Inqubomgomo Yobumfihlo
Indlela i-Cashfulness eqoqa, esebenzisa, futhi ivikela ngayo i-personal data yakho ngaphansi kwe-EU GDPR ne-Italian Privacy Code.
Le Nqubomgomo Yobumfihlo ichaza indlela i-Vittorio Giusti srl (kulokhu ebizwa ngokuthi “Cashfulness”, “thina”, “Data Controller”) eqoqa, esebenzisa, futhi ivikela ngayo i-personal data yabasebenzisi benkonzo ye-Cashfulness (iwebhusayithi cashfulness.com ne-application ye-mobile/desktop), ngaphansi kwe-Regulation (EU) 2016/679 (“GDPR”) ne-Italian Legislative Decree namba 196/2003 njengoba ichitshiyelwe (“Italian Privacy Code”).
Uma ufuna ifilosofi yethu yobumfihlo ngendlela yendaba (ukuthi kungani senze izinqumo ezithile), bheka ikhasi le-/privacy-radicale. Lo mqulu ungu-isaziso esisemthethweni.
1. I-Data Controller
- Igama lenkampani
- Vittorio Giusti srl
- Ihhovisi elibhalisiwe
- Via del Campisano 520, 55054 Massarosa (LU), Italiya
- I-VAT / Tax ID
- 12122090967
- I-imeyili eqinisekisiwe (PEC)
- vittoriogiusti.com@pec.it
- I-imeyili yamalungelo e-GDPR
- privacy@cashfulness.com
- Ummeleli osemthethweni
- UVittorio Giusti, umnikazi kanye nomqondisi oyedwa
I-Vittorio Giusti srl ingumnikazi we-trademark ethi “Cashfulness” (i-EUIPO registration namba 019297195).
I-Data Protection Officer (DPO): ayiqokiwe, njengoba i-Vittorio Giusti srl ingaphansi kwezimo ezidingwa ukuthi zibe ne-DPO ngokusho kwe-Article 37 ye-GDPR (akuyona i-public authority, futhi imisebenzi yayo emikhulu ayihlanganisi ukucutshungulwa okukhulu kwedatha ebucayi).
2. Izincazelo ezisheshayo
- Umsebenzisi
- umuntu obhalisela inkonzo ye-Cashfulness.
- Inkonzo
- iwebhusayithi
cashfulness.comne-application ye-Cashfulness ye-mobile (iOS, Android) ne-desktop (Windows, macOS). - I-Personal data
- noma iyiphi ulwazi olumayelana nomuntu ohlonziwe noma ongahlonzwa (Art. 4.1 GDPR).
- Ukucutshungulwa (Processing)
- noma yisiphi isenzo esenziwa ku-personal data (ukuqoqa, ukurekhoda, ukugcina, ukucutshungulwa, ukususa, njll.).
- I-Nickname
- igama elizenzelwe elikhethwa ngokukhululekile umsebenzisi ngesikhathi sokubhalisa; alihlonzi umuntu wangempela.
3. Izigaba zedatha ecutshungulwayo
3.1. Idatha yokuhlonza (okuncane)
- I-imeyili (kungaba ne-pseudonymous futhi, isb.
aurora.at.night@protonmail.com) - I-Nickname (igama elizenzelwe, kungaba ngokuphakama — isb. “Captain”, “Sail”, njll.)
- I-Password (igcinwa i-encrypted, ayilokothi ibonakale ngokusobala)
Asiceli noma sicutshungulwe: igama lokuqala, isibongo, i-tax ID, usuku lokuzalwa, ikheli, inombolo yocingo, ubulili, umqulu wobunikazi.
3.2. Idatha yokuphepha (ithebula `login_history`)
Ngayo yonke i-sign-in entsha, sirekhoda:
- Ikheli le-IP lesizini
- I-User agent yebrawuza/i-app
- Ulwazi ngedivayisi (i-operating system, uhlobo lwedivayisi uma lutholakala)
- Usuku nesikhathi sesizini
Le datha isetshenziselwa kuphela ukuphepha kwe-akhawunti (ukubona ukungena okusolisayo, ukulwa nokusetshenziswa kabi). Iqoqwa njalo futhi ayiphathelene ne-opt-out ye-Improvement Programme (bheka §3.5).
3.3. Idatha ye-accounting
- Ama-Workspace (“isikhala se-accounting”) adalwe umsebenzisi, kanye ne-chart of accounts yawo
- Ama-Transaction arekhodwe umsebenzisi ngendlela ye-double-entry
- Amabhalansi nezibalo ezitholakala kuwo (inani elingasele, i-income statement, njll.)
- Izigaba nama-budget adalwe umsebenzisi
Le datha ihlala ku-database yethu ekude (i-Supabase, amaseva aseYurophu) ehlotshaniswa ne-nickname ne-imeyili yomsebenzisi. Ngokuklama, ayihlanganisi imininingwane yokuhlonza umuntu wangempela, ngaphandle uma umsebenzisi ezifaka ngokuzithandela (isb. amagama e-akhawunti afaka isibongo — isenzo esingakhuthazwa, bheka i-/privacy-radicale).
3.4. Amadokhumenti alayishiwe (i-end-to-end encryption)
- Amafayela alayishwe umsebenzisi (izitatimende zebhange, amabhili, izinkontileka, ama-insurance policy, njll.)
Okuqukethwe kwala mafayela kuyi-end-to-end encrypted kudivayisi yomsebenzisi ngaphambi kokuthunyelwa, ngokhiye owakhiwe kudivayisi futhi ovikelwe yikhodi yamadokhumenti (ehlukile kuphasiwedi ye-akhawunti); amagama angu-24 okubuyisela (i-BIP39 seed) ayikhophi yesipele yalowo khiye. Ukhiye ongabethelwanga awulokothi usuke kudivayisi: kuseva sigcina kuphela inguqulo yawo ebethelwe, futhi kokuqukethwe emadokhumentini sibona kuphela amabhulokhi we-digital noise. Kodwa-ke, ukuze kube nokusesha nokuhlela, ulwazi umsebenzisi aluxhumanisa nefayela luhlala lufundeka: isihloko, amanothi, usuku, uhlobo nosayizi, imininingwane yeziqinisekiso nemigomo yomshwalense, kanye nokuxhumana nama-transaction.
3.5. Amarekhodi okusebenzisa anegama mbumbulu, ukuze uhlelo lusebenze futhi luthuthuke (Uhlelo Lokuthuthukisa, lungacishwa)
Ukuze sithuthukise i-app, silinganisa:
- Amasizini (ukuvulwa kwe-app, ubude besikhathi)
- Ukusetshenziswa kwezici (yiziphi izigaba ezisetshenziswayo, kanjani njalo)
- Amaphutha nokusebenza (ukuwa kwe-app, izikhathi zokuphendula)
- I-operating system yedivayisi (ukuze sinikeze isibaluleko nokubandakanyeka kwabahloli be-beta)
Le datha inikwa igama mbumbulu ngesikhathi iqoqwa futhi ngokujwayelekile ihlaziywa ngendlela ehlanganisiwe (isigaba 4.5 se-GDPR). Ihlala kumaseva ethu ase-Yurophu e-Supabase: ayikho insizakalo yenkampani yangaphandle (Google Analytics, Mixpanel, Amplitude, Sentry, Firebase Analytics, njll.).
Ukuxhumana kobuchwepheshe ne-akhawunti kusadingeka, futhi ezimweni ezimbalwa umuntu weqembu lethu angabuka idatha yokusebenzisa ephathelene ne-akhawunti eyodwa. Kwenzeka ngenxa yezinhloso ezine, zonke ezixhumene nokusebenza nokuthuthukiswa kwesevisi: (a) ukuhlonipha ukwenqaba komsebenzisi ngamunye (ukuze siyeke ukuqoqa idatha ye-akhawunti yakho kumele sazi ukuthi iyiphi eyakho); (b) ukukala ukumbozeka ngesistimu yokusebenza (ukubaluleka kwabahloli be-beta nokusekelwa kwezinkundla); (c) ukuphendula izicelo zakho zosizo, lapho ukwazi ukuthi yiziphi izici owazisebenzisa nokuthi yiziphi amaphutha owahlangabezana nawo kuvame ukuba yiyona ndlela kuphela yokuqonda inkinga; (d) ukuhlonza izinkinga ezithinta abantu abambalwa, ezingabonakali ezinombolweni ezihlanganisiwe ngokwemvelo yazo.
Ngaphandle kwalezi zinhloso asiyisebenzisi le datha: akukho ukwakha iphrofayela yezentengiselwano, akukho ukukhangisa, akukho izinqumo ezizenzakalelayo ngawe, akukho ukudayisa noma ukwabelana nabanye. Idatha yokusebenzisa ayithinti inani olikhokhayo noma imibandela esikunikeza yona, futhi ayisetshenziselwa ukwakha amaphrofayela okuziphatha okumaketha.
Ungakuvala ukuqoqwa noma nini kuzilungiselelo zohlelo, ngaphansi kwe-“Uhlelo Lokuthuthukisa”.
Ngaphambi kokubhalisa. Kusukela ekuqaleni kokuqala kuze kube ukungena kokuqala, uhlelo lubala ngaphandle kokwazi umuntu ukuthi ukufakwa okusha kufinyelela kuziphi izinyathelo (ukuvula, ukwamukelwa, ukungena, ukubhalisa, ukuqinisekiswa kwe-imeyili). Kuseva kufika kuphela igama lesinyathelo, isistimu yokusebenza nenguqulo yohlelo: akukho akhawunti, akukho isihlonzi sedivayisi, akukho kheli le-IP eligciniwe. Izinombolo zihlanganiswa ngosuku, isinyathelo ngasinye sibalwa kanye kuphela, futhi ukubala kuyama ekungeneni kokuqala. Lena idatha engaziwa engenakuxhunyaniswa nomuntu; yingakho ingaxhomekile ku-Uhlelo Lokuthuthukisa, olungekho ngaphambi kokuthi kwakhiwe i-akhawunti.
3.6. Idatha yokubhalisa kuncwadi lwezindaba nasohlwini lokulinda (kuphela uma ukhetha)
- I-imeyili + igama/i-pseudonym engekho phoqelekile
Icutshungulwa kuphela uma ukhetha ngokwakho ukubhalisa. Bheka u-§5 mayelana nensizakalo yenkampani yangaphandle eyigcinayo (ActiveCampaign). Ngo-hlu lokulinda ukwethulwa sigcina futhi umugqa kumadathabhesi ethu aseYurophu — i-imeyili, ulimi nosuku — ngesizathu esisodwa: ukwazi ukuthi bangaki kwababhalisile abadala i-akhawunti ngemuva kwalokho. Akukho okunye, futhi akukho kwakhiwa kwephrofayela. Ukususwa ucela ngokubhalela ku-privacy@cashfulness.com, ngaphandle kwesixhumanisi sokuyeka ukubhalisa kuwo wonke ama-imeyili.
3.7. Idatha yokukhokha
Ayicutshungulwa ngqo yi-Cashfulness. Izinkokhelo ze-subscription zidlula ku:
- Apple App Store (ye-subscription ethengwe ku-iOS)
- Google Play (ye-subscription ethengwe ku-Android)
- Stripe, ngokusebenzisa i-Link (ye-subscription ethengwe ngewebhusayithi)
I-Apple App Store ne-Google Play zisebenza njenge-merchant of record: zicutshungulwa igama lomsebenzisi, ikheli, ikhadi lesikweletu, i-IBAN, futhi ziyimpendulo yokukhipha izitatimende noma amareseti asemthethweni kubasebenzisi bokugcina ngokwenqubomgomo yazo kanye nemithetho yezwe ngalinye. Kule zinkonzo ezimbili, i-Cashfulness ithola kuphela inzuzo ye-net ne-identifier engacaci ye-subscription (isb. sub_abc123): asilokothi sibone igama lekhasimende, ikheli, i-tax ID, ikhadi lesikweletu, i-IBAN.
Nakuwebhusayithi, umthengisi akusithi. Ye-subscription ethengwe ngewebhusayithi, umthengisi yi-Link (Sold through Link, LLC, inkampani yeqembu le-Stripe), esebenza njenge-merchant of record: iqoqa inkokhelo, ibala futhi ikhokhe intela yezwe lekhasimende, ikhipha amareseti nezitatimende, futhi iphatha ukubuyiselwa kwemali nezingxabano. I-Link ne-Stripe zicubungula le datha njengomthengisi, ngokwenqubomgomo yazo yobumfihlo. Ukuze kubalwe intela, i-Stripe icela igama nekheli lokukhokhisa: i-Vittorio Giusti srl iyakubona lokhu ku-dashboard ye-Stripe, kanye nekheli le-imeyili, uhlobo lwekhadi nezinombolo ezine zokugcina, umphumela wokukhokha kanye ne-identifier yekhasimende, kodwa igama nekheli akulokothi kungene ku-database ye-app. Asilokothi sithole inombolo egcwele yekhadi lesikweletu noma idatha yokuphepha (i-CVV). Ukuze kuxhunyaniswe inkokhelo ne-akhawunti, i-Cashfulness ithumela ku-Stripe ikheli le-imeyili ne-identifier yomsebenzisi; ngokuthola inkokhelo, sigcina ukuxhumana phakathi komsebenzisi ne-identifier yekhasimende ye-Stripe.
Idatha yokukhokha ye-channel ye-web esiyibona ku-dashboard ye-Stripe icutshungulwa yi-Vittorio Giusti srl ukuze kwenziwe inkontileka (Art. 6.1.b GDPR) nokuze kuhloniphwe izibopho ze-accounting ezihlobene nesitatimende sanyanga zonke esiya ku-Link (Art. 6.1.c GDPR); bheka §4 ne-§7.
3.8. Idatha yezaziso ezisheshayo (push) (ku-iPhone naku-Android kuphela, kuphela uma uzivula)
Uma uvula izaziso ezisheshayo, sicubungula:
- ithokheni ye-push yedivayisi yakho, ikhodi yobuchwepheshe ekhishwa yi-Google (Firebase Cloud Messaging) futhi, ku-iPhone, yi-Apple, esetshenziselwa ukuletha isaziso kuleyo divayisi kuphela hhayi kwenye;
- ipulatifomu nesihlonzi sedivayisi, okukhethwa kwakho kwezaziso kanye nolimi ofuna ukuzithola ngalo;
- umbhalo wezaziso esikuthumelela zona. Ezexwayiso ze-accounting ozisetha wena (isibonelo “ibhalansi engaphansi komkhawulo”) umbhalo ungaqukatha igama le-akhawunti, ibhalansi noma umkhawulo owukhethile.
Amathokheni nolayini wokuthumela kuhlala kumaseva ethu e-Supabase eYurophu. Ukulethwa kudlula ku-Google Firebase Cloud Messaging futhi, ku-iPhone, ku-Apple Push Notification service: zombili zibona ithokheni, isihloko nombhalo wesaziso (bheka §5). Ku-Mac, ku-Windows naku-Linux azikho izaziso ezisheshayo: izikhumbuzi zenziwa kudivayisi futhi aziphumi ku-app.
Isisekelo esisemthethweni: ukwenziwa kwenkontileka (Art. 6.1.b GDPR), ngoba izaziso uzicela wena ngokuzivula. Ungazivala noma nini kuzilungiselelo ze-app noma ze-operating system; ithokheni ivalwa futhi isuswe kanye ne-akhawunti.
3.9. Idatha yosizo
Uma usibhalela ku-info@, ku-support@ noma ku-beta@cashfulness.com, noma uthumela umbiko usuka ku-app, sicubungula lokho okuthumelayo: umbhalo womyalezo, ikheli lakho le-imeyili, i-nickname, ipulatifomu nenguqulo ye-app, kanye nanoma yini enamathiselwe. Indlela esikusebenzisa ngayo, nangamathuluzi amaphi, kubhalwe ku-§5.1.
4. Izinjongo zokucutshungulwa
I-personal data icutshungulwa ngezinjongo ezilandelayo:
| # | Injongo | Izigaba zedatha ezibandakanyekayo | Isisekelo esisemthethweni |
|---|---|---|---|
| 1 | Ukulethwa kwenkonzo (ukubhalisa, i-authentication, ukuvumelanisa idatha ye-accounting kuzo zonke izinsizakusebenza) | 3.1, 3.3, 3.4 | Ukwenziwa kwenkontileka (Art. 6.1.b GDPR) |
| 2 | Ukuphepha kwe-akhawunti (ukubona ukungena okusolisayo, ukulwa nokusetshenziswa kabi) | 3.2 | Uzuzo olusemthethweni (Art. 6.1.f GDPR) |
| 3 | Ukuthuthukiswa komkhiqizo (ama-log e-pseudonymized ngesikhathi sokuqoqwa, ahlaziywa ngendlela ehlanganisiwe; isixhumanisi se-akhawunti sisebenzela i-opt-out nokubandakanyeka kwe-operating system kuphela) | 3.5 | Uzuzo olusemthethweni (Art. 6.1.f GDPR), lungabuyiswa nge-opt-out |
| 4 | Ukuxhumana kwenkonzo (ukuqinisekiswa kwe-imeyili, ukusetha kabusha ipasiwedi, izaziso zokuphepha) kanye nezaziso ezisheshayo ezivulwa umsebenzisi (izikhumbuzi, izexwayiso ze-accounting) | 3.1, 3.8 | Ukwenziwa kwenkontileka (Art. 6.1.b GDPR) |
| 5 | I-newsletter yezemfundo namacebiso okusebenza (kuphela uma kukhethiwe) | 3.6 | Imvume ecacile (Art. 6.1.a GDPR), engabuyiswa |
| 6 | Ukuhloniphwa kwezibopho zomthetho (izicelo ezivela emagunyeni afanele noma kubaphathi) | 3.1, 3.2, 3.3 | Isibopho esisemthethweni (Art. 6.1.c GDPR) |
| 7 | Ukuhloniphwa kwentela ne-accounting ye-subscription ethengiswe ngewebhusayithi (isitatimende sanyanga zonke esiya ku-Link, ama-accounting entry, ukuqhathaniswa kwezinkokhelo) | 3.7 (idatha yokukhokha ye-channel ye-web) | Isibopho esisemthethweni (Art. 6.1.c GDPR) |
| 8 | Usizo: ukuphendula izicelo ezithunyelwe nge-imeyili noma zisuka ku-app, kuhlanganise nokuhlukaniswa kwezicelo nokulungiswa kwedrafti yempendulo ngethuluzi lobuhlakani bezobuchwepheshe (AI) (bheka §5.1) | 3.1, 3.9 | Ukwenziwa kwenkontileka (Art. 6.1.b GDPR) kubasebenzisi; uzuzo olusemthethweni (Art. 6.1.f GDPR) kwabasibhalela bengenayo i-akhawunti |
| 9 | Ama-imeyili okuqondisa ezinyathelweni zokuqala: ngokuya ngezinyathelo esezenziwe kuhlelo (i-imeyili eqinisekisiwe, isikhala esakhiwe, amabhalansi okuqala, okufakiwe kokuqala, ukuvulwa kokugcina) sithumela i-imeyili yosizo enemiyalelo namavidiyo esinyathelo esilandelayo. Asifundi amanani noma izincazelo, sibheka kuphela ukuthi isinyathelo senziwe yini. Okungenani i-imeyili eyodwa njalo ezinsukwini ezimbili, ngayinye kanye kuphela, futhi sigcina irekhodi lalezo ezithunyelwe ukuze zingaphindwa. | 3.1, 3.3, 3.5 | Uzuzo olusemthethweni (Art. 6.1.f GDPR); ukuphikisa noma nini ngesixhumanisi esingezansi kwe-imeyili ngayinye |
5. Izinkonzo zangaphandle (ama-external data processor)
Ukuze silethe inkonzo, sincike kubahlinzeki bangaphandle, abakhethwe ngenxa yokwethembeka nokuhambelana ne-GDPR. Bonke, ngaphandle kwe-Anthropic (bheka §5.1), basayine i-Data Processing Agreement (DPA) nathi ngaphansi kwe-Art. 28 GDPR.
| Inkonzo | Umsebenzi | Ikomkhulu | Amaseva angempela | Izivikelo zokudlulisa ngaphandle kwe-EU |
|---|---|---|---|---|
| Supabase (Supabase Inc.) | I-database + i-authentication yomsebenzisi | USA | Yurophu (eu-west) | DPA + SCC + Data Privacy Framework |
| Vercel (Vercel Inc.) | I-hosting ye-cashfulness.com | USA | Yurophu (Frankfurt) | DPA + SCC + Data Privacy Framework |
| Resend (Resend Inc.) | I-imeyili ye-transactional (ukuqinisekiswa, ukusetha kabusha ipasiwedi, izaziso) | USA | Yurophu (isifunda se-EU) | DPA + SCC + Data Privacy Framework |
| Google Workspace (Google Ireland Ltd) | Amabhokisi we-imeyili abantu (info@, support@, beta@, privacy@) | EU (Ireland) | USA + Yurophu | DPA + SCC + Data Privacy Framework |
| SiteGround (SiteGround Hosting Ltd) | i-DNS | EU (Bulgaria) | Yurophu | DPA (ukucutshungulwa phakathi kwe-EU) |
| ActiveCampaign | I-newsletter + ifomu le-beta signup | USA | USA | DPA + SCC + Data Privacy Framework |
| Apple App Store (Apple Inc.) | Izinkokhelo ze-subscription ze-iOS; ukulethwa kwezaziso ezisheshayo ku-iPhone nge-Apple Push Notification service (APNs) | USA | USA + Yurophu | Data Privacy Framework + imithetho ye-Apple |
| Google Play (Google LLC) | Izinkokhelo ze-subscription ze-Android | USA | USA + Yurophu | Data Privacy Framework + imithetho ye-Google |
| Google Firebase Cloud Messaging (Google LLC) | Ukulethwa kwezaziso ezisheshayo ku-Android naku-iPhone (ithokheni yedivayisi, isihloko nombhalo wesaziso) | USA | Inkonzo yomhlaba wonke (i-USA nezinye izindawo ze-Google), ngaphandle kwesifunda saseYurophu | Firebase Data Processing and Security Terms + SCC + Data Privacy Framework |
| Stripe ne-Link (Stripe Inc., Sold through Link, LLC) | Ukuthengiswa nezinkokhelo ze-subscription ze-web (umthengisi yi-Link) | USA | USA + Yurophu | DPA + SCC + Data Privacy Framework |
| Umami Cloud | I-analytics yesayithi ehlonipha ubumfihlo (akukho amakhukhi, akukho i-profiling) | USA | Yurophu (isifunda se-EU) | DPA + SCC + Data Privacy Framework |
| Anthropic (Anthropic Ireland Ltd) | Ithuluzi lobuhlakani bezobuchwepheshe (Claude) elisetshenziswa yithimba lethu ukuhlukanisa izicelo zosizo ezitholwa nge-imeyili nezisuka ku-app nokulungisa idrafti yempendulo, efundwa kabusha futhi ithunyelwe umuntu | EU (Ireland) | USA | Ayikho i-DPA: imithetho yokusetshenziswa ye-Anthropic yabasebenzisi ngabanye, ukusetshenziswa kokuqukethwe ukufundisa amamodeli kuvaliwe |
| Tailscale (Tailscale Inc.) | Uxhumano olubethelwe (encrypted) phakathi kwamaseva ethu neseva yomsizi we-AI e-Italiya. Inkonzo ayikwazi ukufunda okuqukethwe kwe-traffic: ibona kuphela idatha yoxhumano (amakheli, izikhathi, amavolumu) | Canada | Canada ne-USA (idatha yoxhumano kuphela) | DPA + SCC |
Asizisebenzisi izinhlelo zokulandelela ukuziphatha noma ze-commercial profiling: akukho Google Analytics, Firebase Analytics, Mixpanel, Amplitude, Sentry, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag. Ku-Firebase sisebenzisa kuphela inkonzo ye-Cloud Messaging, ukuletha izaziso ezisheshayo ozivula wena (bheka §3.8): ayikho enye ingxenye ye-Firebase efakiwe ku-app, futhi lokhu sikuhlola kuphakheji ehlanganisiwe ekukhishweni ngakunye.
5.1. Usizo namathuluzi obuhlakani bezobuchwepheshe
Izicelo zosizo. Izicelo ezifika ku-info@, ku-support@ naku-beta@cashfulness.com kanye nemibiko ethunyelwa isuka ku-app zifundwa umuntu wethimba lethu. Ukuzihlukanisa nokulungisa idrafti yokuqala yempendulo sisebenzisa i-Claude, ithuluzi lobuhlakani bezobuchwepheshe (AI) le-Anthropic: umbhalo wesicelo kanye, emibikweni esuka ku-app, i-nickname, ikheli le-imeyili, ipulatifomu, inguqulo ye-app kanye nanoma yini enamathiselwe kucutshungulwa yi-Anthropic e-United States of America. Siyisebenzisa nge-subscription yomuntu ngamunye, elawulwa yimithetho yokusetshenziswa ye-Anthropic yabasebenzisi ngabanye: asikho isivumelwano sokucubungula idatha (DPA) phakathi kwethu ne-Anthropic, futhi ezilungiselelweni ze-akhawunti sivale ukusetshenziswa kokuqukethwe ukufundisa amamodeli. Idrafti ihlale ifundwa kabusha, ilungiswe futhi ithunyelwe umuntu: ayikho impendulo ephuma ngokuzenzakalela. Sithutha lokhu kucutshungulwa sikuyisa kuseva ye-Vittorio Giusti srl e-Italiya: uma sekwenziwe, i-Anthropic ngeke isayithola le datha futhi sizobuyekeza le nqubomgomo.
Umsizi oku-app. I-app inomsizi ophendula imibuzo ngokusetshenziswa kwe-Cashfulness, otholakala ngokohlelo lwakho. Uma umbuza umbuzo, imodeli ithola umbuzo wakho, ulimi, imiyalezo yakamuva yengxoxo efanayo kanye nezingcaphuno ezimbalwa ezivela kumhlahlandlela. Ayitholi idatha yakho ye-accounting: ama-akhawunti, amabhalansi, ama-transaction namadokhumenti kuhlala ngaphandle. Imodeli isebenza kukhompyutha ye-Vittorio Giusti srl e-Italiya, efinyelelwa ngoxhumano olubethelwe oluhlinzekwa yi-Tailscale, engakwazi ukufunda okuqukethwe kwalo (bheka §5). Umbhalo wombuzo uthunyelwa njengoba uwubhala: ungafaki i-personal data ongafuni ukwabelana ngayo. Izingxoxo zigcinwa kumaseva ethu e-Supabase eYurophu futhi zisuswa kanye ne-akhawunti. Umsizi unikeza isiqondiso ngokusetshenziswa kwe-app, hhayi izeluleko zezimali, zentela noma zomthetho.
Ingxoxo (chat) yewebhusayithi. Iwindi lengxoxo elikuwebhusayithi cashfulness.com alixhunyiwe kunoma iyiphi inkonzo yobuhlakani bezobuchwepheshe futhi alithumeli idatha kwabanye. Uma siyivula, sizobuyekeza kuqala le nqubomgomo.
Asisebenzisi idatha yakho ukufundisa amamodeli obuhlakani bezobuchwepheshe, awethu noma awabanye, futhi asinikezi ama-dataset kubahlinzeki be-AI.
6. Izixhumanisi ze-affiliate nama-referral ezentengiselwano
I-Cashfulness ingabonisa izixhumanisi eziya emathubeni okonga anikezwa izinkampani zangaphandle, futhi i-Vittorio Giusti srl ingathola inkokhelo evela kulezo zinkampani uma umsebenzisi evula inkonzo (bheka Imigomo Nemibandela Yokusetshenziswa, isigaba esithi “Ama-referral nezixhumanisi ze-affiliate”).
Izixhumanisi zimile (static) futhi ziyafana kubo bonke abasebenzisi: azikhethwa futhi azihlelwa ngokwedatha ekhona ku-workspace, futhi ukuboniswa kwazo akuhlanganisi i-profiling ngomqondo we-Art. 4.4 GDPR noma izinqumo ezizenzakalelayo ngomqondo we-Art. 22 GDPR.
I-Cashfulness ayitholi enkampanini yangaphandle ulwazi oluvumela ukuthi ukuvulwa okukodwa kuxhunyaniswe nomsebenzisi ohlonziwe noma ongase ahlonzwe: noma yimuphi umbiko wenkokhelo wenziwa ngendlela ehlanganisiwe.
Ngesikhathi umsebenzisi ekhetha ukulandela isixhumanisi, uphuma emkhawulweni we-Cashfulness: kusukela lapho kuya phambili, ukucutshungulwa kwedatha yakhe kulawulwa yinqubomgomo yobumfihlo yesayithi okuyiwa kulo, i-Vittorio Giusti srl engenakho nhlobo ukulawula phezu kwayo. Isayithi okuyiwa kulo liyi-data controller ezimele. Noma yimaphi amakhukhi asethwe yisayithi okuyiwa kulo angamakhukhi angaphandle, angaphandle kwe-domain cashfulness.com (bheka Inqubomgomo Yamakhukhi).
7. Ukudluliselwa kwedatha ngaphandle kwe-EU
Abanye babahlinzeki bethu bayizinkampani ezisuselwa e-United States of America (bheka §5). Ukudluliselwa okunjalo kwenzeka ngezivikelo ezilandelayo:
- I-Standard Contractual Clauses (SCC) esayinwe ngaphansi kwe-Implementing Decision (EU) 2021/914.
- I-EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795), yabahlinzeki asebehlanganyele kuyo.
- Izinyathelo zobuchwepheshe ezengeziwe (i-encryption ngesikhathi sokudlulisa nasekugcinweni, ukuhlukaniswa kwedatha ezifundeni zaseYurophu uma zitholakala).
Umsebenzisi angacela ikhophi yezivikelo ezisetshenzisiwe ngokubhalela ku-privacy@cashfulness.com.
8. Izikhathi zokugcina
| Isigaba sedatha | Isikhathi sokugcina |
|---|---|
| I-akhawunti yomsebenzisi + idatha ye-accounting + amadokhumenti e-E2EE | Kuwo wonke impilo ye-akhawunti; ukususwa okuqinisekile ngaphakathi kwezinsuku ezingu-30 zesicelo (izinsuku ezingu-30 zivumela i-soft-delete engaphenduka izicelo ezingahlelekile) |
Ama-log okuphepha (login_history, i-IP, i-user agent) | Izinyanga ezingu-6 kusukela ngosuku lwesizini |
| Amarekhodi okusebenzisa anegama mbumbulu, ahlaziywe ngendlela ehlanganisiwe (Uhlelo Lokuthuthukisa) | Izinyanga ezingu-6 ezizulayo; ngesikhathi se-opt-out, siyeka ngokushesha ukuqoqa amasha |
| Amakhophi esipele azenzakalelayo (kuphela ku-Ultra plan): amafayela e-CSV acindezelwe, avikelwe yi-encryption at rest yomhlinzeki, hhayi i-end-to-end | angu-7 akamuva ku-workspace ngayinye, angadluli izinsuku ezingu-30 |
| Ama-export e-CSV acelwe ngumsebenzisi | asuswa ngemuva kwamahora angu-24; ilinki yokuwalanda isebenza imizuzu engu-15 |
| I-newsletter (uma ubhalisile) | Kuze kube ikhansela elicacile lomsebenzisi (isixhumanisi se-unsubscribe kuyo yonke i-imeyili) |
| Idatha ye-billing — izinsizakusebenza ze-Apple / Google | Akusebenzi: ye-subscription ethengwe ku-App Store noma ku-Google Play, i-Cashfulness ayikhiphi izitatimende noma amareseti asemthethweni kubasebenzisi bokugcina (bheka §3.7); lezi zikhishwa yi-Apple noma i-Google, ezisebenza njenge-merchant of record |
| Amadokhumenti e-accounting e-channel ye-web | Iminyaka engu-10 kusukela ngosuku lomqulu, njengoba kudingwa yi-Art. 2220 ye-Italian Civil Code yamarekhodi we-accounting: izitatimende zanyanga zonke zenkampani eziya ku-Link nemibiko ye-Stripe. Amareseti nezitatimende kumakhasimende kukhishwa futhi kugcinwe yi-Link (bheka §3.7) |
9. Amalungelo we-data subject
Ngaphansi kwe-Article 15–22 ye-GDPR, umsebenzisi unelungelo lokuthi:
- Athole ukufinyelela (Access) kudatha yomuntu emayelana naye (Art. 15)
- Ukulungisa (Rectification) idatha engalungile noma engaphelele (Art. 16)
- Ukususwa (Erasure) kwedatha (“ilungelo lokukhohlakala”, Art. 17)
- Ukukhawulelwa (Restriction) kokucutshungulwa (Art. 18)
- I-Portability yedatha ngendlela ehlelekile, efundeka ngomshini (Art. 20)
- Ukuphikisa (Objection) ekucutshungulweni okusekelwe kuzuzo olusemthethweni (Art. 21)
- Ukubuyisela (Withdrawal) imvume noma nini, kokucutshungulwa okusekelwe kwimvume (Art. 7.3)
- Ukukhalaza (Complaint) ku-Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): Piazza Venezia 11, 00187 Roma — ucingo +39 06 696771 — PEC protocollo@pec.gpdp.it — iwebhusayithi www.garanteprivacy.it
9.1. Indlela yokusebenzisa la malungelo
Ukusebenzisa noma yiliphi lamalungelo abalwe ngenhla, umsebenzisi angakwazi:
- Bhalela ku-
privacy@cashfulness.comukhombise ilungelo afuna ukulisebenzisa, i-imeyili ehlotshaniswe ne-akhawunti ye-Cashfulness, futhi — ye-ukususwa — noma iyiphi imiqinisekiso yokuthi bayazi ngokungabuyiswa kwamadokhumenti e-E2EE. - Yelungelo lokususwa (ukususwa okuphelele kwe-akhawunti): le sici itholakala ngqo ku-app, ngaphansi kwe-“Izilungiselelo → Ukuphathwa Kwe-akhawunti → Susa i-akhawunti”. Ukususwa okuqinisekile kwenzeka ngaphakathi kwezinsuku ezingu-30.
- Ukuvala i-Improvement Programme (i-opt-out): kusuka ku-“Izilungiselelo → Ukuphepha Nobumfihlo → Uhlelo Lokuthuthukisa” ku-app. Umphumela osheshayo.
Sizophendula ngaphakathi kwezinsuku ezingu-30 kusukela ngesicelo (kungeleleke izinsuku ezingu-60 ezengeziwe zezicelo ezinzima kakhulu, ngaphansi kwe-Art. 12.3 GDPR; umsebenzisi uzokwaziswa uma kunjalo).
10. Ukuphepha kwedatha
Sisebenzisa izinyathelo ezifanele zobuchwepheshe nezenhlangano ukuvikela idatha yomuntu:
- I-Encryption ngesikhathi sokudlulisa: konke ukuxhumana kusebenzisa i-HTTPS/TLS 1.3.
- I-Encryption ngesikhathi sokugcina: ama-database e-Supabase asebenzisa i-encryption-at-rest ejwayelekile yomhlinzeki.
- I-End-to-end encryption yamadokhumenti alayishwe umsebenzisi (bheka §3.4).
- I-authentication eqinile: amapasiwedi anezidingo eziphakeme; ukusekela i-biometric (Touch ID, Face ID) uma kutholakala kudivayisi.
- I-Row Level Security (RLS) kuwo wonke amathebula edatabase: umsebenzisi ngamunye ufinyelela kuphela kudatha yakhe.
- I-Access logging: ukulandelela ukungena ukubona ukungena okusolisayo (bheka §3.2).
- Izibuyekezo ezijwayelekile ze-software dependencies ukuze kuvalwe ukungenelela okwaziwayo.
Ayikho isistimu engaphephile ngo-100%. Uma kuke kwaba nokuphuliwa kwedatha yomuntu okuhlanganisa ingozi kubasebenzisi, sizokwazisa i-Italian Data Protection Authority ngaphakathi kwamahora angu-72 kusukela kufunyanwe (Art. 33 GDPR) futhi — uma ingozi iphakeme — sizowaziswa ngqo abasebenzisi abathintekile (Art. 34 GDPR).
11. Izingane
Inkonzo ye-Cashfulness ihlose abantu abaneminyaka engu-18 ubudala noma ngaphezulu (isilinganiso se-legal capacity ngaphansi komthetho wase-Italiya, Art. 2 ye-Italian Civil Code), noma iminyaka yokuba ngumuntu omdala ngokomthetho wezwe lomsebenzisi uma iphakeme ku-18.
Ngaphansi kwe-GDPR nge-Art. 2-quinquies ye-Italian Privacy Code, iminyaka esezingeni eliphansi yemvume ezimele yengane ekucutshungulweni kwedatha yomuntu iphansi (iminyaka engu-14 e-Italiya, iminyaka engu-16 njenge-EU default). Ye-Cashfulness, umkhawulo weminyaka wenkontileka ongu-18 yiwo osebenza ngempela, ngoba ubudlelwane nomsebenzisi bungobenkontileka (bheka Imigomo Nemibandela §4.1) futhi budinga i-legal capacity ephelele.
Asiqoqi ngamabomu idatha yezingane ezingaphansi kweminyaka engu-18. Uma sithola ukuthi kunee-akhawunti eyakhiwe yingane engenayo i-legal capacity edingekayo, sizoyisusa ngaphandle kokubambezela.
12. Izinguquko kule Nqubomgomo Yobumfihlo
Sizigcinela ilungelo lokushintsha le Nqubomgomo Yobumfihlo esikhathini esizayo, ngenxa yezibuyekezo zomthetho noma izinguquko zenkonzo. Izinguquko zishicilelwa kule khasi ngosuku olubuyekeziwe phezulu.
Ye-zinguquko ezinkulu ezithinta izinjongo zokucutshungulwa noma izisekelo ezisemthethweni, sizowazisa abasebenzisi abasebenzayo nge-imeyili okungenani izinsuku ezingu-30 ngaphambi kokuba izinguquko zisebenze, sibanikeze ithuba lokubuyekeza izimo ezintsha futhi, uma befuna, ukususa i-akhawunti ngaphambi kokuba isebenze.
Yini eshintshile enguqulweni 1.10. I-§4 ichaza ama-imeyili okuqondisa ezinyathelweni zokuqala (inhloso 9), angamiswa ngesixhumanisi esingezansi kwe-imeyili ngayinye.
Yini eshintshile enguqulweni 1.9. I-§3.5 ichaza ukubalwa okungaziwa kwezinyathelo ngaphambi kokubhalisa, okusisiza ukuthi siqonde ukuthi labo abalanda uhlelo bema kuphi.
Yini eshintshile enguqulweni 1.8. Ama-subscription athengwe kuwebhusayithi manje athengiswa yi-Link (Sold through Link, LLC, inkampani yeqembu le-Stripe), eba ngumthengisi esikhundleni se-Vittorio Giusti srl futhi ikhiphe amareseti nezitatimende: lokhu kuchazwe ku-§3.7, kuthebula lezinkonzo zangaphandle nasezikhathini zokugcina. Idatha yokukhokha esiyibonayo iyafana nangaphambili, futhi igama nekheli lokukhokhisa akungeni ku-database ye-app.
Yini eshintshile enguqulweni 1.7. Inguqulo 1.6 yayichaza amakhophi esipele azenzakalelayo e-Ultra plan njengabethelwe: angamafayela e-CSV acindezelwe, avikelwe yi-encryption at rest yomhlinzeki, hhayi nge-end-to-end encryption, futhi sigcina angu-7 akamuva ku-workspace ngayinye, angadluli izinsuku ezingu-30 (§8). Yayiphinde ithi ukhiye wamadokhumenti alayishiwe utholakala kuphasiwedi yomuntu siqu: empeleni wakhiwa kudivayisi futhi uvikelwe yikhodi yamadokhumenti, ehlukile kuphasiwedi ye-akhawunti, futhi isihloko, amanothi, usuku, uhlobo nosayizi wamafayela, imininingwane yeziqinisekiso nemigomo kanye nokuxhumana nama-transaction kuhlala kufundeka ukuze kusesheke futhi kuhleleke (§3.4). Ekugcineni, sengeze ku-§8 isikhathi sokugcinwa kwama-export e-CSV acelwe ngumsebenzisi. Ayikho inhloso noma isisekelo somthetho sokucubungula esishintshile.
Yini eshintshile enguqulweni 1.6. Silungise iphutha: inguqulo 1.5 yayibala i-Firebase phakathi kwezinkonzo ezingasetshenziswa, kanti i-app isebenzisa i-Firebase Cloud Messaging ezazisweni ezisheshayo ku-iPhone naku-Android, njengoba kuchazwe ku-§3.8. Sibuye samemezela i-Anthropic, ithuluzi ithimba lethu elisebenzisa kusukela ngo-18 Agasti 2026 ukuhlukanisa izicelo zosizo, i-Tailscale, uxhumano olubethelwe oluya kuseva yomsizi oku-app, kanye nendlela umsizi ngokwakhe asebenza ngayo (§5.1). Ayikho injongo noma isisekelo esisemthethweni sokucutshungulwa osekuchaziwe okushintshile.
13. Okokuxhumana
Ye-noma yimuphi umbuzo ophathelene nokucutshungulwa kwedatha yomuntu:
- I-imeyili yobumfihlo: privacy@cashfulness.com
- I-imeyili yosizo evamile: info@cashfulness.com
- I-imeyili eqinisekisiwe (PEC): vittoriogiusti.com@pec.it
- I-imeyili yeposi: Vittorio Giusti srl, Via del Campisano 520, 55054 Massarosa (LU), Italiya
14. Umthetho osebenzayo nesigodi somthetho
Le Nqubomgomo Yobumfihlo ilawulwa wumthetho wase-Italiya ne-Regulation (EU) 2016/679.
Inkantolo enegunya: Lucca, Italiya, ngaphandle kwezimiso ezidingekayo zokuvikela abathengi (Art. 66-bis ye-Italian Consumer Code), lapho umthengi engabhekana khona nenkantolo yendawo yakhe yokuhlala noma i-domicile.