1. Controller and contact
Contivo is operated from Germany and is responsible for the processing described in this Privacy Policy. Privacy and data-protection requests can be sent to privacy@contivoapp.com. General support requests can be sent to support@contivoapp.com.
2. Scope
This Privacy Policy applies to the Contivo mobile application for Android and iOS, the Contivo website at contivoapp.com and related support communications. It does not apply to third-party websites or services that have their own privacy notices.
3. Account and profile data
When you create or use an account, Contivo may process your email address, authentication identifiers, display name, profile image, preferred language, account settings, active-budget selection and technical account metadata. Passwords are handled through the authentication provider and are not stored by Contivo in readable form.
4. Financial and user-created content
Contivo processes the information you choose to enter, including budgets, currencies, categories, income and expense transactions, amounts, dates, notes, goals, savings and investment entries, plans, statistics settings and exported-report selections. Contivo does not connect to your bank account and does not process card or payment-account credentials for the finance-tracking features.
5. Shared budgets and collaboration
When you participate in a shared budget, your profile identity, role and permitted activity may be visible to other members of that budget. Depending on permissions, members may see transactions, categories, goals, notes, creator information and changes made by participants. Budget owners control invitations and roles. You should share a budget only with people you trust.
6. Device data, permissions and notifications
Contivo may process device and app information needed for security, compatibility, synchronization and push delivery, such as app version, operating system, device token and basic diagnostic events. Camera access is used only when you choose to take a profile photo. Photo-library access may be used when you choose an existing image. Notification permission is used for reminders, invitations and shared-budget updates. Contivo does not request access to your precise location, phone contacts or microphone for the current release.
7. Offline storage and synchronization
To make the application usable without a continuous internet connection, selected account, profile, budget and transaction data may be stored locally on your device. Locally created changes may be queued and synchronized with Contivo’s cloud infrastructure when a connection becomes available. Removing the app or clearing app storage may remove local copies that have not yet synchronized.
8. Website analytics
The website contivoapp.com uses Google Analytics to understand aggregate website usage, such as visited pages, approximate region, device type and referral source. IP anonymization is enabled in the website configuration. Website analytics are separate from the financial content stored in the Contivo app.
9. How and why data is used
Data is processed to create and secure accounts; provide app functions; save and synchronize information; support offline operation; enable shared budgets, roles and invitations; deliver notifications and service emails; generate reports; restore access; prevent abuse; troubleshoot problems; respond to requests; comply with legal obligations; and improve reliability and usability. Where applicable, processing is based on performance of the service requested by you, legitimate interests in operating and securing the service, consent for optional permissions or communications, and compliance with legal obligations.
10. Service providers
Contivo uses carefully selected providers to operate the service. Supabase provides authentication, database, realtime synchronization and file-storage infrastructure. Google Firebase Cloud Messaging provides push-notification delivery. Resend may deliver account and service emails. Google Analytics measures website usage. These providers process data under their own terms and privacy safeguards and may process data in countries outside your place of residence.
11. Sharing and disclosure
Contivo does not sell your personal data. Data may be disclosed to service providers only as needed to operate the service; to participants when you intentionally use shared features; when required by law or a valid authority request; to protect users, rights and service security; or in connection with a future business reorganization, subject to applicable safeguards.
12. International data transfers
Some service providers may process data outside Germany or the European Economic Area. Where required, transfers are protected through an adequacy decision, standard contractual clauses or another lawful transfer mechanism.
13. Security
Contivo uses encrypted network connections and reasonable technical and organizational safeguards designed to protect data against unauthorized access, alteration, loss or disclosure. Access is limited according to account and budget roles. No internet-based system can guarantee absolute security, so you should protect your device, email account and login credentials.
14. Retention
Account and app data are generally retained while your account is active and as needed to provide the service. Support messages and security records may be kept for a reasonable period to resolve requests, prevent abuse and establish or defend legal claims. Data may be retained longer when required by law. Local offline copies remain on a device until synchronized, deleted through the app, cleared from device storage or removed with the app.
15. Account deletion and shared data
You can initiate account deletion inside the Contivo app. You may also request deletion through the public Account Deletion page at contivoapp.com/delete-account or by emailing privacy@contivoapp.com from the address connected to your account. If you own a shared budget, calendar, task space or another shared object, deletion may be paused until you transfer ownership to another eligible participant or delete that shared object. This protects other participants from losing shared information unexpectedly. After deletion, personal profile data is deleted or anonymized unless retention is legally required. Transactions and audit-relevant entries that form part of another participant’s shared history may remain in a de-identified form so the shared records remain complete.
16. Your rights
Depending on applicable law, you may request access to your personal data, correction, deletion, restriction, portability or objection to certain processing. Where processing is based on consent, you may withdraw consent at any time for the future. You may also lodge a complaint with a competent data-protection authority. To exercise a right, email privacy@contivoapp.com. We may need to verify that the request relates to your account.
17. Children
Contivo is not directed to children who cannot legally consent to the processing of their personal data in their country. If you believe a child has provided personal data without valid authorization, contact privacy@contivoapp.com.
18. Changes to this Policy
We may update this Privacy Policy when the product, providers or legal requirements change. The current version and update date will be published on this page. Material changes may also be communicated in the app or by email where appropriate.
19. Contact
Privacy and data-rights requests: privacy@contivoapp.com. Product support: support@contivoapp.com. Website: https://contivoapp.com.