Privacy Policy

Last updated : novembre 2026 · Cahier de Bord Financier

1. Who we are

Cahier de Bord Financier (the “app”) is published by ADH Digital, Yaoundé, Cameroun. For any question about your data, contact adhdigital@cahierdebordfinancier.com.

In short. Your financial data is stored in a Google Sheets workbook in your own Google Drive. The app cannot access any other file in your Drive. We do not sell your data, show no advertising, and do not use your data to train AI models. You can delete your workspace and revoke access at any time.

2. Data we process

2.1 Your Google account (sign-in)

When you sign in with Google we receive your Google identifier, name, email address and profile picture. We use them to sign you in, to show your name to other members of your workspace and to manage access rights.

2.2 Google Drive and Google Sheets: what the app reads and writes

The owner of a workspace authorizes the app to use the Google scope https://www.googleapis.com/auth/drive.file. This permission is limited to files created (or opened) by the app: it lets the app create the “Cahier de Bord” workbook in your Drive and then read and write it. The app cannot see or read any other file in your Google Drive.

The workbook contains what you and your team enter: transactions (sales, expenses), customers and suppliers (names, phone numbers, addresses), invoices, payroll and employees, savings goals, investments and business settings. This data stays in your Google account; we do not keep a lasting copy. It passes through our servers and is kept temporarily in memory (cache) so the app stays fast and synchronized in real time; the cache is erased when the server stops or when the workspace is deleted.

2.3 Owner access token

So that your team can use the workbook without access to your Drive, we store the owner’s Google refresh token, encrypted (AES-256-GCM). It is deleted, and access is revoked with Google, when you delete your workspace.

2.4 Team and invitations

The email addresses of people you invite and their role (viewer, contributor, editor) are stored to enforce access rights.

2.5 Shared invoices

When you send an invoice by link, the PDF is stored on our servers behind a secret, unguessable link. It is kept for 90 days and then deleted; anyone who has the link can view it.

2.6 Subscription and payments

To activate a paid plan we record the plan, duration, amount, a payment reference, and the Mobile Money phone number and transaction reference you provide. These records are kept for as long as needed for our accounting and legal obligations.

2.7 Cookies, local storage and logs

We only use strictly necessary cookies: the sign-in session and a temporary token (10 minutes) during Google sign-in, both protected and not readable by scripts. There are no advertising cookies and no third-party analytics. Your browser also keeps on your device a local copy of your data, your preferences (theme, colors) and pending entries, for offline mode. Our host (Contabo) may keep standard technical logs (for example IP address and connection time).

2.8 Subscription expiry reminders

To keep you from losing your subscription by oversight, we send reminders (7 days before, 3 days before, the day before, then during the grace period). They are sent by email to your Google account address (you can switch them off with a link in every email or in the app, Subscription tab), and by WhatsApp only if you enter your number and enable this option: your number is then used only for these reminders, through the official WhatsApp Business API or, failing that, a message sent manually by our team. If you disable WhatsApp, your number is erased. We keep a log of reminders sent (date, type, channel, result).

2.9 Backups

So that accounts and subscriptions are never lost, we regularly back up, in encrypted form, the account and subscription information we keep (accounts, workspaces, subscriptions, payment orders, reminder preferences). The content of your Google Sheets workbook is not part of it. Backups are kept on the server, with le serveur de l’éditeur, and may be emailed in encrypted form to the administrator; they are kept on a rolling basis (about 30 days).

3. Why we use this data

To sign you in and secure your workspace;
To store, display and synchronize your data in your Google Sheets workbook;
To manage the team, access rights, plans and payments;
To contact you about support or account matters.

We do not use your data for any other purpose, we do not sell it, we do no advertising profiling and we do not use it to train AI models.

4. Google user data: Limited Use

Cahier de Bord Financier’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, for information received from Google APIs:

we use it only to provide and improve the user-facing features of the app;
we transfer it to others only to provide those features, to comply with the law, or with your consent;
we do not use it for advertising, including personalized advertising;
no human on our team reads your data unless you give explicit consent, it is needed for security or abuse investigation, or the law requires it.

6. Retention and deletion

Delete your workspace: in the app, Settings › My data › Delete my workspace. We revoke access with Google and erase the token, invitations, invoice links and workspace information. Your Google Sheets workbook stays in your Drive: it is yours to keep or delete.
Delete your account: Settings › My data › Delete my account, or by email to adhdigital@cahierdebordfinancier.com.
Revoke access at any time from your Google account: myaccount.google.com/permissions.
Invoices shared by link are deleted automatically after 90 days; payment records are kept as required by our legal obligations.
Deleting your workspace also erases your WhatsApp number and reminder preferences; encrypted backups that still contain this information expire on a rolling basis (about 30 days).

7. Security

Encrypted connections (HTTPS), Google tokens encrypted at rest, protected sessions, role-based access control, access limited to a single file in your Drive. No security is absolute: if you notice a problem, write to adhdigital@cahierdebordfinancier.com.

8. Your rights

You may request access to your personal data, its correction or deletion, or object to its processing, in accordance with applicable law. Write to adhdigital@cahierdebordfinancier.com; we reply within a reasonable time.

9. Children

The app is intended for businesses and is not directed to children.

10. Changes

We may update this policy; the date at the top is then changed and important changes are announced in the app.

11. Contact

ADH Digital, Yaoundé, Cameroun · adhdigital@cahierdebordfinancier.com