Privacy Policy

Last updated: March 2026

Data controller

Mathieu Piton
Sole proprietor (auto-entrepreneur)
Email: contact@fournil.app

As data controller, Mathieu Piton determines the purposes and means of processing your personal data in accordance with the General Data Protection Regulation (GDPR).

Data collected

When you use Fournil, we collect the following categories of data:

  • Account data: name, email address, bakery name, country
  • Business data: recipes, stock, sales, margins (data specific to your business)
  • Cookies: authentication session cookie (see Cookies section)

Fournil does not collect IP addresses, browsing data or usage data for analytics purposes. Our hosting providers (Supabase, Hetzner) may record technical logs as part of their normal operations.

Purposes of processing

Your personal data is processed for the following purposes:

  • Service delivery: account creation and management, access to application features
  • Communication: sending information about updates and new features
  • Support: handling your support requests and complaints
  • Security: detecting and preventing fraudulent or abusive use

Legal basis

The processing of your data is based on the following legal grounds under Article 6 of the GDPR:

  • Performance of a contract (Art. 6.1.b): processing necessary to provide the service you have subscribed to
  • Consent (Art. 6.1.a): for marketing communications and non-essential cookies
  • Legitimate interests (Art. 6.1.f): for platform security and service improvement
  • Legal obligation (Art. 6.1.c): for applicable accounting and tax obligations

Data retention

Your data is retained for the following periods:

  • Active account data: for the duration of your subscription
  • Data after termination: 3 years from the end of the contract for legal obligations
  • Billing data: 10 years in accordance with legal accounting obligations
  • Connection logs: 12 months in accordance with legal requirements
  • Cookies: maximum 13 months

Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15): obtain a copy of your personal data
  • Right to rectification (Art. 16): correct inaccurate or incomplete data
  • Right to erasure (Art. 17): request deletion of your data under certain conditions
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format
  • Right to object (Art. 21): object to the processing of your data for certain purposes
  • Right to restriction (Art. 18): request restriction of processing in certain cases

To exercise your rights, contact us at contact@fournil.app. We will respond within a maximum of 30 days.

Cookies and similar technologies

Fournil uses a single cookie to ensure the service works:

  • Authentication cookie: contains your Supabase Auth session token (required to stay logged in). This cookie is essential for the application to function and cannot be disabled.

Your language and theme preferences are stored locally in your browser (localStorage) and are not transmitted to our servers. Fournil does not use any analytics or advertising tracking cookies.

Contact

For any questions about the protection of your personal data or to exercise your rights, you can contact us:

If you believe your rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).