Doheem privacy policy

Effective date: 11 November 2026

This policy explains what Doheem stores about you, why, where, for how long, and how you can see, take away or delete it. It exists in English, French, German, Luxembourgish, Dutch, Polish, Turkish, Italian and Spanish. If the versions differ, the English version prevails.

1. Who is responsible

Doheem is run by Serhan Kiymaz, the controller of your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your data, write to privacy@doheem.app. We answer within one month.

2. What we store and why

We store only what the app needs to work.

Your account

• Your email address and password (Firebase keeps only a scrambled form of the password), and when you created the account and last signed in. Why: to sign you in and to invite you to a household.

Your household (shared with the people in it)

• Each member's name, email address, salary (optional; not here if they keep it private), share and whether they are still a member.
• Entries: title, amount, category, date, who paid, whether it is shared, bills and repeating entries, and how each expense is paid (automatically or marked by hand), whether, when and by whom it was marked paid, and the planned amount when the real cost differs; amounts moved to the next month (and the entry they moved to), and when and by whom an entry was dropped for a month.
• Categories, the pay cycle, the currency, settle-up records, requests to send more for a month and decisions to keep a month's money as a buffer, household loans, and the household account's IBAN and account holder if you add them.
• An activity log of who changed what.
• Invitations: the invited person's email address and the name of the member who invited them, so the invited person sees who invited them before joining. An invitation is removed when they join, when it is cancelled or when their account is deleted.
• Your profile photo, if you add one: a small square picture, made on your phone without location or camera details. The household's members see it while you are a member.
• Why: to show the household's spending, work out who pays what, and settle up.

Between two members

• Loans between two members: both names and email addresses, the amount, date, reason, repayments and the repayment plan (planned repayments and their months). Only those two people see them. Why: to keep track of the loan.

Only you

• Your own payment details (IBAN and account holder), which the other members of your household can see, so they can pay you back.
• "Mine": your private entries and private loans.
• Your salary, if you choose "Only me" for it: then it is kept here, not in the household's data, and the other members see "Private" instead of your salary, income and pocket money. Earlier values are hidden from the household's activity log at that moment.
• Your devices: a push notification token, the phone's platform, app version, time zone, language and your notification settings. Why: to send you notifications.
• Your notification inbox.

On your phone

• Your sign-in session, your settings and a copy of names and figures, so the app opens quickly. The app lock PIN is kept in the phone's Keychain.

If you send feedback (Settings → About → Send feedback)

• Your email address, your message and what the app adds to it: the app version, iOS version, phone model and app language. Nothing about your household. Why: to answer you and fix problems.

We do not use your data for anything else.

3. Legal basis

We process this data to provide the app you asked to use (Article 6(1)(b) GDPR). We do not use it for marketing.

4. No ads, no tracking, no bank connection

Doheem shows no ads, uses no analytics or tracking tools, does not sell or share your data, and never connects to your bank. Amounts are what you and your household enter.

5. Where your data is stored and who processes it

• Google (Firebase) stores and processes the app's data for us:
  • the database (Cloud Firestore) in the EU (region eur3: Belgium and the Netherlands);
  • the server functions (Cloud Functions) and profile photos (Cloud Storage) in Belgium;
  • sign-in (Firebase Authentication) and push delivery (Firebase Cloud Messaging), which Google runs as global services. For data that leaves the EU, Google's data processing terms apply.
  • the website doheem.app (Firebase Hosting), also a global service. When you open one of its pages (such as this policy), Google processes your IP address, the page, the time and your browser details to deliver it and keep the service safe. The site sets no cookies and uses no analytics, and we don't receive these logs. The older address doheem.web.app forwards to doheem.app. The fair split calculator on doheem.app runs in your browser: what you type there is not sent to us or saved.
• Apple delivers push notifications to iPhones (Apple Push Notification service) and distributes the app.

They act on our instructions and may not use your data for their own purposes.

6. How long we keep it

• The activity log: 24 months, then it is deleted automatically.
• Your notification inbox: 90 days, then it is deleted automatically.
• Your profile photo: until you remove it, leave the household or delete your account; it is then deleted immediately.
• Feedback you send: until it has been dealt with, at most 12 months.
• Everything else: until you delete it, or until you delete your account.
• Backups: we take backups to recover from mistakes. They are kept on an encrypted disk, never in a cloud-sync folder, and deleted after 90 days. Profile photos are not in backups. A restore never brings back data of an account that has been deleted.

7. What happens when you delete your account

In the app: Settings → Delete account.

Deleted:

• your account and sign-in;
• Mine: your private entries and private loans;
• your payment details;
• your private salary;
• your profile photo, in every household;
• your devices, notification inbox and personal settings;
• your email address in your households, including in the activity log, where your name is shown instead.

Stays with your household, because it is part of the shared history the other members rely on:

• the entries you added, under your name;
• your name, share and salary for past months, so earlier figures stay correct.

Loans with another member stay for that member, as their record, including your name and email address.

If you are the last member of a household, nobody could reach it again, so the household and everything in it are deleted too.

8. Your rights

You have the right to access your data, to take it with you, to correct it, to have it deleted, to restrict or object to its processing, and to complain to a data protection authority. In Luxembourg that is the Commission nationale pour la protection des données (CNPD, cnpd.lu).

The quickest ways:

• Access and take it with you: Settings → Export my data gives you a file with everything you can see in the app.
• Correct: edit it in the app.
• Delete: Settings → Delete account.
• For anything else, write to privacy@doheem.app.

9. The Android waitlist

On doheem.app you can ask to be told when Doheem is available on Android.

• What we store: your email address, the language of the page, and when you gave your consent (and to which wording).
• Why and legal basis: to send you one email when Doheem is on Android, based on your consent (the checkbox). We use the address for nothing else and never share it.
• Where: in the EU (Cloud Firestore, region eur3), written only by our server function; no app or browser can read it.
• How long: until we have sent that email, then the list is deleted; at the latest after 24 months, when it is deleted automatically.
• Withdraw your consent at any time: use "Remove my email" on doheem.app, the link in the email, or write to privacy@doheem.app.
• Abuse protection: to limit automated sign-ups, we count sign-ups per IP address for one hour. We keep only a scrambled form of the address that can't be turned back into it, deleted after 24 hours.

10. Children

Doheem is not intended for anyone under 16.

11. Changes to this policy

If this policy changes, we update the effective date above and announce important changes in the app.