Privacy Policy
Last updated: July 2026
Data controller
The controller of your data is Humanee Sàrl, a limited liability company under Swiss law, based in Vevey (Switzerland) and registered under number CHE-270.975.215 (the "Publisher").
For any question about your data or to exercise your rights, write to us at hello@flishbook.com. We reply within a reasonable time.
What data we process
We process only the data needed to run the service: the identity you declare (the name you appear under in a shared pot), your email address when you link an account, and the expenses, shares and balances that you or other members enter.
We also process minimal technical data that is essential to security and to running the service properly — for example an IP address at sign-in and some information about your browser. We do not collect data beyond what the service needs.
You can use a first shared pot without creating an account; in that case no email address is shared with us until you link one.
Why we process it (legal bases)
We process your data to deliver the service you use: recording expenses, calculating everyone's share and suggesting settlements. This purpose rests on performance of the contract formed when you create or join a shared pot.
We send you transactional emails (one-time sign-in code, confirmations, statements, invitations) because they are necessary to run the service. Sign-in is passwordless, using a code sent to your email address.
If you subscribe to flish+, we process the data needed to manage it through our payment provider. Finally, we rely on our legitimate interest in keeping the service secure and reliable.
Processors
We rely on a small number of providers that process data on our behalf and under our instructions: cloud hosting to run the application and its database (including Supabase for the database), Stripe for subscription payments, and Resend for sending our emails.
These providers only access the data needed for their task and are not allowed to use it for other purposes. We do not share your data with any other third party, except where required by law.
Retention
We keep your data for as long as your shared pot or account stays active, so that the accounting history and balances remain consistent for every member.
When you delete your account, your identity data is anonymised (see "Your rights" below). Data strictly required to meet our legal obligations may be kept for the period the law requires, then erased.
Your rights
You have the right to access, correct and delete your data, as well as to object to certain processing. You can exercise these rights at any time by writing to hello@flishbook.com.
Deleting your account anonymises your identity (your name and email) while preserving the accounting balance of your shared pots: expenses and balances stay consistent for the other members, but are no longer tied to an identifiable person. This balance is an accounting necessity, not a retention of your personal data.
No ads, no resale, no tracking
We do not sell or rent your data to anyone. Flishbook shows no advertising and includes no ad trackers or profiling tools for marketing purposes.
Our model rests on the flish+ subscription, not on exploiting your data. That is a design choice, not merely a promise.
Published in Switzerland
Flishbook is published in Switzerland by Humanee Sàrl. Switzerland has a demanding data-protection framework, which we see as a privacy advantage.
Flishbook is not a payment service and moves no funds: we therefore hold no banking data about the settlements between members, which you carry out by your own means, outside the service.
About this document
This policy faithfully describes our practices as of its last update. It is provided for information and is a template that should be reviewed by a lawyer in light of your situation and the applicable regulations.
We may update this document; substantial changes will be flagged. For any question: hello@flishbook.com.