AI (European Union), or OpenAI, Anthropic or Google (United States). The transfer goes directly from your Mac to that provider — it does not go through any BudGénie server, since none exists. We receive no copy and no trace of these exchanges.

If you choose a US provider, your data leaves the European Union. The European provider avoids this transfer.

The framework for this transfer

The transfer leaves your Mac and goes directly to the provider you chose: it is your contractual relationship with them, not ours. It relies on one of the mechanisms in chapter V of the GDPR, depending on the provider:

• adequacy decision — since 10 July 2023 the United States has benefited from a European Commission adequacy decision under the EU-US Data Privacy Framework, for companies certified under it;
• the Commission's standard contractual clauses, for those that are not.

Before turning the feature on, check whether the provider you choose is certified under the Data Privacy Framework, and what its terms say about retention and training of its models. Mistral AI, established in the Union, avoids the question entirely.

Once sent, this data is governed by the provider's terms, not ours — particularly regarding how long it is kept and whether it may be used to train their models. We have no control over this, and it is up to you to read them.

Going back

You can withdraw your consent at any time in Settings → Artificial intelligence. Nothing more is sent after that. Analyses already produced stay on your Mac: they are your data.

Consent and its withdrawal are recorded in the activity log, with their date. That is what allows us — and you — to show when consent was given.

If you don't want this data to leave: don't give your consent. Everything else in BudGénie works without it.

c) Purchases

Payments are handled entirely by Apple (StoreKit). We never see your card number, your address or your Apple ID. We receive from Apple a confirmation of which edition was bought — nothing else. The receipt is checked on your Mac, never on a server.

The paid editions are subscriptions (yearly, or monthly for Premium) managed by Apple. Renewal, cancellation and billing happen in your Apple account; we only receive the subscription status (active, expired), never your payment details.

c bis) The merchant database supplement (Pro edition)

The Pro edition can download, once and only when you ask (Settings → Connectors & data), a supplementary file of company names from the SIRENE register, to categorise your transactions better. This file is served from data.budgenie.eu. The request only contains the request for the file: no budget data leaves. The host of data.budgenie.eu (Cloudflare) sees your IP address, as with any download. The file's integrity is checked on your Mac before it is installed.

This file and the built-in database come from the SIRENE register (INSEE), reused under the Licence Ouverte 2.0 (French open licence); the catalogue of banks comes from the public registers of the ACPR (REGAFI), the European Banking Authority and FINMA.

c ter) The cryptocurrency catalogue

To find a cryptocurrency or an exchange by name, the app ships with a public catalogue. It checks for the latest version on data.budgenie.eu (hosted by Cloudflare, in the European Union) at most once a week, only when you search for a crypto, or when you click “Update now” (Settings → Connectors & data). The request contains nothing but the request for the file: no budget data leaves. Cloudflare sees your IP address, as with any download. The file is checked against its fingerprint before use. Data provided by CoinMarketCap.

d) Bank connections

The code provides for bank connectors (Bridge, Powens, GoCardless, Tink). They are not enabled in this version and no bank data is transmitted. If this feature is ever opened, this policy will be updated beforehand, and connecting will remain an explicit choice on your part.

4. What you export

JSON, CSV, XLSX and PDF exports are written wherever you save them. Once the file is created, it belongs entirely to you: we have neither a copy nor any knowledge of it.

API keys are never included in an export, not even a full one. A file shared by mistake cannot give access to your third-party accounts.

A backup can be protected by a password (AES-256-GCM encryption). This password is stored nowhere and cannot be recovered: if you lose it, the backup is unreadable for good. It is the price of encryption that leaves us no way in.

5. How long data is kept

Your data stays on your Mac as long as you keep it. We do not keep it, since we never receive it.

To erase everything from within the app: Settings → Backup → Reset data, with every box ticked — including "Settings and personal information", which also erases your name, your postcode and your service keys. You can also delete the app and its data folder (location given in point 2).

6. Your rights (GDPR)

The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability.

For your financial data, these rights are exercised directly in the app, without writing to us and without delay:

• access and portability → Import / Export → Export (full JSON);
• rectification → edit or delete a transaction;
• erasure → Settings → Backup → Reset data, or delete the data folder.

These rights do not need to be requested from us because they do not go through us: you exercise them yourself, immediately, on your machine. That is the direct result of the architecture described in point 1.

If you nonetheless think we hold data about you — for example because you wrote to us — contact support@budgenie.eu. We reply within one month, which may be extended by two months for a complex request (article 12.3 of the GDPR), in which case we will let you know.

You can lodge a complaint with the CNIL (the French data protection authority):

Commission nationale de l'informatique et des libertés 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France www.cnil.fr — +33 1 53 73 22 22

7. Minors

BudGénie is not intended for minors and does not knowingly collect any data about them.

In France, the age from which a minor can consent alone to the processing of their data for an online service is 15 (article 45 of the amended law no. 78-17 of 6 January 1978). Below that age, consent must be given jointly with the holder of parental authority.

In practice, the artificial intelligence analysis — the only feature that sends data out — requires a paid API key from a third-party provider, which already implies a contract a minor cannot enter into alone.

8. Changes

Any change to this policy will be published at this address with a new date. A change affecting what leaves your Mac will be announced in the app before it takes effect.

9. What this policy does not promise

We prefer to put it in black and white:

• The working database is not encrypted at rest on your disk. It is protected by the macOS sandbox and by your Mac's user session. Anyone with access to your unlocked session has access to BudGénie. Turn on FileVault in macOS settings: it is the protection that is missing, and it covers your whole disk, not just this app.
• Backups, on the other hand, are encrypted (AES-256-GCM), and are never written unencrypted: if the key cannot be obtained, the backup fails rather than producing a file anyone could read.
• We cannot recover your data if you lose your Mac. Make regular exports; they are your only backup.

BudGénie does not provide personalised investment advice. The analyses, projections and simulations are calculation tools, not recommendations.