Privacy notice
Updated 8 October 2026.
Controller and contact
Sascha Hoffmann, sole proprietor, Matternstraße 19, 10249 Berlin, Germany, is responsible for Tablumo’s data processing. For privacy requests and support: sascha@the-autopilot.com.
Account and shared-expense data
We process your email address, account identifier, sign-in information, display name and setup progress to provide your account. You can sign in using an email link or an existing password. Supabase manages password verification; Tablumo does not store passwords in its application database. Groups contain participants, expenses, dates, amounts, shares, repayments, invitations and a change history. Group members can access their group’s records. An invitation can bind a placeholder to a verified email using a hash. We do not connect bank accounts or execute payments.
The legal basis for providing requested account and group features is Article 6(1)(b) GDPR. Security, abuse prevention and maintaining consistent shared records rely on our legitimate interests under Article 6(1)(f). Where applicable, legal obligations may require processing under Article 6(1)(c). Do not add sensitive information or other people’s data without an appropriate basis.
ChatGPT connection
When you authorize Tablumo in ChatGPT, OpenAI can use authenticated tools to read and change your authorized Tablumo data. Relevant group information is returned to support your request and shown in the embedded interface. View context includes the selected group, view and currency. Tablumo does not receive your full ChatGPT conversation. OpenAI processes information under its own privacy policy. Disconnecting ChatGPT removes access, not your Tablumo account.
Product measurements
We record account activation, active use, onboarding steps, interface openings, tool names, success or failure and execution duration to understand and improve reliability and usability. These measurements do not contain group names, expense amounts, descriptions, recipient emails, tool arguments or chat text. The operator dashboard is restricted. Our legitimate interest in operating and improving the service is the basis under Article 6(1)(f) GDPR; you can object by contacting us.
Product measurements are stored in the Tablumo database and viewed through the restricted operator dashboard. No events are forwarded to an external analytics service. No browser autocapture, advertising cookies or session replay is used.
Storage and deletion
Account data is kept while your account exists. Delete your account through Settings; this removes your profile, sign-in account and group access. Local account-linked analytics are deleted with your account. Remaining detailed analytics in the Tablumo database are removed by a daily cleanup after 90 days.
Shared amounts remain for other members under “Deleted person”; structured account and author links are removed. Group ownership passes to another active member. Groups without another active account are deleted. These records are retained to preserve other participants’ shared ledger and legitimate claims; contact us to request further review. Names in free-text descriptions are not automatically detected or erased. Backups and provider operational logs are subject to their separate retention and restore cycles; a live deletion is not an immediate deletion from every backup.
Providers and international transfers
We use Supabase for database and authentication, Vercel for hosting, Resend for sign-in email. These providers receive the information necessary for their functions. Hosting, email delivery and security logs can include IP addresses, technical request information and delivery metadata. Not every provider processes all data exclusively in the EU.
Provider agreements, subprocessors and any transfers outside the EEA must be reviewed and covered by the applicable safeguards, such as standard contractual clauses or an applicable adequacy decision. Completion of that operator review remains required before public launch. Provider privacy information: Supabase, Vercel, Resend.
Cookies and browser storage
Essential cookies maintain your sign-in session. Your theme preference is stored locally. The explicitly labelled demo stores its sample ledger in your browser. You can clear these through your browser settings. No advertising tracking is implemented.
Your rights
Where applicable, you have rights to access, correction, erasure, restriction and data portability, and to object to processing based on legitimate interests. You may contact us at the address above; we may need to verify your identity. You can complain to a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. Deletion rights can be limited where other people’s rights or legal obligations require retaining information.