Your plan stays local.

Last updated: October 27, 2026.

Controller and contact

Flamaris is operated by Syperience, an individual business registered in France under SIREN 105 508 899, based in Baillargues, France. Syperience is the controller for the Flamaris personal data described in this policy. Contact [email protected] about privacy or to exercise your rights. See the Legal Notice for publisher and hosting details.

Planning records

Your accounts, balances, transactions, projections, and other planning records are stored in your browser. Flamaris does not keep a server-side copy of your plan and cannot restore it from your subscription account.

You can export a plain JSON backup. If you configure Google Drive backup, Flamaris encrypts the backup in your browser before uploading it to the Drive folder you select. Flamaris does not receive the backup passphrase and cannot decrypt the file. A Drive or JSON restore adds the backup’s profiles next to the ones in your browser unless you choose to replace them, and the app shows what it will keep, add or remove before anything changes. With Drive backup on, a newer backup saved from another device updates this browser’s copy when this browser has no unsaved changes; otherwise you choose which version to keep.

Waitlist

If you join the waitlist, Flamaris stores your email address, signup and confirmation dates, and whether you volunteer for beta testing. Confirming your email permits launch announcements and, if selected, beta-testing invitations. Joining does not create an app account or grant access. Resend delivers the confirmation email.

Use the removal link in your confirmation email or any later waitlist message to unsubscribe and delete your waitlist record. Unconfirmed signups expire after 30 days and are removed when new signups are processed. You can also contact [email protected] about your information.

Account and billing data

Passwordless sign-in requires your email address and short-lived authentication records. Flamaris also keeps the subscription, entitlement, transaction, refund, and charity-accounting records needed to provide paid access, prevent duplicate payments, reconcile Paddle events, and support the service. These records do not contain your planning data or card number.

Paddle is Flamaris’s merchant of record. Paddle handles checkout, applicable tax, invoices, payment details, subscription management, and payment or refund processing under Paddle’s own privacy terms. Flamaris receives the customer, transaction, subscription, and adjustment information required to reconcile access and accounting.

Tax-jurisdiction requests

When a signed-in user explicitly requests support for an unsupported tax jurisdiction, Flamaris stores the account identifier, country code, optional US state code, and request timestamps. It does not send the user’s residency timeline, income, balances, or other planning records with the request. The request is used only to measure demand for future model coverage.

You can undo a jurisdiction request in the app. The record is also deleted when its account is deleted, or you can ask [email protected] to remove it.

Feedback

When you send feedback with the support form on the site or the feedback button in the app, Flamaris stores the message, its type (bug, idea, question, or other), the page path it was sent from, your browser’s user-agent string, and when it was sent. From the site, your email address is stored only if you enter one. From the app, the feedback is linked to your account and its email address, and includes the app version. Feedback never includes your planning records. Each message is forwarded by email, through Resend, to Flamaris support so it can be answered.

Feedback is kept for 24 months, then deleted. Feedback sent from the app is also deleted when its account is deleted. You can ask [email protected] to delete it sooner.

Supported connections

When you use a supported account connection, Flamaris’s servers forward each request to the provider using the credential or token you supply. Flamaris does not store that credential. Returned provider data is sent to your browser and imported into the local plan. Flamaris may use its own provider credentials for shared market, foreign-exchange, or reference-data services.

Once you configure a connection, Flamaris refreshes it automatically while the app is open and, where your browser supports it, in the installed app. Each refresh is a request to the provider using your credential. Remove the credential in Settings to stop automatic refreshes; you can also refresh manually at any time.

Do not configure a connection you do not want Flamaris and the named provider to process. Provider availability and privacy terms are separate from Flamaris.

Product analytics

Product analytics is off unless you opt in, in the privacy banner or in Settings → Privacy. When you opt in, Flamaris sends a limited set of first-party product events, currently page views, to PostHog. An event contains the page path, whether you are using the demo or a personal profile, a random identifier generated in your browser, and, if you joined through a preview invitation, that invitation identifier. Like any web request, it also exposes your IP address and browser details to PostHog.

Flamaris does not send account balances, transactions, credentials, profile names, or other planning records, and does not use session recording, autocapture, or advertising cookies. Opting out stops analytics collection and deletes the identifier from your browser. It does not stop error reports, described below.

Error reports

When the app or its servers hit an unexpected error, Flamaris sends a technical error report to PostHog Error Tracking so the error can be fixed. A report contains the type of error, its message with numbers, quoted text, email addresses, web addresses and access tokens removed, where in Flamaris’s code it happened, the page’s route without identifiers (for example /accounts/:id), and the app version. It contains no identifier, account, IP address, cookie or planning record, and nothing is stored on your device to send it. Reports from the app pass through Flamaris’s servers, which check them again, accept at most 30 an hour from one network address, and forward them under one shared identifier, without your IP address and without location lookup. Error reports are sent whether or not product analytics is on.

Operational data

Hosting, security, email, and support services may process limited network, delivery, and diagnostic metadata needed to operate and protect Flamaris. Flamaris does not use planning records for advertising and does not sell them.

Purposes, legal bases, and retention

Waitlist confirmation and launch or selected beta invitations rely on your consent. A confirmed waitlist record is kept until you remove it or the waitlist is closed; an unconfirmed signup expires after 30 days. Withdrawing from the waitlist does not affect processing that occurred before withdrawal.

Account authentication and delivery of paid features are processed to provide the service you request and perform the subscription contract. Billing, refund, and accounting records are also kept where needed to meet legal obligations, establish transaction history, resolve disputes, and reconcile Paddle records. Retention after an account or subscription ends is limited by those purposes and applicable statutory periods.

Feedback is processed on the basis of Flamaris’s legitimate interest in answering it and improving the service.

An explicit tax-jurisdiction request is processed to respond to the feature request and prioritize model coverage. It remains until you undo it, the associated account is deleted, or it is no longer needed for that purpose.

Security, abuse prevention, service reliability, limited diagnostics, and error reports rely on Flamaris’s legitimate interests in protecting and operating the service. Short-lived authentication, rate-limit, delivery, and diagnostic records are retained only as long as needed for those purposes. Error reports are kept in PostHog under the retention of Flamaris’s PostHog project; Flamaris has not set a shorter period. The server’s own log line for each error is kept for 3 days. Optional provider connections are processed to provide the connection you configure and refresh it for you. Product analytics relies on your consent, which you can withdraw at any time in Settings → Privacy.

Service providers and transfers

Cloudflare provides hosting and security, Resend delivers Flamaris email, Paddle independently handles checkout and payment processing as merchant of record, and PostHog processes error reports and, if you opt in, product analytics. Optional connections involve the provider you select. These providers may process limited personal data outside the European Economic Area under the transfer mechanisms described in their own terms and privacy notices.

Your choices

You can use manual entry instead of an optional connection, remove a connection’s credential to stop its automatic refreshes, turn product analytics on or off in Settings → Privacy (error reports are not affected), export or delete local browser data, remove a Google Drive backup from Drive, cancel renewal through Manage subscription, and ask about account or billing records by emailing [email protected].

Deleting browser storage or losing an unbacked-up device can permanently remove a local plan. Keep an export or encrypted Drive backup you can recover.

Depending on the processing and applicable law, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Email [email protected] to exercise a right. Flamaris may need to verify your identity before acting on a request.

You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).