Privacy Policy

Last updated: 5 May 2026

This privacy policy describes how the Masroufy application (“we”, “our application”) collects, uses and protects users' personal data.

This is a translation provided for convenience. The French version is the authoritative text.

1. Data controller

Ayoub Gaouet — contact: gaouetayoub1@gmail.com

2. Data collected

Masroufy collects the following data when you use the application:

  • Account information: username, email address, password (encrypted).
  • Personal financial data: transactions, categories, budgets and financial goals that you enter yourself in the application.
  • Attachments: photos or images you choose to attach to your transactions (optional).

No banking data (card number, IBAN) is collected. No location data is collected.

3. Purpose of processing

  • To allow the creation and management of your user account.
  • To authenticate you when you sign in to the application.
  • To let you record and view your personal financial data.
  • To send you emails related to your account (verification, password reset).

4. Data sharing

We do not sell your personal data. Your data is not shared with any third party for advertising or marketing purposes.

Your data is hosted on Google Cloud Platform servers (Europe region), our hosting provider, acting as a processor.

5. Security

  • All communication between the application and our servers is encrypted over HTTPS (TLS).
  • Passwords are stored as bcrypt hashes — they are never accessible in plain text.
  • Authentication uses JWT tokens.

6. Data retention

Your data is kept for as long as your account is active. If you request the deletion of your account, all your personal data is deleted within 30 days.

7. Your rights

Under the GDPR, you have the following rights:

  • The right to access, rectify and erase your data.
  • The right to data portability.
  • The right to object to and restrict processing.

To exercise these rights, contact us at gaouetayoub1@gmail.com.

8. Account deletion

You may request the deletion of your account and all associated data at any time. The procedure is described on this page: Account deletion

9. Children

Masroufy is not intended for children under 13. We do not knowingly collect any data concerning a minor under 13.

10. Changes

This policy may be updated. The date of the last update appears at the top of this page.

11. Contact

For any question about this policy: gaouetayoub1@gmail.com