Privacy and cookies
In short
DuoWallet is an app for handling a couple's expenses. This notice explains what data we process, where it is held and what rights you have, both when you visit duowallet.eu and when you use the app at app.duowallet.eu.
Data controller: the DuoWallet team, reachable at info@duowallet.eu.
If you visit the website
The duowallet.eu website is a shop window: it can be read without creating an account and without providing any data.
If you write to us from the contact form, we process your name, email and message for the sole purpose of replying. The message travels through Resend (our email provider) and arrives at info@duowallet.eu. We do not use this data for anything else and we do not add it to marketing lists.
For visit statistics we use Google Analytics 4 and Microsoft Clarity (heatmaps and anonymous recordings of how people navigate the landing page, with text and fields masked), which only start if you accept them from the banner (see the Cookies section).
If you take the couples quiz, we store the names you enter, your answers and, if you leave it, your email, to show you the result and send it to you. Your partner doesn't leave an email and we never write to them. Everything is deleted after 30 days. If you tick the tips box, we keep your email afterwards too, only to send you the occasional email about money as a couple, until you unsubscribe.
If you use the app
To make DuoWallet work we process: your account data (email, name, pronoun, birthday, chosen avatar and color), your couple's data (partner, anniversary, currency) and the data you enter (expenses, settlements, special dates, reactions, notes, preferences).
Personal expenses are visible only to whoever entered them: they never appear to the partner, not even in totals. Shared expenses, settlements and reactions are visible to both members of the couple, because they concern them both.
To invite your partner you give us their email address. We use it for two things: sending the invited person a single email with your invite, at the moment you send it, and recognizing them when they sign up, so that you are paired from the start. We do not write to them again and we do not use it for anything else: we keep it while the invite is pending and delete it the moment it is accepted.
In your first weeks we send you a few emails to help you get started (for example a reminder if your invite hasn't been accepted yet) and, if you stop using the app, one to ask whether something isn't working. You can turn them off at any time from the link at the bottom of each one, or in your Profile under Tips by email. Emails about your account, like the ones about your plan, stay on.
To understand whether our emails are useful we measure delivery and opens (with an invisible image, as almost every email service does) and clicks, with a parameter in our links. We do this per type of email, not to watch what you do: the numbers end up in aggregate statistics.
We do not sell your data and we do not share it with third parties for marketing purposes. No banking data is collected: expenses are entered by hand.
Attached receipts and invoices
If you have the Plus plan you can attach a photo of a receipt or a PDF invoice to an expense. The files are held on Supabase, on servers in Europe (Frankfurt), in a private space: there are no public links and every access goes through the same visibility rules as the expense. The attachment of a personal expense is seen only by you, that of a shared expense only by the two of you.
An attachment lives as long as its expense: if you delete the expense, the file is deleted. If you delete your account, the files follow the same rules as your data (deletion with a 7-day window to change your mind) and the files are cleaned up within about 48 hours.
Automatic document reading and categorization (AI)
When you attach a file, the document is read automatically to pre-fill the expense (amount, date, merchant, category). To do this the file is processed by Mistral AI, a European provider (France): the processing takes place entirely within the European Union.
Mistral does not keep the document and does not use it to train its models. We send no data about you along with the file: no name, no email, no identifiers. The result of the reading is used only to pre-fill the expense form and is not saved: only what you choose to save enters our systems.
While you write the description of an expense, too, if your plan is Plus, the app can suggest the most fitting category on its own. To do this we send Mistral (France, EU) only the description you wrote and the list of possible categories: no amounts, no name, no other data about you. Here too Mistral does not keep the text and does not use it to train its models. On the Free plan this feature is switched off.
If your plan is Plus, a short comment of the day about your numbers appears on the Home screen (for example your spending pace against the budget). It is always written by Mistral (France, EU), but it only receives the figure we have already worked out: aggregate numbers for the month and, at most, the name of a fixed category. We never send individual expenses, the amount of each transaction, personal expenses (which do not even enter the calculation), nor any text written by you: a person's name, the description of an expense and the name of a custom category are replaced by a placeholder and put back only afterwards, on your device. Mistral does not keep this data and does not use it to train its models. On the Free plan this feature is switched off.
Where the data is held
The app's data is held on Supabase, on servers in Europe (Frankfurt, region eu-central-1). The website and the app are served by Vercel. Service emails (confirmations, password resets) go out through Resend from the duowallet.eu domain.
We process data in accordance with the European General Data Protection Regulation (GDPR).
The providers we rely on, and what they do: Supabase (EU, Frankfurt) holds the database and the files; Vercel (USA, with DPF/SCC safeguards) serves the website and the app; Cloudflare (EU/USA, DPF/SCC) handles DNS and email routing; Resend (USA, DPF/SCC) sends the service emails; Mistral AI (France, EU) reads attached documents and writes the comment of the day on the Plus plan, without keeping the data; Microsoft Clarity (USA, with DPF/SCC safeguards) collects anonymous navigation statistics on the landing page only; PostHog (EU, Frankfurt) collects usage statistics for the app, in pseudonymous form and with text masked; Sentry (EU) receives technical error reports, accompanied by an internal pseudonymous identifier that helps us understand whether a problem affected real people, never your name or your email; RevenueCat (USA, DPF/SCC) handles in-app purchases of the Plus plan; Google Firebase (USA, DPF/SCC) delivers notifications to Android phones and, inside the installed app, collects pseudonymous usage statistics that tell us whether advertising campaigns are working, never the content of your expenses; Apple (USA, DPF/SCC) delivers notifications to iPhones. None of them use your data for their own purposes or to train artificial intelligence models.
There is a firm limit on usage statistics: only actions (for example “added an expense”) and technical information such as the type of phone or the active plan leave the app. Amounts, expense descriptions, merchants, categories, notes and attached documents never do. Session recordings are switched off.
How long we keep it
For as long as your account is active. If you delete your account, the request can be undone for 7 days; after that your personal data is deleted and your email is freed up. Expenses shared with your partner remain in their history in anonymized form (you appear as “Partner”, with no identifying data): they are theirs too.
Your rights
You can ask at any time for access, correction, export or deletion of your data by writing to info@duowallet.eu. Deleting your account is also available directly in the app, from your Profile.
If you believe that any processing breaks the rules, you can contact the Garante per la protezione dei dati personali, the Italian data protection authority.
Changes
If this notice changes substantially we will say so in the app or on the website. The current version is always published at duowallet.eu/privacy.
Last updated: October 2026 · This is a translation of the Italian text. In case of doubt, the Italian version prevails.