We receive nothing.

EFFECTIVE 2026-09-29  ·  ALVENERA FOR ANDROID, IOS, WINDOWS AND MACOS

What the app collects

Nothing. Alvenera has no user account, no server and no analytics service. It sends no transactions, balances, categories, device identifiers or crash reports to anyone. The app opens no network connection as part of its normal operation.

The built-in guide offers a link to its version on this website. If you follow it, the app hands the address to your device's browser, which opens the page; the app itself downloads nothing and sends nothing with the link. The address names only the article and the language asked for. What the site keeps of that visit is described below, under “This website”.

When the app fails, it writes the error to a log file beside the database, so that a fault can be diagnosed from your own device. That file stays there: nothing is transmitted, and no report reaches us. On Android the app declares no internet permission at all, so sending anything is not merely a policy we hold — it is a capability the app does not have.

Where your data lives

Your accounts, transactions, categories, budgets and commitments are kept in a single database file inside the app's private storage on your device. The Settings screen shows you exactly where that file is, so you do not have to take our word for it.

When you uninstall Alvenera, your operating system removes that file along with the app. No copy of it exists anywhere else unless you made one.

Backups

You choose whether and when a backup is made, and where it is written. Alvenera produces the file and stops there; it does not upload it anywhere.

• If an app password is set, the whole backup is encrypted with AES-256-GCM, keyed from your password by PBKDF2-SHA256 over 600,000 rounds. GCM authenticates the file, so an altered backup is rejected rather than silently restored.
• If no password is set, the backup is written in the clear, and the app tells you so at the time. That is your decision, made knowingly.
• A lost password cannot be recovered. We do not hold your key, and there is no mechanism to bypass the encryption. This is the direct counterpart of having no server.

Platform backups

Your operating system can also copy app data — to a cloud backup, or to a new phone while you set it up. Alvenera opts out of both on Android, so the ledger is not swept into your Google account by a mechanism you did not start. On other platforms, what the system backup does with app data is governed by that platform's settings, which are yours to set.

Statement imports

When you import an OFX, QFX or CSV file, it is read and parsed on the device. Its contents are not sent to any service to be categorised, enriched or verified.

Advertising and tracking

There is none. No ad network, no pixel, no advertising identifier, no third-party measurement tool, no attribution library.

This website

This site is served as static pages. It sets no tracking cookies and runs no analytics scripts. Your language choice is kept in your browser's local storage, on your device only, and is never transmitted.

Web fonts are loaded from Google Fonts, which means your browser makes a request to that service and Google sees the corresponding IP address. If that concerns you, write to us — we can self-host the fonts.

You are asked about this on your first visit. Accepting allows the language choice to be kept; Essential only keeps nothing but the answer itself, which is precisely what makes the answer hold from one visit to the next. Until you answer, nothing is written. You can change your mind at any time from Storage choices, at the foot of every page.

If you write to us

If you contact us for support we have your message and your email address, because that is how email works. We keep them for as long as it takes to answer, and no longer than is useful. We use them for nothing else.

Children

Alvenera is not directed at children, and collects nothing from anybody, of any age.

Your rights over your data

There is no request to make of us, because we hold nothing about you. Deleting the app, or clearing its data through your operating system's settings, removes everything it recorded. We cannot retrieve, restore, correct or delete data we have never had a copy of. That is the exact reverse side of having no server: nobody to ask, and nothing for anybody to lose. Keep your own backups.

What this website keeps

This site sets no advertising cookie, no analytics, and no tracking identifier. It loads nothing from a third party: the typefaces are served from this domain rather than from Google Fonts. Your language is decided by the address you are visiting — /fr or /en — rather than by anything kept on your device.

There is one exception. If you use the launch-notification form, your browser is given a security cookie — an anti-forgery token. It stops another website from submitting that form on your behalf. It is strictly necessary for the form to work, it holds nothing about you, and it goes away when you close the browser.

If you ask to be notified

The form on the home page collects one thing: your email address, together with the language you were reading in, so that the message is written in the right one. Nothing else is kept — no name, no IP address, no record of where you came from.

That address is used for one message, on the day the app ships, and the list is deleted afterwards. It is not sold, not shared, not added to a newsletter, and no follow-ups are sent. Write to us at any time and you will be taken off it immediately.

Changes

If this policy changes, the effective date above changes with it. It cannot begin to describe data collection without the app itself changing first — and that change would be visible, because the only place your data exists is your device.

Contact

[email protected]  ·  Technor, Québec, Canada