Controller and scope
Marvin Kiefer, Swiss Web Development Kiefer, is responsible for the personal data processed through Ausgaben.ch. Contact details appear below. This notice covers the public website, user accounts, the application and support requests. The service is offered to residents of Switzerland. Swiss data protection law applies; the EU GDPR also applies where its territorial conditions are met.
Information we process
When you register, we store your name, email address, a password hash and account timestamps. Signing in creates session records that may include your IP address and browser information. We process technical request information to deliver the site, prevent abuse and investigate errors.
You choose which financial records to enter: household people, account names and providers, balances, account assignments, income, expenses, categories, notes, transfers, recurring schedules, budgets, goals and investments. We also store family membership, invitations and display settings. You do not need to provide bank login credentials. Avoid unnecessary sensitive information in descriptions, notes and receipts.
Some information may be supplied by another family member, for example your name, invitation email address or a shared household expense. Its source is the person who entered it. If information about you was entered by someone else, you can contact us using the details below.
Purposes and legal grounds
We use this information to create and secure your account, maintain your records, provide shared family access, calculate summaries and projections, classify receipts and respond to requests. Required registration fields are necessary to provide an account; financial records and receipt scanning are optional. Without the relevant data, the corresponding feature cannot work.
Where the GDPR applies, account management and requested features rely on performance of a contract, Article 6(1)(b). Security, abuse prevention and necessary technical diagnostics rely on our legitimate interest in operating a reliable service, Article 6(1)(f), subject to your rights. Legally required processing relies on Article 6(1)(c). If an optional future feature requires consent, we will obtain it separately and explain how to withdraw it. Reading this notice is not blanket consent.
Shared family records
Members of the same family workspace can view and edit its finances. The owner manages membership. Assigning people to a financial account describes who uses it; it does not restrict other family members’ access. Members can see the names and membership information needed for collaboration. Only invite people you intend to share these records with, and inform people before entering their personal information.
Leaving a family or deleting your login does not automatically delete records shared with other members. We assess requests involving shared data individually, including the rights of other people.
Receipts and automated suggestions
Receipt images are read and categorised in your browser. Neither the original image nor its extracted text is sent to the server for analysis. When you save, the booking, extracted text, merchant, category, image fingerprint for duplicate detection and analysis details are stored inside the encrypted family document. The image remains a temporary preview on your device and is discarded after review.
We do not send receipt text to an external AI service or use it to train a general AI model. Existing household categorisations can inform later suggestions. Check amounts, dates and categories before saving. Forecasts and optimisation suggestions do not execute financial transactions or make decisions about credit, insurance or legal entitlements.
Recipients and processing locations
The application and database run on an OVHcloud VPS in Gravelines, France. OVHcloud provides the underlying hosting infrastructure. Authorised administration and support are performed by the operator in Switzerland. France is covered by Switzerland’s recognition of adequate data protection in the EU. Encrypted recovery copies may also be held by the operator in Switzerland.
We use service providers for hosting and communication and may disclose information to authorities if legally required, or to professional advisers when necessary to establish or defend legal claims. Financial records are not sold to advertisers. There are currently no advertising networks or visitor analytics integrations on the site.
Email and international transfers
Email enquiries are delivered through Google’s email infrastructure. We process the sender address, message and delivery information to respond. Google may process correspondence in the United States and other countries where it operates. This does not move the application database to Google. Google publishes its international transfer safeguards, including the Swiss US Data Privacy Framework and standard contractual clauses where applicable. You can also contact us by post. Please include only the personal information needed for your request.
Google ↗How long information is kept
Account and household records remain available while needed to provide the service, until you delete the relevant records or request deletion, subject to shared records and legal retention requirements. We keep support correspondence only as long as needed to handle the request and any associated legal obligations or claims.
Sessions expire after seven days and may be renewed while you use the app. Family invitation links expire after seven days. Server diagnostic logs are configured for retention of up to 14 days. Routine server backups are normally retained for approximately 15 days, then removed by the scheduled rotation. Separate migration and recovery copies are reviewed when their recovery or verification purpose ends. Deleted data may remain in recovery copies until those copies are removed; it is not used for normal application activity.
If information must be retained for a legal obligation, dispute or security incident, it is kept only for that purpose and as long as necessary. Browser storage has separate durations, explained on the cookies page.
Encrypted financial vault
After vault setup and family conversion, financial records are encrypted on your device before upload. Your separate vault password and personal recovery key are not sent to us. The database stores encrypted family documents and encrypted key envelopes. Account identity, family membership, invitations, appearance preferences, document sizes and update times remain visible to the service. Family names and household people are included in the encrypted document.
Optional automatic unlock stores a nonextractable device key in your browser for up to 30 days. It does not store your vault password or recovery key. It still requires a signed in account and current family access. Use it only on a private device. Locking the vault or signing out removes the saved key, as explained in the cookie and browser storage notice.
Existing family records remain readable on the server until the family owner converts them from their device. Conversion replaces the active readable copy, but historical backups and physical database storage may still contain older copies until retired. Infrastructure backup encryption is separate from the personal vault and does not make those older copies inaccessible to the operator.
Financial calculations, recurring entries, search and receipt matching run on the device while the vault is open. Resetting a login password does not unlock finances. Without the vault password or personal recovery key, we cannot recover the vault. A family owner approves each member’s sharing key. Removal rotates keys for future versions, but cannot erase copies already received by a member.
This protection depends on the security of your device, browser and the application code delivered by the website. A compromised device or malicious application update could capture data while unlocked. No independent cryptographic audit has been completed. Protect your recovery key and verify family sharing fingerprints through another channel.
Security
The service uses encrypted web connections, hashed passwords, access controls, rate limits and encrypted recovery backups. The database and receipt model are not publicly accessible. These measures reduce risk, but no service can guarantee absolute security. Protect your login and review family membership regularly.
Your rights and requests
You can ask for information about your personal data, correction of inaccurate data and deletion or cessation of unlawful processing. Where the legal requirements are met, you may also request a portable copy, object to processing, restrict processing or withdraw consent for processing based on consent. Withdrawal does not affect processing that was lawful before withdrawal. Statutory exceptions and the rights of others may limit a request.
Email the contact address below with the subject ‘Data protection’. We may need proportionate verification of your identity. You do not need to send an identity document unless we explain why it is necessary. You can contact the Swiss Federal Data Protection and Information Commissioner, FDPIC, or, where the GDPR applies, the competent EU supervisory authority. You also retain any available judicial remedies.
Federal Data Protection and Information Commissioner, FDPIC ↗Changes to this notice
We update this notice when the service or its data practices change. The date at the top identifies this version. Material changes will be communicated through the service where required. Adding external analytics, cloud AI, bank connections or a market data provider requires a fresh assessment and an updated notice before use.