Legal
FrançaisCookie Policy
Updated October 27, 2026
What EvenHearth keeps in your browser and in the phone apps, what it is for, and how to remove it.
In short
No advertising or tracking cookies. Everything the site loads comes from EvenHearth, so no other company learns that you visited, except Stripe's payment form, which loads only when you subscribe or your bank asks you to confirm a payment. Stripe may store its own cookies to prevent fraud; Stripe's privacy policy covers them.
Everything below is needed for something you asked for, or remembers a choice you made, so there is no consent banner. Usage analytics is the one exception, and it has its own switch.
Cookies
These are the only cookies EvenHearth sets. Each is Secure, HttpOnly and SameSite=Lax: it only travels over HTTPS, scripts on the page cannot read it, and other sites cannot make your browser send it.
Signing inWhat it doesKeeps you signed in, with an Account or as a Guest.How long30 days from sign-in, or 14 days without use for an Account. Cleared when you sign out.Signing in with Google, Facebook or AppleWhat it doesOnly while you sign in with Google, Facebook or Apple. Makes sure the sign-in that comes back is the one this browser started.How longTen minutes at most.One more answer for Google, Facebook or AppleWhat it doesOnly when a Google, Facebook or Apple sign-in needs one more answer from you, such as whether to link an Account you already have.How longFifteen minutes at most.
| Cookie | What it does | How long |
|---|---|---|
| Signing in | Keeps you signed in, with an Account or as a Guest. | 30 days from sign-in, or 14 days without use for an Account. Cleared when you sign out. |
| Signing in with Google, Facebook or Apple | Only while you sign in with Google, Facebook or Apple. Makes sure the sign-in that comes back is the one this browser started. | Ten minutes at most. |
| One more answer for Google, Facebook or Apple | Only when a Google, Facebook or Apple sign-in needs one more answer from you, such as whether to link an Account you already have. | Fifteen minutes at most. |
Stripe's payment form sets fraud-prevention cookies of its own when it loads. EvenHearth does not read them, and Stripe's privacy policy covers them.
Other browser storage
The rest is local and session storage on your device. None of it is sent to anyone else.
- Signing inHolds your place while you sign in, create an Account, accept an invitation or enter a code. On the web it also notes that your session is in the cookie above. It never holds a password or a session token.How longUntil the step is done or the tab closes. The note goes when you sign out.
- Guest accessIf you joined as a Guest, a random id that lets this browser ask the household Owner for a new link if you are signed out. It cannot sign you in.How longUntil you clear site data.
- Work in progressA receipt being photographed or read, or what you were typing on Add, so a reload or a closed app does not lose it.How longUntil it is saved or discarded, and a day at most for typed drafts.
- PreferencesChoices you made: theme, language, hidden amounts, the household you had open, sounds and vibration, camera or keypad on Add, and where address search should look.How longUntil you change them or clear site data.
- NotificationsOnly if you turn notifications on: a random id that tells this browser apart from your other devices.How longUntil you clear site data.
- Usage analyticsA random id for this browser, and your analytics choice. See below.How longUntil you switch analytics off or clear site data.
- Keeping the app workingSmall notes such as which tips you have already seen, and whether the app is part-way through an update.How longHours to days, or until you clear site data.
| Kind | What it does | How long |
|---|---|---|
| Signing in | Holds your place while you sign in, create an Account, accept an invitation or enter a code. On the web it also notes that your session is in the cookie above. It never holds a password or a session token. | Until the step is done or the tab closes. The note goes when you sign out. |
| Guest access | If you joined as a Guest, a random id that lets this browser ask the household Owner for a new link if you are signed out. It cannot sign you in. | Until you clear site data. |
| Work in progress | A receipt being photographed or read, or what you were typing on Add, so a reload or a closed app does not lose it. | Until it is saved or discarded, and a day at most for typed drafts. |
| Preferences | Choices you made: theme, language, hidden amounts, the household you had open, sounds and vibration, camera or keypad on Add, and where address search should look. | Until you change them or clear site data. |
| Notifications | Only if you turn notifications on: a random id that tells this browser apart from your other devices. | Until you clear site data. |
| Usage analytics | A random id for this browser, and your analytics choice. See below. | Until you switch analytics off or clear site data. |
| Keeping the app working | Small notes such as which tips you have already seen, and whether the app is part-way through an update. | Hours to days, or until you clear site data. |
Usage analytics, and how to turn it off
Usage analytics keeps a random id for this browser. We use it to count how features are used and to see where people get stuck. It is not your name and it is not shared with anyone.
We record that something happened, such as a receipt reviewed or a button pressed, never what it contained: no amounts, shops, categories, photos or names. Events stay on our own servers and are deleted 13 months after the end of the month they happened in. We use no outside analytics company.
Switch it off in Settings, under “Usage analytics”. That deletes the id. When you are signed in, the choice is saved to your Account and applies on all your devices.
Analytics starts off if your browser sends Global Privacy Control or Do Not Track. It also starts off if we take you to be in Quebec: going by the region you chose for billing or, without one, by Canadian French as your language. If you have an Account, the app then asks you once whether to turn it on. Your choice in Settings always wins.
In the Android and iOS apps
The phone apps keep the same kinds of items. Your sign-in is held in the phone's secure storage, where other apps cannot read it. Clearing the app's data removes everything on this page.
While usage analytics is on, the Android app also sends crash reports through Firebase Crashlytics, which keeps a random installation id in the app. The Privacy Policy says what a crash report holds.
Removing it
Signing out ends your session and clears the cookie. To remove the rest, clear site data for EvenHearth in your browser's settings.
If you block cookies for this site you cannot sign in, and if you block local storage the app will not start.
Clearing your browser does not delete your account or your records. Data retention covers what we keep on our servers and how to have it erased.
Changes and questions
When this page changes, the date at the top changes. A new outside provider is added to Subprocessors before it receives anything.
