Privacy Policy

Last updated: 27 September 2026

TimaTontine is an app that helps a group keep track of a tontine — a savings circle: who has contributed, for which turn, and who receives the pot. This document explains what data we handle, why, and what you can require of us.

Money does not pass through TimaTontine. Members pay each other directly — bank transfer, Orange Money, Wave, cash — and then declare that payment in the app. We never hold, move or collect any funds. We only see what members declare.

Who is responsible

Fatima Baldé, publisher of TimaTontine. Contact: legal@timatontine.fr.

What data, and why

Data	Why
First name, last name, display name	So other members of your tontine can recognise you
Email address, phone number	Creating your account, signing you in, sending verification codes
Password	Stored in an irreversible encrypted form; we cannot read it
Profile photo	Optional. To recognise you in the member list
Country, language, currency	Showing the app in your language and your currency
Tontines, turns, contributions, declared payments, payouts	The heart of the service: keeping the group's accounts
Payment receipts	When the organiser requires them, to check a contribution. Visible to her
Solidarity fundraisers: title, description, goal, contributions received and updates posted	Letting a group gather a sum for a project or an emergency, and follow how the collection is going
Group chat messages	Letting members talk to each other
Device identifier	Sending you the notifications you agreed to receive
Sign-in and activity dates	Account security, and helping you when you ask us to

If you sign in with Apple or Google, we receive an identifier from them and, depending on your choice, your email address. We never receive your password.

Legal basis

Performance of the contract for everything that makes the service work: your account, tontines, contributions, and notifications about your own turns.
Your consent for what is optional: profile photo, push notifications, payment receipts.
Our legitimate interest in account security and abuse prevention.

Who else has access

Other members of your tontines see your display name, your photo if you added one, your membership status and the state of your contributions. That is the very principle of a tontine: everyone sees where the group stands.

Our technical providers, who act on our instructions and do not use your data for their own purposes:

Provider	Role	Where
Render	Server hosting	Frankfurt, Germany
Neon	Database	Frankfurt, Germany
Brevo	Sending verification emails	European Union
Cloudinary	Profile photos and shared files	European Union
Google Firebase	Notifications on your phone	European Union and United States
Apple, Google	Signing in with your Apple or Google account	Under their own policies

We do not sell any data, and we pass it to no one else, except where the law leaves us no choice.

How long we keep it

For as long as your account exists, for your account data.
The tontines you took part in remain visible to their members for as long as the group exists: these are shared accounts, and erasing them would distort the record for everyone else.
Fundraisers and their contributions remain visible to their participants for as long as the fundraiser exists, for the same reason.
Verification codes expire after thirty minutes.
Database backups are kept for thirty days.

Your rights

At any time you may access your data, correct it, have it erased, request a copy, object to a processing activity, or withdraw your consent.

Two of those rights work directly in the app, without writing to us: Profile → Export my data gives you a complete copy, and Profile → Delete my account erases your credentials and signs you out of every device immediately.

How deletion works is explained on the Delete my account page. For anything else, write to legal@timatontine.fr. You may also complain to the data protection authority in your country if our answer does not satisfy you.

Security

All traffic between the app and the server is encrypted.
Passwords are stored in an irreversible form.
Changing your password immediately closes any session open on your other devices.
Data is hosted in the European Union.

Children

TimaTontine is not intended for anyone under 16, and we do not knowingly collect their data.

If this document changes

The date at the top shows the last update. We will tell you in the app about any significant change.