Privacy

This page is a translation provided for convenience. The French version is the reference version: read it in French.

Data controller

Matteo Quintaneiro, sole trader (entrepreneur individuel), 173 rue de Courcelles, 75017 Paris, France (SIREN 939 240 016). Contact: contact@tichow.fr.

In the app

Spook helps you keep track of your subscriptions and recurring costs. To do so, the app stores on your iPhone, iPad or Android device:

• the subscriptions you add: service, amount, frequency, dates, contract terms, notes;
• the usage you choose to log, your reminders and the steps you take;
• your preferences, including an optional date of birth and student status: they are only used, on the device, to leave out offers reserved for an age group or for students.

Your subscriptions and their details stay on your device. You can choose to share statistics and the names of catalogue services, as explained below. Comparisons and calculations happen on your device.

• Reminders are notifications scheduled on your device, only if you allow them. They can show the name of the service and the expected amount. Discreet mode, in Settings › Reminders, hides these details.
• When an offer you follow changes in the public catalogue, Spook detects it on your device and can tell you with a local notification: nothing you follow is sent for this.
• If you import a bank statement (in beta; your first import is free, the following ones come with Spook Pro), the file you choose (PDF, CSV, scanned statement or photo) is read in memory on the device, then forgotten: it is not copied, not sent and not used for statistics. Only the subscriptions you confirm are saved, as if you had added them yourself. A scan or a photo is read by the phone’s text recognition: Apple’s Vision on iPhone and iPad, Google’s ML Kit, provided by Google Play services, on Android. The text and image of the statement never leave the device. On Android, ML Kit sends Google technical information about its own operation (device, versions, performance, errors), never the content it reads.
• Widgets, if you add them, show your next payments and what is left to pay this month on the Home Screen, and also on the Lock Screen on iOS. They read a copy of this information stored on the device, in a space shared between the app and its widgets: nothing is sent.

What can leave your device

The public catalogue

Spook regularly downloads a public file: the list of services, reference prices, tips and offer changes. It is hosted by Supabase (Supabase Storage), acting on my behalf. The main storage of this catalogue is in the Paris, France region, in the European Union.

To download this catalogue, the app sends neither your subscriptions nor your preferences, and uses no tracking identifier and no cookie. As with any web page, the host receives the IP address of the request and logs it to run and secure the service. Legal basis: my legitimate interest in running and protecting the service (GDPR, Article 6(1)(f)). These logs are kept for the period set by the hosting plan, then deleted automatically; I do not use them to identify you.

Your purchases

On iPhone and iPad, Spook Pro is sold and charged by Apple. RevenueCat (RevenueCat, Inc., United States) helps the app check and restore your access: it receives a random identifier created by the app, with no link to your name, your email address or your Apple Account, the transaction details passed on by Apple (product, date, store country, transaction identifier) and technical data (app and system version, IP address needed for transport). This check does not depend on your consent to statistics or diagnostics. Its legal basis is performing the purchase and its restoration (GDPR, Article 6(1)(b)). Your subscriptions, the amounts you enter, your notes and reminders are not passed to it.

On Android, the purchase and its restoration go directly through Google Play Billing, without RevenueCat. The app asks Google Play for the Spook purchases linked to the device’s Google account and confirms those that unlock Spook Pro. Google does not pass your name or your email address to Spook.

No Spook server receives or stores your purchases, and no Spook account is created: access to Spook Pro is read on the device, from Apple or Google. I never receive your payment details or your Apple or Google credentials. Purchase information is kept by Apple, Google and RevenueCat for as long as it is needed to check and restore the purchase, then under their legal obligations and their own terms. Erasing your subscriptions in Spook does not delete the transaction history held by the store or by RevenueCat.

Optional statistics and diagnostics

At the end of the first-launch questions, or if you skip them with “Later”, Spook asks you once: “Help improve Spook?”. “Allow” turns on usage statistics (PostHog), sharing the catalogue services you choose and your goal, and technical diagnostics (Sentry). “Decline” leaves everything off. After that, each of these three choices (Usage statistics, Share my services and my goal, Technical diagnostics) can be changed separately, at any time, in Spook’s Settings › Privacy; sharing your services and goal requires usage statistics. Nothing is sent before you agree. The legal basis is your consent (GDPR, Article 6(1)(a)); saying no does not limit any Spook feature.

• PostHog receives predefined events: screens viewed; steps and results of adding a subscription, of the comparison, of reminders and of import/export; features used (widgets, shortcuts, spending, colours, sharing or rating Spook); the Spook Pro screen (opened and why, purchase started, completed, cancelled or restored); opening from a widget or a notification; opening an offer from the comparison and its type (mobile plan, broadband, plan); importing a statement (number of files, of months and of subscriptions found, added, unticked, deleted or edited, in ranges, file format and reason for a reading failure); and the number of subscriptions tracked, in ranges (for example “4 to 6”). They contain a random installation identifier, technical session identifiers, the app version and its distribution environment. This identifier links the events of one installation: these statistics are pseudonymised, not fully anonymous. With service and goal sharing, PostHog also receives the goal chosen at start and the catalogue services selected or added, from a predefined list, as well as the provider of an offer opened in the comparison. Other services are grouped together. Purchase events only show the step and the platform, with no receipt, transaction number or price paid. No custom name, amount, note, date of birth, student status, comparison answer or statement content is sent. No named profile is created and IP geolocation is turned off.
• Sentry receives, with technical diagnostics, crashes, hangs and filtered technical errors, the last technical steps and sampled performance timings, with the app and system versions and the device model. Free-text error messages, network requests, screenshots and session recordings are excluded.

PostHog is set up on its European service, and Sentry diagnostics are sent to its service in Germany. As with any network connection, the provider receives the IP address needed for transport. No advertising identifier is used. Spook does not pass any RevenueCat, Apple or Google identifier to PostHog or Sentry to link their data. The content of your personal subscriptions stays on the device, except for the names of catalogue services if you allow them to be shared.

The free plans currently used provide a one-year window to view PostHog statistics events and a 30-day window to view Sentry diagnostics. Sentry keeps error events for 30 days. The PostHog window limits viewing of events; it does not guarantee they are deleted automatically when it ends. Spook sends no session recording.

You can withdraw each consent in Spook’s Settings › Privacy. This stops new sending and deletes local events waiting to be sent; data already sent cannot be recalled. Data already received is used to compare the usage and reliability of Spook versions within the windows described above. Withdrawing a consent does not erase it automatically. To exercise your rights over this data, contact me at the address given above; because there is no named profile, I may not be able to find the events of a given installation.

Apple’s statistics

If you agree to it in your iPhone settings (Privacy & Security › Analytics & Improvements › Share With App Developers), Apple sends me crash reports and anonymised usage statistics. You can turn this off at any time.

Your backups and exports

On iPhone and iPad, Spook’s data can be included in your iCloud or computer backups, depending on your Apple settings. On Android, subscriptions, drafts and preferences can be included in the Android backup and in the transfer to a new device, depending on your settings and your backup provider. These copies are not a Spook sync and I have no access to them. An export (Spook’s Settings › Data) is a file you create yourself and keep wherever you like.

On this website

This website sets no cookie and loads no external resource (fonts and images are served by the site itself). No consent banner is therefore needed.

To know which pages are read, the site uses the audience measurement of Vercel Inc. (Web Analytics), with no cookie and no identifier stored on your device. For each page view, it records the date, the page address, the site you came from, the approximate country and city, the system, the browser and the device type. A visit is recognised by a fingerprint calculated from the request and dropped after 24 hours; the IP address is not kept with these measurements. I only look at overall statistics, which do not allow me to identify you or follow you on other websites. The unsubscribe and confirmation pages for the announcements are not measured. Legal basis: my legitimate interest in knowing which content is useful (GDPR, Article 6(1)(f)). These statistics are kept for the period set by the hosting plan.

To display the pages, Vercel Inc., acting on my behalf, processes technical connection data (IP address, date, page requested, browser type) to deliver the site and protect it against abuse. Legal basis: my legitimate interest in keeping the site running and secure (GDPR, Article 6(1)(f)). These logs are kept for the period set by the hosting plan, then deleted automatically.

If you write to me

When you write to contact@tichow.fr, I use your address and your message only to reply to you. Legal basis: my legitimate interest in answering the messages sent to me (GDPR, Article 6(1)(f)), or performing the contract if your message is about your Spook Pro purchase (Article 6(1)(b)). These exchanges, except requests to be told about the launch (covered below), are kept while your request is handled, then for at most three years after our last exchange, unless the law requires otherwise. Never send a password, a bank statement or a card number.

Being told about the launch

Until 9 October 2026, the date of the Android launch, the form on this website let you receive a welcome email confirming your sign-up, then the announcements of Spook’s availability on iOS and Android. Your email address is used only for these messages and for practical information to download the app at launch. It is not used for a general newsletter, for advertising or for tracking in the app. It is not sold and is not linked to PostHog, Sentry or RevenueCat data. Signing up is optional and creates no Spook account.

Legal basis: your consent (GDPR, Article 6(1)(a)), given by entering your address and clicking “Me prévenir” (Notify me), after reading the notice shown below the field. The address, the sign-up date, the location of the form, the version of this notice and a random unsubscribe identifier are stored in a private Supabase table, with main storage in Paris, France. The sending dates of the iOS and Android announcements prevent them from being sent to you twice.

Resend (Plus Five Five, Inc., United States) is the provider chosen to send the welcome email and these two announcements. It receives a copy of your address, your membership of the iOS and Android lists and your personal unsubscribe link. Supabase also keeps the contact’s technical identifier to match removals, as well as the technical identifiers and dates of the welcome email to avoid duplicates. This email is prepared automatically as soon as a new sign-up is recorded. Whether you receive it also depends on your email service; an outage can delay sending. A repeated attempt with the same address does not send this email again. Open and click tracking is turned off for the sending domain.

You can withdraw your consent at any time by writing to contact@tichow.fr, or with the unsubscribe link included in each email. Your address is removed from the active list in Supabase as soon as you unsubscribe, after both announcements have been sent, or twelve months after you signed up if both launches have not happened. An hourly automatic check deletes sign-ups that have expired or whose two announcements have been sent. A new sign-up attempt with the same address does not extend this period.

When the connection to Resend is active, removals and expiries are passed to it automatically. If there is an outage, the deletion request stays pending and is retried: the address needed for this operation is kept until it is confirmed. Contacts created only for these announcements are deleted from Resend; a contact already present for another purpose is removed from both Spook lists and its personal link is erased. A removal made directly in Resend is also reflected in Supabase. A protected fingerprint of the address may be kept until the original expiry of the sign-up, so that a new attempt does not cancel the removal. It cannot be used to send an email and is not a readable address. If you enter an unsubscribed address again, an email with a confirmation link is sent to it: only a click on this link, valid for 24 hours, restores the sign-up and, where applicable, lifts the unsubscribe recorded at Resend. During these 24 hours, the address, the location of the form and the number of links sent (five at most) are kept in a private Supabase table, then deleted by the hourly clean-up. Legal basis of this protection: my legitimate interest in respecting your choice (GDPR, Article 6(1)(f)). Technical logs and any backup copies follow the providers’ cycles; old copies are not reused to send messages.

To limit automated sign-ups, the service checks a temporary fingerprint of the connection, without storing the raw IP address in the list. The limit applies to repeated attempts within one minute. The fingerprint changes every hour and is deleted by the hourly clean-up, at most about one hour after it was last used. Legal basis: my legitimate interest in protecting the form against abuse (GDPR, Article 6(1)(f)). Supabase also processes the technical data needed for the request in its infrastructure logs; it is not used for the announcements.

Providers and where data is located

• Vercel Inc. (United States): hosting of this website and cookie-free audience measurement.
• PostHog and Sentry: optional statistics and diagnostics, with main storage in Europe. The PostHog policy and the Sentry policy describe the processing and transfers that apply.
• Google (ML Kit): on Android, recognition of the text of a scanned or photographed statement, on the device; Google only receives technical operating measurements, as described in its ML Kit data disclosure.
• RevenueCat, Inc. (United States): checking and restoring Spook Pro purchases on iPhone and iPad, under its privacy policy.
• Supabase: hosting of the public catalogue downloaded by the app and of the private list for launch announcements, with main storage in Paris, France.
• Resend (Plus Five Five, Inc., United States): managing contacts and sending the welcome email and launch announcements, under its data processing agreement and its privacy policy. The sending domain is set to the Europe region (Ireland); this region does not guarantee that contacts and all processing stay in the European Union. Resend provides, in particular, for processing in the United States and for safeguards for international transfers.
• Hostinger International Ltd. (Cyprus): hosting of the contact@tichow.fr mailbox, under the Hostinger data processing agreement. The company’s country does not necessarily mean the location of all its servers and subprocessors.

The Paris region refers to the main storage of the catalogue and of the announcement list. Supabase Storage also uses a global delivery network to distribute files, and the form’s functions run on distributed infrastructure: some technical data linked to requests may therefore be processed outside the European Union. Hosting in Paris does not mean that all of this provider’s processing takes place in France. The Supabase data processing agreement sets out the processing terms and the safeguards that apply to international transfers.

When these providers process data outside the European Union, transfers are covered by the safeguards provided for by the GDPR: the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified companies, or the Commission’s standard contractual clauses. You can get a copy of these safeguards by writing to me.

Apple (Apple Distribution International Ltd., Ireland, for the App Store in Europe) distributes the app and charges for purchases as an independent controller, under its privacy policy. On Android, Google distributes the app and charges for purchases through Google Play, under its privacy policy. In the Android app, “Share Spook” opens the Android share sheet: you choose the app and the recipient. “Rate Spook” opens Spook’s page on Google Play, and the in-app review request also goes through Google Play. Spook receives nothing from them: neither the recipient of a share, nor the text or rating of a review. Spook’s reminders are scheduled on your device and do not go through any Spook notification server.

Your rights

You have the right to access, correct, erase, restrict, object to and port the data about you. You can also set instructions on what happens to your data after your death (Article 85 of the French Data Protection Act, loi Informatique et Libertés). Since Spook does not hold your subscription data, you manage it directly in the app:

• Export: Spook’s Settings › Data › Export my subscriptions;
• Erase local subscriptions: Spook’s Settings › Erase my data, or delete the app. Copies you have backed up or exported are managed with their provider;
• Get Spook Pro back: Spook’s Settings › Restore purchases; your purchase history is in your Apple or Google Play account, depending on the device.

Erasing your local subscriptions does not delete statistics, diagnostics or transactions already received by providers. To ask for access to this data or for its erasure, write to contact@tichow.fr. You can also lodge a complaint with the CNIL.

Changes

If Spook adds a new feature that sends data (an optional sync, for example), this page will be updated beforehand, and the app will explicitly ask for your consent. The date of the last update is at the top of this page.